| |
| |||||||
Log-Analyse und Auswertung: Avira meldet Fund und stellt ihn nicht in QuarantäneWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
29.10.2014, 21:32
| #1 |
 |  Avira meldet Fund und stellt ihn nicht in Quarantäne Hallo, Avira meldete vorhin folgenden Fund: TR/Virtool.INF.Autorun.L.41 In der Quarantäne findet sich aber nichts und das Antimalwarebytes findet auch nichts. Leider habe ich vor einigen Wochen meine EC-Karte verloren. Deshalb habe ich gerade etwas Panik das da trotz Sperrung jemand mit Unfug im Internet macht. Ist dieser Fund Grund zur Sorge? Danke und Gruß |
|
29.10.2014, 21:36
| #2 |
| /// the machine /// TB-Ausbilder    | Avira meldet Fund und stellt ihn nicht in Quarantäne Hi,
__________________es wär schon cool zu wissen was wo gefunden wurde. Mit der wagen Info hat das ungefähr den Level von "mein Auto springt nimmer an. Was ist es denn für ein Auto? Ein Blaues." 
__________________ |
|
29.10.2014, 21:42
| #3 |
| | Avira meldet Fund und stellt ihn nicht in Quarantäne Hey,
__________________sorry wenn ich mich gerade bischen anstelle, weiss nicht wo ich die Avira Log Datei finde. Komme mit der neuen Avira Version noch nicht zurecht. Hier ist aber die genaue Pfadbezeichnung die mir die Ereignis Datenbank rausgibt: In der Datei 'C:\Users\flatterratz\AppData\Local\Mozilla\Firefox\Profiles\6hrh7lwx.default\cache2\entries\F0F97FFBCF5B2E12F1D6945BA5BAD153A3AE69FC' wurde ein Virus oder unerwünschtes Programm 'TR/Virtool.INF.Autorun.L.41' [trojan] gefunden. Ausgeführte Aktion: Übergeben an Scanner Der Scanner meldet seit 20:04 Uhr nix mehr neues. Edit: jetzt hab ich es doch gefunden, nochma schnell Sorry Code:
ATTFilter 28.10.2014,09:24:36 [INFO] ---------------------------------------------------------
28.10.2014,09:24:36 [INFO] Engine-Version: 8.3.24.26
28.10.2014,09:24:36 [INFO] VDF-Version: 8.11.165.190
28.10.2014,09:24:36 [INFO] APC-Version: 2.7.1.3
28.10.2014,09:24:36 [INFO] RDF-Version: 14.0.4.46
28.10.2014,09:24:36 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
28.10.2014,09:24:42 [INFO] Der Avira Free Antivirus Dienst wurde erfolgreich gestartet!
28.10.2014,09:25:15 [INFO] Verwendete Konfiguration der Echtzeit-Scanner:
- Geprüfte Dateien: Dateien von lokalen Laufwerken prüfen
- Geprüfte Dateien: Dateierweiterungsliste verwenden: .386 .?HT* .ACM .ADE .ADP .ANI .APK .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CPX .CRT .CSH .DEX .DLL .DLO .DO* .DRV .EMF .EML .EXE* .FAS .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT* .PPAM .PPS* .PPT* .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SLD? .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XAR .XL* .XML .XXX .ZIP
- Gerätemodus: Datei beim Öffnen durchsuchen, Datei nach Schließen durchsuchen
- Aktion: Benutzer fragen
- Archive durchsuchen: Deaktiviert
- Makrovirenheuristik: Aktiviert
- Win32 Dateiheuristik: Erkennungsstufe mittel
- Protokollierungsstufe: Standard
28.10.2014,09:25:18 [INFO] Online-Dienste stehen zur Verfügung.
28.10.2014,09:26:39 [INFO] Verwendete Konfiguration der Echtzeit-Scanner:
- Geprüfte Dateien: Dateien von lokalen Laufwerken prüfen
- Geprüfte Dateien: Dateierweiterungsliste verwenden: .386 .?HT* .ACM .ADE .ADP .ANI .APK .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CPX .CRT .CSH .DEX .DLL .DLO .DO* .DRV .EMF .EML .EXE* .FAS .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT* .PPAM .PPS* .PPT* .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SLD? .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XAR .XL* .XML .XXX .ZIP
- Gerätemodus: Datei beim Öffnen durchsuchen, Datei nach Schließen durchsuchen
- Aktion: Benutzer fragen
- Archive durchsuchen: Deaktiviert
- Makrovirenheuristik: Aktiviert
- Win32 Dateiheuristik: Erkennungsstufe mittel
- Protokollierungsstufe: Standard
28.10.2014,09:32:48 [INFO] Update-Auftrag gestartet!
28.10.2014,09:33:08 [INFO] ---------------------------------------------------------
28.10.2014,09:33:08 [INFO] Engine-Version: 8.3.24.40
28.10.2014,09:33:08 [INFO] VDF-Version: 8.11.165.190
28.10.2014,09:33:08 [INFO] APC-Version: 2.7.1.3
28.10.2014,09:33:08 [INFO] RDF-Version: 14.0.4.46
28.10.2014,09:33:08 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
28.10.2014,17:20:04 [INFO] Der Avira Free Antivirus Dienst wurde beendet!
28.10.2014,17:20:32 [INFO] ---------------------------------------------------------
28.10.2014,17:20:32 [INFO] Engine-Version: 8.3.24.40
28.10.2014,17:20:32 [INFO] VDF-Version: 8.11.165.190
28.10.2014,17:20:32 [INFO] APC-Version: 2.7.1.3
28.10.2014,17:20:32 [INFO] RDF-Version: 14.0.4.46
28.10.2014,17:20:32 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
28.10.2014,17:20:33 [INFO] Der Avira Free Antivirus Dienst wurde erfolgreich gestartet!
