| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 7 mit schwarzem Bildschirm ohne Taskleiste 2Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
07.12.2014, 15:02
| #1 |
| |  Windows 7 mit schwarzem Bildschirm ohne Taskleiste 2 Hallo liebe Forenmitglieder, ich weiß, das Problem wurde gerade erst besprochen aber da ich leider bei dem Tread nicht direkt Antworten konnte muss ich leider einen Neuen aufmachen. Leider habe ich mir letzte Woche auch einen Programm geladen und da zu noch ein paar unerwünschte dazu bekommen. Damit ich die gleich wieder los werde habe ich diese mit Revo Uninstaler gleich wieder löschen wollen. Das Ergebnis war leider, das der Bildschirm/Desktop seit dem schwarz ist und ich nur noch das Fenster vom Arbeitsplatz geöffnet habe. Mein erster Verdacht war, dass ich vielleicht etwas von Windows mit gelöscht haben könnte. Daher habe ich zu erst das System wieder zurücksetzten lassen, dann Windows versucht zu reperieren auch über CD. Hat leider nichts geholfen. Dan habe ich den Tread hier gefunden und fleißig mit gemacht soweit ich es als unwissendes Wessen hinbekommen habe. Geholfen hat es leider auch nicht, daher frage ich nun euch doch noch direkt um Hilfe an. Also die erste Meldung von FRST sah wie folgt aus: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2014 Ran by Nini (administrator) on JANINE-PC on 07-12-2014 09:42:34 Running from E:\ Loaded Profile: Nini (Available profiles: Janine & UpdatusUser & Nini & Administrator & Gast) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762224 2009-06-30] (Microsoft Corporation) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG) HKLM\...\RunOnce: [*Restore] => C:\Windows\System32\rstrui.exe [296960 2010-11-20] (Microsoft Corporation) HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe [851632 2014-07-20] (Adobe Systems Incorporated) HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\MountPoints2: {7c691095-9f5c-11e2-8bba-001fd0946bf9} - E:\pushinst.exe HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\MountPoints2: {983e5de1-bf15-11de-a9df-c0648ec021b2} - E:\LaunchU3.exe -a Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk ShortcutTarget: FRITZ!DSL Startcenter.lnk -> C:\Users\Janine\AppData\Roaming\Microsoft\Installer\{2D5D9603-22CF-4B99-83F6-0CD20330F62E}\Icon8CF9C550.exe () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [S-1-5-21-507852487-1521238306-3764321456-1004] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-507852487-1521238306-3764321456-1004] => http=127.0.0.1:49173;https=127.0.0.1:49173 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFB04E8402B7DCE01 HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\S-1-5-21-507852487-1521238306-3764321456-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Feven Pro 1.2 -> {11111111-1111-1111-1111-110511161182} -> No File BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> c:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: TrustMediaViewerV1alpha5271 -> {de489fd6-d184-4eb2-b980-d3e8f71c6e45} -> C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha5271\ie\TrustMediaViewerV1alpha5271x64.dll () BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: BlockAndSurf -> {C29E789C-DCB6-4B82-88C0-D5046D2C8FF6} -> C:\Program Files (x86)\di8BlockAndSurf\175.dll No File BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 07 C:\Program Files (x86)\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin) Winsock: Catalog5-x64 07 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin) Hosts: 127.0.0.1 activate.adobe.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> C:\Program Files (x86)\TVUPlayer\npTVUAx.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF user.js: detected! => C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\user.js FF Extension: Adblock Plus - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-05] FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2011-08-10] FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-08-10] FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta2061.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta2061\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha501.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha501\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha216.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha216\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha329.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha329\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha4611.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4611\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home63.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home63\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaBuzzV1mode1096.net] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode1096\ff FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release5650.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release5650\ff FF HKLM-x32\...\Firefox\Extensions: [ext@TrustMediaViewerV1alpha5271.net] - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha5271\ff FF Extension: Trust Media Viewer - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha5271\ff [2014-06-28] FF HKLM-x32\...\Firefox\Extensions: [termtutor@termtutor.com] - C:\Program Files (x86)\Mozilla FireFox\extensions\termtutor@termtutor.com FF HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\Firefox\Extensions: [{39207FA9-632F-58D1-AE46-2F7C370FBF59}] - C:\Program Files (x86)\di8BlockAndSurf\175.xpi FF Extension: No Name - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\extensions\e49d3f99-7c89-4eb4-99f3-ff903e2189b2@5288754a-7a48-41a0-a10f-e98c9ac12040.com [Not Found] FF Extension: No Name - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com [Not Found] FF Extension: No Name - C:\Program Files\Nightly\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: ======= CHR HomePage: Default -> CHR Profile: C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default CHR Extension: (Google Docs) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-11] CHR Extension: (Google Drive) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-11] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07] CHR Extension: (YouTube) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-11] CHR Extension: (Adblock Plus) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-05] CHR Extension: (Google-Suche) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-11] CHR Extension: (Trust Media Viewer) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\inleambckaaohcdcbmhnbklmakeccnei [2014-06-28] CHR Extension: (BlockAndSurf) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\jlkgbgijaaodbhoacnechcehepdfganc [2014-07-15] CHR Extension: (Google Wallet) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-11] CHR Extension: (Google Mail) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-11] CHR HKLM-x32\...\Chrome\Extension: [bcpbcngonbobipkhkdkfffkgpmnmeola] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release5650\ch\RichMediaViewV1release5650.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [bgnnkhlplihnikcljmlfleknmajpdieg] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta2061\ch\VideoPlayerV3beta2061.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [bjhjcbjpdohojlfpalfnediiibbdkabh] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode1096\ch\MediaBuzzV1mode1096.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [dopemniaeocfenlpnoannaefnhfcjcgi] - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Extensions\searchswitch.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [ejgjpkdliopkjhenfaioejboibiagbcc] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha216\ch\MediaViewerV1alpha216.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [gmpcjdhphhdfnflcgpgeneojihpojidm] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4611\ch\MediaViewV1alpha4611.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [goodaalebnjpdnjgbjpbbllmmphdbgmi] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha329\ch\MediaViewV1alpha329.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [inleambckaaohcdcbmhnbklmakeccnei] - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha5271\ch\TrustMediaViewerV1alpha5271.crx [2014-06-26] CHR HKLM-x32\...