28.10.2014,17:20:41 [INFO] Verwendete Konfiguration der Echtzeit-Scanner:
- Geprüfte Dateien: Dateien von lokalen Laufwerken prüfen
- Geprüfte Dateien: Dateierweiterungsliste verwenden: .386 .?HT* .ACM .ADE .ADP .ANI .APK .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CPX .CRT .CSH .DEX .DLL .DLO .DO* .DRV .EMF .EML .EXE* .FAS .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT* .PPAM .PPS* .PPT* .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SLD? .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XAR .XL* .XML .XXX .ZIP
- Gerätemodus: Datei beim Öffnen durchsuchen, Datei nach Schließen durchsuchen
- Aktion: Benutzer fragen
- Archive durchsuchen: Deaktiviert
- Makrovirenheuristik: Aktiviert
- Win32 Dateiheuristik: Erkennungsstufe mittel
- Protokollierungsstufe: Standard
28.10.2014,17:20:42 [INFO] Online-Dienste stehen zur Verfügung.
28.10.2014,23:23:42 [INFO] Update-Auftrag gestartet!
28.10.2014,23:24:14 [INFO] ---------------------------------------------------------
28.10.2014,23:24:14 [INFO] Engine-Version: 8.3.24.40
28.10.2014,23:24:14 [INFO] VDF-Version: 8.11.165.190
28.10.2014,23:24:14 [INFO] APC-Version: 2.7.1.3
28.10.2014,23:24:14 [INFO] RDF-Version: 14.0.4.46
28.10.2014,23:24:14 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
29.10.2014,11:24:15 [INFO] ---------------------------------------------------------
29.10.2014,11:24:15 [INFO] Engine-Version: 8.3.24.40
29.10.2014,11:24:15 [INFO] VDF-Version: 8.11.165.190
29.10.2014,11:24:15 [INFO] APC-Version: 2.7.1.3
29.10.2014,11:24:15 [INFO] RDF-Version: 14.0.4.46
29.10.2014,11:24:15 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
29.10.2014,11:24:15 [INFO] Der Avira Free Antivirus Dienst wurde erfolgreich gestartet!
29.10.2014,11:24:26 [INFO] Verwendete Konfiguration der Echtzeit-Scanner:
- Geprüfte Dateien: Dateien von lokalen Laufwerken prüfen
- Geprüfte Dateien: Dateierweiterungsliste verwenden: .386 .?HT* .ACM .ADE .ADP .ANI .APK .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CPX .CRT .CSH .DEX .DLL .DLO .DO* .DRV .EMF .EML .EXE* .FAS .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT* .PPAM .PPS* .PPT* .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SLD? .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XAR .XL* .XML .XXX .ZIP
- Gerätemodus: Datei beim Öffnen durchsuchen, Datei nach Schließen durchsuchen
- Aktion: Benutzer fragen
- Archive durchsuchen: Deaktiviert
- Makrovirenheuristik: Aktiviert
- Win32 Dateiheuristik: Erkennungsstufe mittel
- Protokollierungsstufe: Standard
29.10.2014,11:24:28 [INFO] Online-Dienste stehen zur Verfügung.
29.10.2014,11:31:18 [INFO] Update-Auftrag gestartet!
29.10.2014,11:31:38 [INFO] ---------------------------------------------------------
29.10.2014,11:31:38 [INFO] Engine-Version: 8.3.24.40
29.10.2014,11:31:38 [INFO] VDF-Version: 8.11.165.190
29.10.2014,11:31:38 [INFO] APC-Version: 2.7.1.3
29.10.2014,11:31:38 [INFO] RDF-Version: 14.0.4.46
29.10.2014,11:31:38 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
29.10.2014,18:23:24 [INFO] Update-Auftrag gestartet!
29.10.2014,18:23:42 [INFO] ---------------------------------------------------------
29.10.2014,18:23:42 [INFO] Engine-Version: 8.3.26.0
29.10.2014,18:23:42 [INFO] VDF-Version: 8.11.165.190
29.10.2014,18:23:42 [INFO] APC-Version: 2.7.1.3
29.10.2014,18:23:42 [INFO] RDF-Version: 14.0.4.46
29.10.2014,18:23:42 [INFO] Echtzeit-Scanner-Version: 14.00.07.220
29.10.2014,20:04:20 [FUND] Ist das Trojanische Pferd TR/Virtool.INF.Autorun.L.41!
C:\Users\flatterratz\AppData\Local\Mozilla\Firefox\Profiles\6hrh7lwx.default\cache2\entries\F0F97FFBCF5B2E12F1D6945BA5BAD153A3AE69FC
29.10.2014,20:33:05 [INFO] Cloud SDK Initialisierung und Lizenz überprüfen erfolgreich.