\Chrome\Extension: [lehbeodgjfnoeiaonejbbdeebmmknjlj] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home63\ch\MediaWatchV1home63.crx [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S4 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG) S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] S4 IGDCTRL; C:\Program Files\FRITZ!DSL\IGDCTRL.EXE [88888 2009-07-28] (AVM Berlin) S4 LicCtrlService; C:\Windows\runservice.exe [2560 2011-07-17] () [File not signed] S4 OS Selector; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2010-05-25] () S4 PCSUService; C:\Program Files (x86)\PC Speed Up\PCSUService.exe [430888 2014-08-08] () S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-03-25] () S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-12] (Brother Industries Ltd.) [File not signed] S3 BrUsbSer; C:\Windows\System32\DRIVERS\BrUsbSer.sys [19584 2006-09-02] (Brother Industries Ltd.) [File not signed] R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-03-17] () S3 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-15] (CACE Technologies, Inc.) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S1 ttnfd; system32\drivers\ttnfd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-07 09:42 - 2014-12-07 09:42 - 00000000 ____D () C:\FRST 2014-12-06 14:01 - 2014-12-06 14:01 - 00006144 ____N () C:\bootex.log 2014-12-06 14:01 - 2014-12-06 14:01 - 00003560 ____N () C:\bootsqm.dat 2014-12-06 11:10 - 2014-12-06 11:10 - 00000000 ____D () C:\OETemp 2014-12-06 10:13 - 2014-12-06 10:13 - 00003318 _____ () C:\Users\Nini\Desktop\Windows-Kompatibilitätsbericht.htm 2014-12-06 08:50 - 2014-12-06 10:20 - 00002562 _____ () C:\Windows\diagwrn.xml 2014-12-06 08:50 - 2014-12-06 10:20 - 00001908 _____ () C:\Windows\diagerr.xml 2014-11-29 16:19 - 2014-12-06 09:09 - 00000338 _____ () C:\Windows\Tasks\PC SpeedUp Service Deactivator.job 2014-11-29 16:19 - 2014-11-30 19:46 - 00000000 ____D () C:\Program Files (x86)\Search Extensions 2014-11-29 16:19 - 2014-11-29 16:19 - 00004324 _____ () C:\Windows\System32\Tasks\RocketTab Update Task 2014-11-29 16:19 - 2014-11-29 16:19 - 00003538 _____ () C:\Windows\System32\Tasks\RocketTab 2014-11-29 16:19 - 2014-11-29 16:19 - 00002718 _____ () C:\Windows\System32\Tasks\PC SpeedUp Service Deactivator 2014-11-29 16:18 - 2014-11-30 00:47 - 00000000 ____D () C:\Program Files (x86)\PC Speed Up 2014-11-29 16:18 - 2014-11-29 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Up 2014-11-23 14:12 - 2014-11-23 14:12 - 00349944 _____ () C:\Users\Nini\Downloads\Nicht bestätigt 867825.crdownload 2014-11-19 22:16 - 2014-11-19 22:16 - 00049525 _____ () C:\Users\Nini\Downloads\Liste- Schulen - Tag der offenen Tür (2) 2014-11-10 19:29 - 2014-11-10 19:29 - 00049525 _____ () C:\Users\Nini\Downloads\Liste- Schulen - Tag der offenen Tür (1) 2014-11-10 19:25 - 2014-11-10 19:25 - 00049525 _____ () C:\Users\Nini\Downloads\Liste- Schulen - Tag der offenen Tür 2014-11-08 09:58 - 2014-12-06 11:06 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-11-08 09:58 - 2014-11-08 09:58 - 00000000 ____D () C:\ProgramData\374311380 2014-11-08 09:56 - 2014-11-08 09:56 - 00000000 ____D () C:\Users\Nini\Documents\Optimizer Pro 2014-11-08 09:51 - 2014-12-06 10:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla FireFox 2014-11-08 08:59 - 2014-12-06 11:09 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes 2014-11-08 08:59 - 2014-11-29 16:50 - 00000125 ___SH () C:\ProgramData\.zreglib ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-07 09:40 - 2013-04-04 19:27 - 00000000 ____D () C:\Users\Nini\AppData\Roaming\vlc 2014-12-07 09:03 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-07 09:03 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-07 08:56 - 2014-01-29 16:11 - 00002096 __RSH () C:\ProgramData\ntuser.pol 2014-12-06 15:32 - 2013-08-15 08:15 - 00000000 ____D () C:\Users\Nini\AppData\Local\TubeBox 2014-12-06 15:32 - 2013-01-12 10:55 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-06 15:32 - 2013-01-12 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freetec 2014-12-06 15:22 - 2009-10-22 11:48 - 01786125 _____ () C:\Windows\WindowsUpdate.log 2014-12-06 15:20 - 2013-11-12 20:07 - 00001264 _____ () C:\Users\Nini\Desktop\Revo Uninstaller.lnk 2014-12-06 15:20 - 2013-01-12 10:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-12-06 10:54 - 2013-08-15 07:34 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-12-06 10:54 - 2010-03-08 06:07 - 00869324 _____ () C:\Windows\PFRO.log 2014-12-06 10:51 - 2013-08-15 07:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-12-06 10:51 - 2012-09-08 06:18 - 00000000 ____D () C:\ProgramData\Avira 2014-12-06 10:21 - 2013-04-03 14:02 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-06 10:21 - 2011-07-17 07:06 - 00000609 ___SH () C:\Windows\SysWOW64\mmf.sys 2014-12-06 10:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-06 10:21 - 2009-07-14 05:51 - 00001197 _____ () C:\Windows\setupact.log 2014-12-06 09:36 - 2013-04-03 14:02 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-06 08:50 - 2009-07-14 05:51 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-06 08:39 - 2009-07-14 18:58 - 00653928 _____ () C:\Windows\system32\perfh007.dat 2014-12-06 08:39 - 2009-07-14 18:58 - 00129800 _____ () C:\Windows\system32\perfc007.dat 2014-12-06 08:39 - 2009-07-14 06:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-01 16:14 - 2013-04-04 19:27 - 00000000 ____D () C:\Users\Nini\AppData\Roaming\dvdcss 2014-11-30 00:53 - 2009-10-22 11:54 - 00000000 __SHD () C:\Recovery 2014-11-30 00:48 - 2013-04-02 20:00 - 00000000 ____D () C:\Users\Nini 2014-11-30 00:47 - 2013-04-02 15:02 - 00000000 ____D () C:\Users\Gast 2014-11-30 00:47 - 2013-03-25 13:11 - 00000000 ____D () C:\Users\Administrator 2014-11-30 00:47 - 2011-11-08 10:15 - 00000000 ____D () C:\Program Files (x86)\JLC's Software 2014-11-30 00:47 - 2010-11-22 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis 2014-11-30 00:47 - 2010-11-22 11:53 - 00000000 ____D () C:\Program Files (x86)\Acronis 2014-11-30 00:47 - 2009-10-22 11:54 - 00000000 ____D () C:\Users\Janine 2014-11-30 00:47 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-11-25 23:39 - 2014-03-11 17:14 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-11-19 22:39 - 2010-04-02 13:42 - 00000034 _____ () C:\Windows\cdplayer.ini 2014-11-15 11:31 - 2013-04-03 14:02 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-15 11:31 - 2013-04-03 14:02 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-11-08 09:58 - 2014-07-08 18:29 - 00000000 ____D () C:\ProgramData\SlySoft Some content of TEMP: ==================== C:\Users\Janine\AppData\Local\Temp\AskSLib.dll C:\Users\Janine\AppData\Local\Temp\drm_dyndata_7380009.dll C:\Users\Janine\AppData\Local\Temp\drm_dyndata_7390004.dll C:\Users\Janine\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Janine\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe C:\Users\Janine\AppData\Local\Temp\wajam_install.exe C:\Users\Janine\AppData\Local\Temp\xmlUpdater.exe C:\Users\Nini\AppData\Local\Temp\3P9LLoading.EXE C:\Users\Nini\AppData\Local\Temp\avgnt.exe C:\Users\Nini\AppData\Local\Temp\DownloadManager.exe C:\Users\Nini\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Nini\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Nini\AppData\Local\Temp\htmlayout.dll C:\Users\Nini\AppData\Local\Temp\Player_Setup(1).exe C:\Users\Nini\AppData\Local\Temp\PreExe_ID_13296.exe C:\Users\Nini\AppData\Local\Temp\Quarantine.exe C:\Users\Nini\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Nini\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Nini\AppData\Local\Temp\SecurityUtility.exe C:\Users\Nini\AppData\Local\Temp\Setup(1).exe C:\Users\Nini\AppData\Local\Temp\Setup.exe C:\Users\Nini\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Nini\AppData\Local\Temp\System.Data.SQLiteea1b056f-d1e3-4476-b0b2-a3fd3cf497df.dll C:\Users\Nini\AppData\Local\Temp\tmp90E8.exe C:\Users\Nini\AppData\Local\Temp\toolbar377900.exe C:\Users\Nini\AppData\Local\Temp\toolbar378944.exe C:\Users\Nini\AppData\Local\Temp\toolbar455739.exe C:\Users\Nini\AppData\Local\Temp\uninstall-updater1453169.exe C:\Users\Nini\AppData\Local\Temp\uninstall.exe C:\Users\Nini\AppData\Local\Temp\uninstall1472504.exe C:\Users\Nini\AppData\Local\Temp\uninstall1472597.exe C:\Users\Nini\AppData\Local\Temp\uninstall1515164.exe C:\Users\Nini\AppData\Local\Temp\uninstall1525700.exe C:\Users\Nini\AppData\Local\Temp\uninstall1525747.exe C:\Users\Nini\AppData\Local\Temp\vp.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-06 09:08 ==================== End Of Log ============================ Diese Komische Speed UP Programm hat mir das Uninstalprogramm leider nicht angezeigt, daher habe ich es so versucht zu löschen. Mit wenig Erfolg wie es scheint. Die Ausgabe von AdwCleaner sah wie folgt aus: # AdwCleaner v4.104 - Bericht erstellt am 07/12/2014 um 10:38:14 # Aktualisiert 05/12/2014 von Xplode # Database : 2014-12-01.1 [Local] # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzername : Nini - JANINE-PC # Gestartet von : E:\AdwCleaner_4.104.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : pcsuservice ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\apn Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pc speed up Ordner Gelöscht : C:\Program Files (x86)\pc speed up Ordner Gelöscht : C:\Users\Nini\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp Ordner Gelöscht : C:\Users\Nini\Documents\Optimizer Pro Ordner Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlkgbgijaaodbhoacnechcehepdfganc [/!\] Nicht Gelöscht ( Junction ) : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlkgbgijaaodbhoacnechcehepdfganc Datei Gelöscht : C:\Users\Nini\AppData\Local\Temp\Uninstall.exe Datei Gelöscht : C:\Windows\System32\drivers\webinstr.sys Datei Gelöscht : C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\user.js Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage Datei Gelöscht : C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal ***** [ Tasks ] ***** Task Gelöscht : PC SpeedUp Service Deactivator Task Gelöscht : RocketTab Update Task Task Gelöscht : RocketTab ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{39207FA9-632F-58D1-AE46-2F7C370FBF59}] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} Schlüssel Gelöscht : HKCU\Software\Boost Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Optimizer Pro Schlüssel Gelöscht : HKCU\Software\Speedchecker Limited Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} Schlüssel Gelöscht : HKLM\SOFTWARE\Boost Schlüssel Gelöscht : HKLM\SOFTWARE\Speedchecker Limited Schlüssel Gelöscht : HKLM\SOFTWARE\TermTutor Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Speedchecker Limited Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9 ***** [ Browser ] ***** -\\ Internet Explorer v9.0.8112.16421 -\\ Mozilla Firefox v20.0.1 (de) [mnz40fks.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com"); [mnz40fks.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Ask.com"); [mnz40fks.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com"); -\\ Google Chrome v39.0.2171.71 ************************* AdwCleaner[R0].txt - [34257 octets] - [31/07/2014 12:50:04] AdwCleaner[R1].txt - [10544 octets] - [07/12/2014 10:08:48] AdwCleaner[R2].txt - [7595 octets] - [07/12/2014 10:35:54] AdwCleaner[S0].txt - [30521 octets] - [31/07/2014 12:51:21] AdwCleaner[S1].txt - [7129 octets] - [07/12/2014 10:38:14] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7189 octets] ########## Junkeware Removal hat mir das folgende ausgegeben: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.0 (11.29.2014:1) OS: Windows 7 Professional x64 Ran by Nini on 07.12.2014 at 10:42:19,16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update greygray Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util greygray Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9" ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 07.12.2014 at 10:45:13,19 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MBAM habe ich zwar gemacht aber die Txt. Datei vergessen zu speichen. Schuldigung. Danach sah das FRST wie folgt aus: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 01 Ran by Nini (administrator) on JANINE-PC on 07-12-2014 11:29:25 Running from E:\ Loaded Profile: Nini (Available profiles: Janine & UpdatusUser & Nini & Administrator & Gast) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762224 2009-06-30] (Microsoft Corporation) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG) HKLM\...\RunOnce: [*Restore] => C:\Windows\System32\rstrui.exe [296960 2010-11-20] (Microsoft Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation) HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe [851632 2014-07-20] (Adobe Systems Incorporated) HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S1].txt HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\MountPoints2: {7c691095-9f5c-11e2-8bba-001fd0946bf9} - E:\pushinst.exe HKU\S-1-5-21-507852487-1521238306-3764321456-1004\...