Gruß Geändert von Flatterratz (29.10.2014 um 21:47 Uhr) |
|
30.10.2014, 17:08
| #4 |
| /// the machine /// TB-Ausbilder | Avira meldet Fund und stellt ihn nicht in Quarantäne hi, Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
31.10.2014, 00:19
| #5 |
| | Avira meldet Fund und stellt ihn nicht in Quarantäne Hey, gleich die Logs, vorher noch ne Frage: Wär der Trojaner auch weg wenn ich das ganze Win7 neu aufsetze? Das schlimmste unter zahlreichen anderen Problemen mit dem Win ist das sich der Aufgabenplanungsdienst nicht mehr einschalten lässt. Habe einen fertig Lappy mit abgeschrubbtem Lizenzaufkleber unten dran. Deshalb bin ich schon seit ein paar Wochen dran mühseelig die Keys auszulesen und noch viel umständlicher ne neue Bootdisc zu erstellen. Muss die Disc jetzt nur noch gebrannt kriegen und dann könnte es losgehen. Gibt es da ne gute Anleitung wie ich die Festplatte formatiere, Daten sichere und es neu installieren kann? und ist es möglich das dieser Rechner 32Bit hat und auf ihm ein Win7 mit 64Bit läuft? FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014
Ran by flatterratz (administrator) on FLATTERRATZ-HP on 30-10-2014 18:57:00
Running from C:\Users\flatterratz\Downloads
Loaded Profile: flatterratz (Available profiles: flatterratz & Feuertanz)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
() C:\Users\flatterratz\Downloads\win7\win7x64sp1.part1.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2013-01-10] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-04-05] (Hewlett-Packard)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [489472 2013-01-10] (IDT, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [7177728 2013-05-30] (Broadcom Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-10-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-08-11] (PDF Complete Inc)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-10-08] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-09-24] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2407356875-34449621-2769195153-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2010-02-22] (Hewlett-Packard Company)
HKU\S-1-5-21-2407356875-34449621-2769195153-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2407356875-34449621-2769195153-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
GroupPolicyUsers\S-1-5-21-2407356875-34449621-2769195153-1001\User: Group Policy restriction detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - Backup.Old.DefaultScope {E38EE736-8F53-4DE1-A867-0E35AD8808F8}
SearchScopes: HKCU - {59F87DB3-BE1B-451E-BC69-551AD34E41F2} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6EE5531F-DBDD-4EDF-8917-10B675B66191} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {D2AD5932-5B7F-4E2E-9C75-FEC802354337} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {DEBC633C-67A2-4F44-9904-F868FE5B2B22} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: WEB.DE Suche
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\abs@avira.com [2014-09-30]
FF Extension: WEB.DE MailCheck - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\toolbar@web.de [2014-09-10]
FF Extension: Ghostery - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\firefox@ghostery.com.xpi [2014-02-12]
FF Extension: ProxTube - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-07-28]
FF Extension: NoScript - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-12]
FF Extension: Gutscheinaffe - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\{9220f99f-5b7d-4a4d-97ca-209991796400}.xpi [2014-02-12]
FF Extension: Adblock Plus - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-15]
FF Extension: Adblock Edge - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2013-10-15]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-08]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [{0ce6ac61-48e9-426f-9268-6f1e8ece06da}] - C:\Program Files (x86)\LyricsSeeker\131.xpi
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\flatterratz\AppData\Roaming\Mozilla\Firefox\Profiles\6hrh7lwx.default\extensions\cliqz@cliqz.com
Chrome:
=======
CHR Profile: C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-01]
CHR Extension: (Google Drive) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-01]
CHR Extension: (YouTube) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-01]
CHR Extension: (Google-Suche) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-01]
CHR Extension: (RealDownloader) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-10-01]
CHR Extension: (Google Wallet) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-01]
CHR Extension: (Google Mail) - C:\Users\flatterratz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-01]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [280120 2010-10-01] (Hewlett-Packard Company)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [File not signed]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-11] (PDF Complete Inc)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [5862400 2013-05-30] (Broadcom Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2012-01-10] (HandSet Incorporated)
S3 massfilter_hs; C:\Windows\SysWOW64\drivers\massfilter_hs.sys [9216 2010-10-20] (HandSet Incorporated)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [96384 2010-05-21] (Realtek Semiconductor Corp.)
S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [129304 2010-10-18] (ZTE Incorporated)
S3 zghsdiag; C:\Windows\SysWOW64\DRIVERS\zghsdiag.sys [113432 2010-10-18] (ZTE Incorporated)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-30 18:57 - 2014-10-30 19:04 - 00022050 _____ () C:\Users\flatterratz\Downloads\FRST.txt
2014-10-30 18:55 - 2014-10-30 18:57 - 00000000 ____D () C:\FRST
2014-10-30 18:54 - 2014-10-30 18:54 - 02113536 _____ (Farbar) C:\Users\flatterratz\Downloads\FRST64.exe
2014-10-30 18:45 - 2014-10-30 18:49 - 00000000 ____D () C:\Users\flatterratz\Downloads\win7
2014-10-30 12:53 - 2014-10-30 12:53 - 00000000 ____D () C:\Users\flatterratz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2014-10-29 20:31 - 2014-10-29 20:32 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\flatterratz\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-28 17:49 - 2014-10-28 17:49 - 00000000 ____D () C:\Users\flatterratz\AppData\Roaming\Avira
2014-10-28 09:32 - 2014-10-28 09:27 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2014-10-28 09:19 - 2014-09-24 12:44 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2014-10-28 09:19 - 2014-09-24 12:44 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2014-10-28 09:19 - 2014-09-24 12:44 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2014-10-28 09:15 - 2014-10-28 09:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-28 09:15 - 2014-10-28 09:18 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-10-28 09:15 - 2014-10-28 09:15 - 00001097 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-10-28 09:15 - 2014-10-28 09:15 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-28 09:01 - 2014-10-28 09:01 - 04714656 _____ (Avira Operations GmbH & Co. KG) C:\Users\flatterratz\Downloads\avira_de_av___ws2015.exe
2014-10-24 11:05 - 2014-10-24 11:05 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore1cfef7214dfa22b.job
2014-10-21 16:19 - 2014-10-21 16:19 - 00017213 _____ () C:\Users\flatterratz\AppData\Local\recently-used.xbel
2014-10-16 11:15 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-10-16 11:14 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2014-10-16 11:14 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-10-16 11:14 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2014-10-16 11:14 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2014-10-16 11:14 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2014-10-16 11:14 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2014-10-16 11:14 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2014-10-16 11:14 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2014-10-16 11:13 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-10-16 11:13 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-10-16 11:13 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-10-16 11:13 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-10-16 11:13 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-10-16 11:13 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-10-16 11:13 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-10-16 11:13 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-10-16 11:13 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-10-16 11:13 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-10-16 11:13 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-10-16 11:13 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-10-16 11:13 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-10-16 11:13 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-10-16 11:13 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-10-16 11:13 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-10-16 11:13 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-10-16 11:13 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-10-16 11:13 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-10-16 11:13 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-10-16 11:13 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-10-16 11:13 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-10-16 11:13 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-10-16 11:13 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-10-16 11:13 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-10-16 11:13 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-10-16 11:13 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-10-16 11:13 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-10-16 11:13 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-10-16 11:13 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-10-16 11:13 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-10-16 11:13 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 11:13 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-10-16 11:13 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-10-16 11:13 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-10-16 11:13 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-10-16 11:13 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-10-16 11:13 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-10-16 11:13 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-10-16 11:13 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-10-16 11:13 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-10-16 11:13 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-10-16 11:13 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-10-16 11:13 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-10-16 11:13 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-10-16 11:13 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-10-16 11:13 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-10-16 11:13 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-10-16 11:13 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-16 11:13 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-10-16 11:13 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-10-16 11:13 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-10-16 11:13 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-10-16 11:13 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-10-16 11:13 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-10-16 11:13 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-10-16 11:13 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-10-16 11:13 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-10-16 11:12 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-10-16 11:12 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-10-16 11:11 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-10-16 11:11 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-10-16 11:11 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-10-16 11:11 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-10-16 11:11 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2014-10-16 11:11 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2014-10-16 11:11 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-10-16 11:11 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-10-16 11:11 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2014-10-16 11:11 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-10-16 11:11 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-10-16 11:11 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2014-10-16 11:11 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2014-10-16 11:09 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-10-16 11:09 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-10-16 11:08 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-10-16 11:08 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-10-01 11:53 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-10-01 11:53 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2014-09-30 16:54 - 2014-09-12 08:52 - 00008682 ____N () C:\Users\flatterratz\overlay.ini
2014-09-30 16:54 - 2014-09-12 08:52 - 00000000 ____N () C:\Users\flatterratz\vorlagen.ini
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-30 18:28 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\tracing
2014-10-30 18:00 - 2009-07-14 05:45 - 00019856 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-30 18:00 - 2009-07-14 05:45 - 00019856 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-30 17:58 - 2011-03-01 13:44 - 01797909 _____ () C:\windows\WindowsUpdate.log
2014-10-30 17:56 - 2010-12-08 23:40 - 00699682 _____ () C:\windows\system32\perfh007.dat
2014-10-30 17:56 - 2010-12-08 23:40 - 00149790 _____ () C:\windows\system32\perfc007.dat
2014-10-30 17:56 - 2009-07-14 06:13 - 01620684 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-30 17:53 - 2010-12-08 23:59 - 00000000 ____D () C:\ProgramData\PDFC
2014-10-30 17:51 - 2012-05-10 23:20 - 00065536 _____ () C:\windows\system32\Ikeext.etl
2014-10-30 17:51 - 2009-07-14 05:51 - 00310201 _____ () C:\windows\setupact.log
2014-10-29 20:34 - 2014-04-03 12:45 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-29 20:33 - 2014-04-03 12:44 - 00001062 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-29 20:33 - 2014-04-03 12:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-10-29 20:33 - 2014-04-03 12:44 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-10-29 14:38 - 2013-06-22 14:26 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-10-29 11:23 - 2011-07-17 04:06 - 02308828 _____ () C:\windows\PFRO.log
2014-10-28 17:53 - 2013-10-01 19:10 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-28 09:18 - 2012-12-21 15:14 - 00000000 ____D () C:\ProgramData\Avira
2014-10-28 08:53 - 2011-07-24 20:31 - 00000000 ____D () C:\Users\flatterratz\AppData\Local\CrashDumps
2014-10-24 11:05 - 2014-06-21 11:09 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore1cf8d38edfa4e8e.job
2014-10-21 16:30 - 2014-09-15 23:45 - 00000000 ____D () C:\Users\flatterratz\.gimp-2.8
2014-10-21 16:29 - 2014-09-11 13:33 - 00000000 ____D () C:\Users\flatterratz\AppData\Local\gtk-2.0
2014-10-21 14:50 - 2014-09-29 19:35 - 00000000 ____D () C:\Users\flatterratz\Documents\Bewerbungsvorlagen
2014-10-17 14:34 - 2014-09-29 19:36 - 00058880 ___SH () C:\Users\flatterratz\Documents\Thumbs.db
2014-10-17 11:35 - 2009-07-14 05:45 - 04974032 _____ () C:\windows\system32\FNTCACHE.DAT
2014-10-17 11:32 - 2014-05-09 00:38 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-10-17 00:55 - 2013-07-29 00:04 - 00000000 ____D () C:\windows\system32\MRT
2014-10-17 00:45 - 2011-09-19 18:09 - 103265616 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-10-15 09:46 - 2014-08-23 11:57 - 00000000 ____D () C:\Users\flatterratz\AppData\Local\Adobe
2014-10-15 09:46 - 2012-08-14 12:46 - 00701104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-10-15 09:46 - 2012-08-14 12:46 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-15 09:46 - 2012-08-14 12:46 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-10-02 18:18 - 2014-09-29 13:27 - 00000000 ____D () C:\Users\Public\Documents\Britta Zeugnisse
2014-10-02 14:53 - 2013-08-31 23:30 - 00278152 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-10-01 11:11 - 2014-04-03 12:44 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-10-01 11:11 - 2014-04-03 12:44 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-10-01 11:11 - 2014-04-03 12:44 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-09-30 16:54 - 2014-09-12 08:52 - 00000244 _____ () C:\Users\flatterratz\medcd.ini
2014-09-30 16:54 - 2011-07-16 20:29 - 00000000 ____D () C:\Users\flatterratz
Some content of TEMP:
====================
C:\Users\Feuertanz\AppData\Local\Temp\avgnt.exe
C:\Users\flatterratz\AppData\Local\Temp\abelssoft.setup.exe
C:\Users\flatterratz\AppData\Local\Temp\avgnt.exe
C:\Users\flatterratz\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2013-06-21 19:05
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2014
Ran by flatterratz at 2014-10-30 19:22:49
Running from C:\Users\flatterratz\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.175 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
AMD Catalyst Install Manager (HKLM\...\{FAF03106-1653-15E1-3C0C-E7AE4FAE6EBF}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Any Video Converter 3.0.1 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira)
AVS Audio Editor 7.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Broadcom 2070 Bluetooth 3.0 (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6300 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: - Broadcom Corporation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - )
Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.)
Canon MX390 series Benutzerregistrierung (HKLM-x32\...\Canon MX390 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MX390 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX390_series) (Version: 1.00 - Canon Inc.)
Canon MX390 series On-screen Manual (HKLM-x32\...\Canon MX390 series On-screen Manual) (Version: 7.6.0 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.)