\MountPoints2: {983e5de1-bf15-11de-a9df-c0648ec021b2} - E:\LaunchU3.exe -a Startup: C:\Users\Janine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk ShortcutTarget: FRITZ!DSL Startcenter.lnk -> C:\Users\Janine\AppData\Roaming\Microsoft\Installer\{2D5D9603-22CF-4B99-83F6-0CD20330F62E}\Icon8CF9C550.exe () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [S-1-5-21-507852487-1521238306-3764321456-1004] => Internet Explorer proxy is enabled. ProxyServer: [S-1-5-21-507852487-1521238306-3764321456-1004] => http=127.0.0.1:49173;https=127.0.0.1:49173 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFB04E8402B7DCE01 HKU\S-1-5-21-507852487-1521238306-3764321456-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\S-1-5-21-507852487-1521238306-3764321456-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> c:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 07 C:\Program Files (x86)\FRITZ!DSL\\sarah.dll [28472] (AVM Berlin) Winsock: Catalog5-x64 07 %ProgramFiles%\FRITZ!DSL\\sarah.dll [34104] (AVM Berlin) Hosts: 127.0.0.1 activate.adobe.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> C:\Program Files (x86)\TVUPlayer\npTVUAx.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Adblock Plus - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-05] FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2011-08-10] FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-08-10] FF Extension: No Name - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\extensions\e49d3f99-7c89-4eb4-99f3-ff903e2189b2@5288754a-7a48-41a0-a10f-e98c9ac12040.com [Not Found] FF Extension: No Name - C:\Users\Nini\AppData\Roaming\Mozilla\Firefox\Profiles\rb99wklk.default-1388954994189\extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com [Not Found] FF Extension: No Name - C:\Program Files\Nightly\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: ======= CHR HomePage: Default -> CHR Profile: C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default CHR Extension: (Google Docs) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-11] CHR Extension: (Google Drive) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-11] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07] CHR Extension: (YouTube) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-11] CHR Extension: (Adblock Plus) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-04-05] CHR Extension: (Google-Suche) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-11] CHR Extension: (Trust Media Viewer) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\inleambckaaohcdcbmhnbklmakeccnei [2014-06-28] CHR Extension: (Google Wallet) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-11] CHR Extension: (Google Mail) - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-11] CHR HKLM-x32\...\Chrome\Extension: [bcpbcngonbobipkhkdkfffkgpmnmeola] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release5650\ch\RichMediaViewV1release5650.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [bgnnkhlplihnikcljmlfleknmajpdieg] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta2061\ch\VideoPlayerV3beta2061.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [bjhjcbjpdohojlfpalfnediiibbdkabh] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode1096\ch\MediaBuzzV1mode1096.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [dopemniaeocfenlpnoannaefnhfcjcgi] - C:\Users\Nini\AppData\Local\Google\Chrome\User Data\Default\Extensions\searchswitch.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [ejgjpkdliopkjhenfaioejboibiagbcc] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha216\ch\MediaViewerV1alpha216.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [gmpcjdhphhdfnflcgpgeneojihpojidm] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4611\ch\MediaViewV1alpha4611.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [goodaalebnjpdnjgbjpbbllmmphdbgmi] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha329\ch\MediaViewV1alpha329.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [inleambckaaohcdcbmhnbklmakeccnei] - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha5271\ch\TrustMediaViewerV1alpha5271.crx [Not Found] CHR HKLM-x32\...