Cartoon Maker (HKLM-x32\...\Cartoon Maker1.7) (Version: 1.7 - )
ccc-core-static (x32 Version: 2010.0805.358.5180 - ATI) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel Home Office - CS Templates (x32 Version: 5.6.5 - 公司名称) Hidden
Corel Home Office - CT Templates (x32 Version: 5.6.5 - 您的公司名稱) Hidden
Corel Home Office - IPM (x32 Version: 5.6.5 - Corel Corporation) Hidden
Corel Home Office - JP Templates (x32 Version: 5.6.5 - 会社名) Hidden
Corel Home Office - KR Templates (x32 Version: 5.6.5 - 회사명) Hidden
Corel Home Office - Launcher (x32 Version: 5.6.5 - Corel Corporation) Hidden
Corel Home Office - Templates RU (x32 Version: 5.6.5 - Название организации) Hidden
Corel Home Office - Templates1 (x32 Version: 5.6.5 - Your Company Name) Hidden
Corel Home Office (HKLM-x32\...\_{36C95AD3-D330-4BAA-884A-9F3EFD15A5EA}) (Version: 5.0.87.621 - Corel Corporation)
Corel Home Office (x32 Version: 5.6.5 - Corel Corporation) Hidden
CVE-2012-4969 (HKLM\...\{777afb2a-98e5-4f14-b455-378a925cae15}.sdb) (Version: - )
Digitale Bibliothek 4 (HKLM-x32\...\Digitale Bibliothek 4) (Version: - )
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version: - )
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GIMP Extensions 2.8.20140902 (HKLM\...\GIMP Extensions) (Version: 2.8.20140902 - Pedro Cunha)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Earth (HKLM-x32\...\{0A844D8F-A965-11E2-9E77-B8AC6F98CCE3}) (Version: 7.1.1.1580 - Google)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto Vice City (HKLM-x32\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
GTAIII (HKLM-x32\...\{92B94569-6683-4617-8C54-EB27A1B51B30}) (Version: - )
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (HKLM-x32\...\{F097D8DF-B207-4EA1-91A4-A21B8425F9B4}) (Version: 1.5.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{F5F16745-6FCB-4134-83F9-2688ACFF5DC9}) (Version: 1.1.8.1 - Hewlett-Packard Company)
HP HotKey Support (HKLM\...\{014C6C60-4916-48F7-916E-E8048E12E9F1}) (Version: 4.0.3.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{E7C34ED4-BBB6-4C57-9FBD-B29CA5878051}) (Version: 8.5.4371.3505 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{2DA697D7-FED3-4DE2-A174-92A2A12F9688}) (Version: 3.0.5.0 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{04801E42-B1A6-4C52-9F3D-CADB5A050433}) (Version: 7.0.1.6 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Web Camera (Version: 1.0.0 - Hewlett-Packard) Hidden
HP Webcam (HKLM-x32\...\{1D61E881-43CD-447B-9E6B-D2C6138B2862}) (Version: 1.0.25.0 - Roxio)
HP Webcam Driver (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.1.7600.0049 - Realtek Semiconductor Corp.)
HP Wireless Assistant (HKLM\...\{EC720706-3F19-4B7F-BDDD-E31D9B3921D2}) (Version: 4.0.6.0 - Hewlett-Packard)
HUAWEI DataCard Driver 4.20.12.00 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.20.12.00 - Huawei technologies Co., Ltd.)
HydraVision (x32 Version: 4.2.234.0 - Advanced Micro Devices, Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6300.0 - IDT)
LightScribe System Software (HKLM-x32\...\{6AFDE3BE-BC01-45A4-9D06-BBF5AD207313}) (Version: 1.18.12.1 - LightScribe)
Luminance HDR 2.4.0 (HKLM-x32\...\{7020FC34-6E04-4858-924D-354B28CB2402}_is1) (Version: - Luminance HDR Dev Team)
MAGIX Ringtone Maker SE (HKLM-x32\...\MAGIX Ringtone Maker SE D) (Version: 3.1.0.5 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Connection Manager (HKLM-x32\...\o2DE) (Version: - Mobile Connection Manager)
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.64 - PDF Complete, Inc)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.8 - Frank Heindörfer, Philip Chinery)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PreSonus Studio One 2 x64 (HKLM\...\PreSonus Studio One 2) (Version: 2.5.0.20189 - PreSonus Audio Electronics)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0011 - Realtek)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Roxio Creator Business (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3.56.21 - Roxio)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.24.0 - Synaptics Incorporated)
Windows 7 Default Setting (HKLM-x32\...\{5BF8E079-D6E2-4323-B794-75152371122A}) (Version: 1.0.1.7 - Hewlett-Packard Company)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
ZTE Handset USB Driver 5.2066.1.7 (HKLM-x32\...\{22F6126F-60F3-46E3-81AC-8F51CA4074ED}_is1) (Version: 5.2066.1.7 - ZTE Corporation)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
16-10-2014 23:44:17 Windows Update
21-10-2014 10:56:22 Windows Update
28-10-2014 07:52:22 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2013-09-27 20:46 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0CBDA3C1-0F9B-4F47-AA82-EF36D3F06A8D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0E6E9C2E-518A-48DC-80C8-5E3BB7383201} - System32\Tasks\{9334FC2B-4A00-4BBC-B7E3-491D4C920589} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {0F77103D-2B97-4AAC-BDC0-34EA76DE219C} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0F7A87E6-4B6B-4D50-94D0-85147CB76402} - System32\Tasks\{CD92C497-F057-4EFB-BD2C-77E1336D0830} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {14149BCF-CB6B-455A-A9E7-E33F18DB561E} - System32\Tasks\{4565FF3B-A0D1-40D3-A123-F26720B9C8B6} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {1447692E-EE84-4EF9-BF9D-B732965450F2} - System32\Tasks\{FB9FB8DD-26AF-4B1B-914D-C7582EDB87D9} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {1BE711CA-BD09-432C-8B47-745A2791C29C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {1FE44C38-7F69-4C5E-BC19-EDB10F3B167F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {27A035D4-9892-46D0-8C5A-6E899D5A86A2} - \RNUpgradeHelperLogonPrompt_flatterratz No Task File <==== ATTENTION
Task: {31840012-7DD6-4452-9FE4-CFC2E0A3AA5C} - \ReclaimerUpdateFiles_flatterratz No Task File <==== ATTENTION
Task: {42F0903C-3867-457F-9133-2D8280E3FBC0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4753666B-40E0-48FA-BB63-7BC42EEA2A04} - System32\Tasks\Norton Security Scan for flatterratz => C:\PROGRA~2\NORTON~2\Engine\372~1.10\Nss.exe
Task: {498734B4-4EEF-40E9-9D0A-15B52C124C70} - System32\Tasks\{6E1CBBA8-81BC-4420-A7F0-17FE340F74B7} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {4DA9D6A2-549A-4A5D-91FF-7623831DF603} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {52ACA797-5A1C-4277-BC4E-6D185C800220} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {6DAD961C-7C1C-4EBD-A34C-9E9530E2270B} - \RNUpgradeHelperResumePrompt_flatterratz No Task File <==== ATTENTION
Task: {742D99EC-D91B-4C4B-99E7-947FEB76EAAD} - System32\Tasks\{E3C5E10D-12EC-4D98-B997-29151CC8CC14} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {76A2A9EE-30D4-4983-B15D-F2303AD1901C} - System32\Tasks\{EAD82599-DD89-48DC-9EC0-0A57140B12B7} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {7BDAA5ED-C2D0-42B8-9636-83968CE7F161} - System32\Tasks\{8F60B395-B8AE-45E9-8B30-FE52417900B5} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {81D97F45-AA91-478E-8C78-ED950CE34D12} - System32\Tasks\{7104E977-44B5-4D92-83A2-03C7129810B4} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {84B6075E-E55B-44B1-9935-BF415F0DA5FF} - System32\Tasks\{21365FFE-6641-4100-860A-E4E239E98078} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {89C34129-8E85-4A10-979C-E65FEEA5E077} - System32\Tasks\{744ADE5D-2A19-4F27-BEA2-7A12EF23AE72} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {9468010B-5C82-42CD-8642-06F99C44F7C0} - System32\Tasks\{FA6CF3C8-6427-4A34-A0BB-A6C7984D8360} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {9AA6516C-2788-4C9D-B96D-6A193B2F7252} - System32\Tasks\HPCeeScheduleForflatterratz => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {9C5B1464-3FD1-43F5-897B-9EB2433B60AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-01] (Google Inc.)
Task: {A0BE4DB0-FBB2-4797-B406-A0BF89C44357} - \ReclaimerUpdateXML_flatterratz No Task File <==== ATTENTION
Task: {C7EEFFD5-90C5-4637-8262-3CDA3096CBB8} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {CFB3F35D-6C3A-49A0-A46D-3B5CBC15A821} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {D1D83691-5B6A-4A2D-AC08-05EF9A916E83} - System32\Tasks\{AE58DE76-99E1-4397-88DB-7F597D9A4B17} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {D26D9C8A-B0C1-446E-84DF-4B01B9F25157} - System32\Tasks\{FB255FF1-4F9F-4C43-B761-9B9C812B6A18} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.59.119/de/eula?source=lightinstaller
Task: {D685135A-D71F-4A23-9A4D-B4DE5ABF58AB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-08-06] (Microsoft)
Task: {DB233622-4388-4FDA-9D25-F3F7F3ACA368} - System32\Tasks\{60FAA6F2-95A2-4F8E-A1D9-BA192B3B1F2A} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {DDB3C530-3AB4-480A-A5A0-9010B2286209} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {DF92DE66-A077-43E7-9D13-7DD0DBEC3B59} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E603F290-8385-4B7F-A9A0-01DF5EAF5C5F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-01] (Google Inc.)
Task: {E7C3B4C6-89B8-4B0F-8C54-BF2F8301B42F} - System32\Tasks\{3E254D6E-3113-4650-B489-58BD85CA0E12} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {E923ECF2-1382-40F6-A8A2-3947B2D65D94} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-15] (Adobe Systems Incorporated)
Task: {EF25E4FA-B7A4-4E96-91D3-83EB000500F1} - System32\Tasks\{DB5976EB-6171-40FD-B3A7-1036FC1845A6} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {EF89F6DC-0F34-4211-A010-BE460837352D} - System32\Tasks\{6532E3AE-CA32-439A-B265-554D2FF7B3FD} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {F738D8EB-2DFD-4CAD-BEA7-AFA13DC022CF} - System32\Tasks\{294413FC-9000-477C-B9E0-2B30CE9D7CD8} => C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-07-30] (Broadcom Corporation.)