\Chrome\Extension: [lehbeodgjfnoeiaonejbbdeebmmknjlj] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home63\ch\MediaWatchV1home63.crx [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) ATTENTION: => Could not perform signature verification. Cryptographic Service is not running. S4 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG) S4 IGDCTRL; C:\Program Files\FRITZ!DSL\IGDCTRL.EXE [88888 2009-07-28] (AVM Berlin) S4 LicCtrlService; C:\Windows\runservice.exe [2560 2011-07-17] () S4 OS Selector; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2010-05-25] () S2 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-03-25] () S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-12] (Brother Industries Ltd.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-03-17] () S3 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-15] (CACE Technologies, Inc.) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-07 11:28 - 2014-12-07 11:29 - 00000000 ____D () C:\FRST 2014-12-07 11:24 - 2014-12-07 11:24 - 00000492 _____ () C:\DelFix.txt 2014-12-07 10:42 - 2014-12-07 10:42 - 00000000 ____D () C:\Windows\ERUNT 2014-12-07 10:31 - 2014-12-07 11:25 - 00000000 ____D () C:\Users\Nini\rechner wieder Her 2014-12-07 10:10 - 2014-12-07 10:34 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-07 10:09 - 2014-12-07 10:09 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-12-07 10:09 - 2014-12-07 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-12-07 10:09 - 2014-12-07 10:09 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-12-07 10:09 - 2014-12-07 10:09 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-12-07 10:09 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-07 10:09 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-12-07 10:09 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-12-06 14:01 - 2014-12-06 14:01 - 00003560 ____N () C:\bootsqm.dat 2014-12-06 11:10 - 2014-12-06 11:10 - 00000000 ____D () C:\OETemp 2014-12-06 10:13 - 2014-12-06 10:13 - 00003318 _____ () C:\Users\Nini\Desktop\Windows-Kompatibilitätsbericht.htm 2014-12-06 08:50 - 2014-12-06 10:20 - 00002562 _____ () C:\Windows\diagwrn.xml 2014-12-06 08:50 - 2014-12-06 10:20 - 00001908 _____ () C:\Windows\diagerr.xml 2014-11-08 09:58 - 2014-12-06 11:06 - 00000000 ____D () C:\Program Files (x86)\SlySoft 2014-11-08 09:51 - 2014-12-06 10:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla FireFox 2014-11-08 08:59 - 2014-12-06 11:09 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes 2014-11-08 08:59 - 2014-11-29 16:50 - 00000125 ___SH () C:\ProgramData\.zreglib ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-07 11:23 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-07 11:23 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-07 11:17 - 2013-04-03 14:02 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-07 11:16 - 2014-01-29 16:11 - 00002096 __RSH () C:\ProgramData\ntuser.pol 2014-12-07 11:16 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-07 10:39 - 2010-03-08 06:07 - 00905658 _____ () C:\Windows\PFRO.log 2014-12-07 10:37 - 2013-04-03 14:02 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-07 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA 2014-12-07 10:31 - 2013-04-02 20:00 - 00000000 ____D () C:\Users\Nini 2014-12-07 09:40 - 2013-04-04 19:27 - 00000000 ____D () C:\Users\Nini\AppData\Roaming\vlc 2014-12-06 15:32 - 2013-08-15 08:15 - 00000000 ____D () C:\Users\Nini\AppData\Local\TubeBox 2014-12-06 15:32 - 2013-01-12 10:55 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-06 15:32 - 2013-01-12 10:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freetec 2014-12-06 15:22 - 2009-10-22 11:48 - 01786125 _____ () C:\Windows\WindowsUpdate.log 2014-12-06 15:20 - 2013-11-12 20:07 - 00001264 _____ () C:\Users\Nini\Desktop\Revo Uninstaller.lnk 2014-12-06 15:20 - 2013-01-12 10:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-12-06 10:54 - 2013-08-15 07:34 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-12-06 10:51 - 2013-08-15 07:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-12-06 10:51 - 2012-09-08 06:18 - 00000000 ____D () C:\ProgramData\Avira 2014-12-06 10:21 - 2011-07-17 07:06 - 00000609 ___SH () C:\Windows\SysWOW64\mmf.sys 2014-12-06 10:21 - 2009-07-14 05:51 - 00001197 _____ () C:\Windows\setupact.log 2014-12-06 