Task: {F9347C75-B571-4C37-8F0A-C1682F57CBF3} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore1cf8d38edfa4e8e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore1cfef7214dfa22b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForflatterratz.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000.job => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: C:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000.job => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: C:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2407356875-34449621-2769195153-1000.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
Task: C:\windows\Tasks\ReclaimerResumeInstall_flatterratz.job => C:\Users\flatterratz\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe
Task: C:\windows\Tasks\Updater scan.job => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
==================== Loaded Modules (whitelisted) =============
2014-09-29 19:38 - 2005-03-12 00:07 - 00087040 _____ () C:\windows\System32\pdfcmnnt.dll
2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2010-07-30 04:39 - 2010-07-30 04:39 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-04-13 01:59 - 2010-04-13 01:59 - 00098304 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-05 12:57 - 2010-08-05 12:57 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-04-05 20:11 - 2010-04-05 20:11 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-04-05 20:12 - 2010-04-05 20:12 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
2010-04-05 20:12 - 2010-04-05 20:12 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2014-10-15 12:14 - 2014-10-15 12:20 - 1600000000 _____ () C:\Users\flatterratz\Downloads\win7\win7x64sp1.part1.exe
2010-02-22 20:19 - 2010-02-22 20:19 - 02121728 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2010-02-22 20:19 - 2010-02-22 20:19 - 07745536 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2010-02-22 20:19 - 2010-02-22 20:19 - 00135168 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2014-09-24 23:43 - 2014-09-24 23:44 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: TkBellExe => "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
========================= Accounts: ==========================
Administrator (S-1-5-21-2407356875-34449621-2769195153-500 - Administrator - Disabled)
Feuertanz (S-1-5-21-2407356875-34449621-2769195153-1001 - Limited - Enabled) => C:\Users\Feuertanz
flatterratz (S-1-5-21-2407356875-34449621-2769195153-1000 - Administrator - Enabled) => C:\Users\flatterratz
Gast (S-1-5-21-2407356875-34449621-2769195153-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2407356875-34449621-2769195153-1003 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/28/2014 08:53:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b
Name des fehlerhaften Moduls: NPSWF32_15_0_0_189.dll, Version: 15.0.0.189, Zeitstempel: 0x54233631
Ausnahmecode: 0x80000003
Fehleroffset: 0x00356efd
ID des fehlerhaften Prozesses: 0x958
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Error: (10/12/2014 07:13:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: atibtmon.exe, Version: 2.0.0.0, Zeitstempel: 0x4a04ab6c
Name des fehlerhaften Moduls: atioglxx.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a8a0dde
Ausnahmecode: 0xc0000005
Fehleroffset: 0x69830910
ID des fehlerhaften Prozesses: 0x1520
Startzeit der fehlerhaften Anwendung: 0xatibtmon.exe0
Pfad der fehlerhaften Anwendung: atibtmon.exe1
Pfad des fehlerhaften Moduls: atibtmon.exe2
Berichtskennung: atibtmon.exe3
Error: (10/09/2014 07:18:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: atibtmon.exe, Version: 2.0.0.0, Zeitstempel: 0x4a04ab6c
Name des fehlerhaften Moduls: atioglxx.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a8a0dde
Ausnahmecode: 0xc0000005
Fehleroffset: 0x69830910
ID des fehlerhaften Prozesses: 0x554
Startzeit der fehlerhaften Anwendung: 0xatibtmon.exe0
Pfad der fehlerhaften Anwendung: atibtmon.exe1
Pfad des fehlerhaften Moduls: atibtmon.exe2
Berichtskennung: atibtmon.exe3
Error: (10/08/2014 03:07:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: atibtmon.exe, Version: 2.0.0.0, Zeitstempel: 0x4a04ab6c
Name des fehlerhaften Moduls: atioglxx.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a8a0dde
Ausnahmecode: 0xc0000005
Fehleroffset: 0x69830910
ID des fehlerhaften Prozesses: 0x1014
Startzeit der fehlerhaften Anwendung: 0xatibtmon.exe0
Pfad der fehlerhaften Anwendung: atibtmon.exe1
Pfad des fehlerhaften Moduls: atibtmon.exe2
Berichtskennung: atibtmon.exe3
Error: (10/08/2014 01:35:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: atibtmon.exe, Version: 2.0.0.0, Zeitstempel: 0x4a04ab6c
Name des fehlerhaften Moduls: atioglxx.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a8a0dde
Ausnahmecode: 0xc0000005
Fehleroffset: 0x69830910
ID des fehlerhaften Prozesses: 0x22c
Startzeit der fehlerhaften Anwendung: 0xatibtmon.exe0
Pfad der fehlerhaften Anwendung: atibtmon.exe1
Pfad des fehlerhaften Moduls: atibtmon.exe2
Berichtskennung: atibtmon.exe3
Error: (09/29/2014 08:21:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rnupgagent.exe, Version: 10.6.0.161, Zeitstempel: 0x541898ae
Name des fehlerhaften Moduls: rnupgagent.exe, Version: 10.6.0.161, Zeitstempel: 0x541898ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000a120
ID des fehlerhaften Prozesses: 0x40c
Startzeit der fehlerhaften Anwendung: 0xrnupgagent.exe0
Pfad der fehlerhaften Anwendung: rnupgagent.exe1
Pfad des fehlerhaften Moduls: rnupgagent.exe2
Berichtskennung: rnupgagent.exe3
Error: (09/29/2014 08:04:13 PM) (Source: MsiInstaller) (EventID: 1013) (User: flatterratz-HP)
Description: Produkt: OpenOffice.org 3.4.1 -- Bitte beenden Sie OpenOffice.org 3.4.1 und den OpenOffice.org 3.4.1-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer OpenOffice.org 3.4.1 geöffnet hat.
Error: (09/29/2014 08:02:01 PM) (Source: MsiInstaller) (EventID: 1013) (User: flatterratz-HP)
Description: Produkt: OpenOffice.org 3.4.1 -- Bitte beenden Sie OpenOffice.org 3.4.1 und den OpenOffice.org 3.4.1-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer OpenOffice.org 3.4.1 geöffnet hat.
Error: (09/28/2014 09:58:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (09/28/2014 09:12:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: atibtmon.exe, Version: 2.0.0.0, Zeitstempel: 0x4a04ab6c
Name des fehlerhaften Moduls: atioglxx.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a8a0dde
Ausnahmecode: 0xc0000005
Fehleroffset: 0x69830910
ID des fehlerhaften Prozesses: 0x6c0
Startzeit der fehlerhaften Anwendung: 0xatibtmon.exe0
Pfad der fehlerhaften Anwendung: atibtmon.exe1
Pfad des fehlerhaften Moduls: atibtmon.exe2
Berichtskennung: atibtmon.exe3
System errors:
=============
Error: (10/30/2014 05:50:57 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (10/30/2014 05:50:57 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (10/30/2014 03:44:24 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Error: (10/30/2014 02:23:54 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (10/30/2014 00:04:31 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (10/29/2014 06:21:23 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.0.11 mit dem Computer mit der
Netzwerkhardwareadresse 4C-0B-3A-CE-BB-23 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.
Error: (10/29/2014 06:21:23 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (10/29/2014 11:23:22 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (10/29/2014 11:23:22 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (10/29/2014 01:12:59 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Microsoft Office Sessions:
=========================
Error: (10/28/2014 08:53:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe32.0.3.537954224e6bNPSWF32_15_0_0_189.dll15.0.0.189542336318000000300356efd95801cff27f8c3f1426C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll79446217-5e77-11e4-adfb-cc52af188330
Error: (10/12/2014 07:13:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: atibtmon.exe2.0.0.04a04ab6catioglxx.dll_unloaded0.0.0.04a8a0ddec000000569830910152001cfe647f42cea1eC:\windows\system32\atibtmon.exeatioglxx.dll758ac724-523b-11e4-aa8c-cc52af188330
Error: (10/09/2014 07:18:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: atibtmon.exe2.0.0.04a04ab6catioglxx.dll_unloaded0.0.0.04a8a0ddec00000056983091055401cfe3ed417b7ec1C:\windows\system32\atibtmon.exeatioglxx.dllaf3acd88-4fe0-11e4-b01f-cc52af188330
Error: (10/08/2014 03:07:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: atibtmon.exe2.0.0.04a04ab6catioglxx.dll_unloaded0.0.0.04a8a0ddec000000569830910101401cfe3011907ed73C:\windows\system32\atibtmon.exeatioglxx.dll77e23515-4ef4-11e4-b5c2-cc52af188330
Error: (10/08/2014 01:35:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: atibtmon.exe2.0.0.04a04ab6catioglxx.dll_unloaded0.0.0.04a8a0ddec00000056983091022c01cfe2f445b768eaC:\windows\system32\atibtmon.exeatioglxx.dll9b32b9cb-4ee7-11e4-b5c2-cc52af188330
Error: (09/29/2014 08:21:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rnupgagent.exe10.6.0.161541898aernupgagent.exe10.6.0.161541898aec00000050000a12040c01cfdc1a7db38613C:\Users\flatterratz\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exeC:\Users\flatterratz\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exec5a19ec0-480d-11e4-af04-cc52af188330
Error: (09/29/2014 08:04:13 PM) (Source: MsiInstaller) (EventID: 1013) (User: flatterratz-HP)
Description: Produkt: OpenOffice.org 3.4.1 -- Bitte beenden Sie OpenOffice.org 3.4.1 und den OpenOffice.org 3.4.1-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer OpenOffice.org 3.4.1 geöffnet hat.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/29/2014 08:02:01 PM) (Source: MsiInstaller) (EventID: 1013) (User: flatterratz-HP)
Description: Produkt: OpenOffice.org 3.4.1 -- Bitte beenden Sie OpenOffice.org 3.4.1 und den OpenOffice.org 3.4.1-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer OpenOffice.org 3.4.1 geöffnet hat.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/28/2014 09:58:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
Error: (09/28/2014 09:12:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: atibtmon.exe2.0.0.04a04ab6catioglxx.dll_unloaded0.0.0.04a8a0ddec0000005698309106c001cfdb4e4605ffcfC:\windows\system32\atibtmon.exeatioglxx.dlld48ba6a8-474b-11e4-b55b-cc52af188330
CodeIntegrity Errors:
===================================
Date: 2013-09-27 21:43:35.621
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-09-27 21:43:35.153
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD V160 Processor
Percentage of memory in use: 78%
Total physical RAM: 1788.56 MB
Available physical RAM: 392.18 MB
Total Pagefile: 3577.13 MB
Available Pagefile: 1300.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive a: (HP_RECOVERY) (Fixed) (Total:15 GB) (Free:3.17 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive c: () (Fixed) (Total:129.16 GB) (Free:31.91 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Daten) (Fixed) (Total:86.42 GB) (Free:40.3 GB) NTFS
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.98 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 01A1A129)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Active) - (Size=300 MB) - (Type=42)
Partition 3: (Not Active) - (Size=129.2 GB) - (Type=42)
Partition 4: (Not Active) - (Size=103.4 GB) - (Type=42)
==================== End Of Log ============================
|
|
31.10.2014, 14:10
| #6 |
| /// the machine /// TB-Ausbilder | Avira meldet Fund und stellt ihn nicht in Quarantäne Ja formatieren überlebt nix. Ist aber hier unnötig. Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Avira meldet Fund und stellt ihn nicht in Quarantäne |
|
04.11.2014, 13:03
| #7 |
| | Avira meldet Fund und stellt ihn nicht in Quarantäne Hey, sorry kein Web gehabt Dank Kabel Deutschland. ja für den Trojaner würde es reichen, die anderen Probleme sind aber wesentlich gravierender. Wie gesagt ohne Aufgabenplanungsdienst muss ich alles manuell sichern, kann nicht defragmentieren, keine Bootdisk oder Datenreparaturträger erstellen und und und. Er lässt sich wirklich nicht mehr einschalten habe alles versucht. Das zweite grosse Problem ist der defekte Display und das ich den Bildschirm nicht kalibrieren kann, ebenso haut was mit den Grafikkartentreibern nicht mehr hin. Nervt sehr wenn man hauptsächlich Bildbearbeitung am PC macht. Habe zudem gerade wieder Augenkrebs von dem schweren Türkis/Rot Stich im Bild. Weiss nur noch nicht wie das genau geht mit Festplatte formatieren. Habt ihr da ne gute Anleitung? Hier noch das letzte Mbam Log ohne Fund. Danke und Gruß Dir Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 02.11.2014 Suchlauf-Zeit: 12:18:40 Logdatei: mbam-log-2.11.14.txt Administrator: Ja Version: 2.00.3.1025 Malware Datenbank: v2014.10.29.07 Rootkit Datenbank: v2014.10.22.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: flatterratz Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 382141 Verstrichene Zeit: 43 Min, 57 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) |
|
04.11.2014, 20:54
| #8 |
| /// the machine /// TB-Ausbilder | Avira meldet Fund und stellt ihn nicht in Quarantäne Schau mal hier: http://www.trojaner-board.de/104197-...anleitung.html
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Avira meldet Fund und stellt ihn nicht in Quarantäne |
| antimalwarebytes, avira, folge, folgende, folgenden, fund, grund, inter, interne, internet, melde, meldet, nichts, panik, quara, quarantäne, sorge, sperrung, trotz, woche, wochen |
Linear-Darstellung