08:50 - 2009-07-14 05:51 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-06 08:39 - 2009-07-14 18:58 - 00653928 _____ () C:\Windows\system32\perfh007.dat 2014-12-06 08:39 - 2009-07-14 18:58 - 00129800 _____ () C:\Windows\system32\perfc007.dat 2014-12-06 08:39 - 2009-07-14 06:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-01 16:14 - 2013-04-04 19:27 - 00000000 ____D () C:\Users\Nini\AppData\Roaming\dvdcss 2014-11-30 00:53 - 2009-10-22 11:54 - 00000000 __SHD () C:\Recovery 2014-11-30 00:47 - 2013-04-02 15:02 - 00000000 ____D () C:\Users\Gast 2014-11-30 00:47 - 2013-03-25 13:11 - 00000000 ____D () C:\Users\Administrator 2014-11-30 00:47 - 2011-11-08 10:15 - 00000000 ____D () C:\Program Files (x86)\JLC's Software 2014-11-30 00:47 - 2010-11-22 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis 2014-11-30 00:47 - 2010-11-22 11:53 - 00000000 ____D () C:\Program Files (x86)\Acronis 2014-11-30 00:47 - 2009-10-22 11:54 - 00000000 ____D () C:\Users\Janine 2014-11-30 00:47 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-11-25 23:39 - 2014-03-11 17:14 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-11-19 22:39 - 2010-04-02 13:42 - 00000034 _____ () C:\Windows\cdplayer.ini 2014-11-15 11:31 - 2013-04-03 14:02 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-15 11:31 - 2013-04-03 14:02 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-11-08 09:58 - 2014-07-08 18:29 - 00000000 ____D () C:\ProgramData\SlySoft Some content of TEMP: ==================== C:\Users\Janine\AppData\Local\Temp\AskSLib.dll C:\Users\Janine\AppData\Local\Temp\drm_dyndata_7380009.dll C:\Users\Janine\AppData\Local\Temp\drm_dyndata_7390004.dll C:\Users\Janine\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Janine\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe C:\Users\Janine\AppData\Local\Temp\xmlUpdater.exe C:\Users\Nini\AppData\Local\Temp\avgnt.exe C:\Users\Nini\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Nini\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Nini\AppData\Local\Temp\htmlayout.dll C:\Users\Nini\AppData\Local\Temp\Player_Setup(1).exe C:\Users\Nini\AppData\Local\Temp\Quarantine.exe C:\Users\Nini\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Nini\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Nini\AppData\Local\Temp\Setup(1).exe C:\Users\Nini\AppData\Local\Temp\Setup.exe C:\Users\Nini\AppData\Local\Temp\sqlite3.dll C:\Users\Nini\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Nini\AppData\Local\Temp\System.Data.SQLiteea1b056f-d1e3-4476-b0b2-a3fd3cf497df.dll C:\Users\Nini\AppData\Local\Temp\tmp90E8.exe C:\Users\Nini\AppData\Local\Temp\uninstall1472504.exe C:\Users\Nini\AppData\Local\Temp\uninstall1525700.exe C:\Users\Nini\AppData\Local\Temp\uninstall1525747.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-12-06 09:08 ==================== End Of Log ============================ Zu guter Letzt noch der Auszug aus Delfix. Das ESET Online Scanne Programm konnte ich leider nicht nutzen. Dazu muss ich Online gehen und die Internetverbindung funktioniert leider zur Zeit auch nicht. Wobei ich nicht weiß ob ich durch meine Klickerrei hier das erst verursacht habe. Zumindest habe ich letzte Woche noch Ton gehabt, jetzt leider nicht mehr.  So jetzt noch der Auszug von Delfix. # DelFix v10.8 - Datei am 07/12/2014 um 13:53:02 erstellt # Aktualisiert am 29/07/2014 von Xplode # Benutzer : Nini - JANINE-PC # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) ~ Aktiviere die Benutzerkontensteuerung ... OK ~ Entferne die Bereinigungsprogramme ... Gelöscht : C:\FRST ~ Erstelle ein Backup der Registrierungsdatenbank ... OK ~ Lösche die Wiederherstellungspunkte ... Ein neuer Wiederherstellungspunkt wurde erstellt ! ~ Stelle die Systemeinstellungen wieder her ... OK ########## - EOF - ########## Das wars erst mal. Wie gesagt geholfen hat es bisher nicht. Falls Ihr noch eine Idee habt würde ich mich freuen und bedank mich schon mal im Vorraus.  |
| Themen zu Windows 7 mit schwarzem Bildschirm ohne Taskleiste 2 |
| adobe, avg, avira, bildschirm, browser, dsl, explorer, frage, google, helper, home, homepage, iexplore.exe, mozilla, problem, programm, registry, rundll, services.exe, software, svchost.exe, system, taskleiste, windows, winlogon.exe |
Baum-Darstellung