| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Internet fasst zum Stillstand verlangsamtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.04.2015, 07:04
| #1 |
 |  Windows 7: Internet fasst zum Stillstand verlangsamt Ein Hallo an alle, ich bin mir nicht sicher, ob ich mir irgendetwas eingefangen habe. Ich will aber ein paar Auffälligkeiten der letzten Zeit schildern. Mit dem Download Accelarator Plus (DAP) habe ich wohl etwas Auffälliges installiert. Malwarebytes hat mich immer wieder auf Tuvaro aufmerksam gemacht. Die Startseite im Firefox sprang immer wieder zurück auf Speedbit + auch Tuvaro tauchte immer wieder auf - egal wie oft ich ihn mit Malwarebytes + AdwCleaner beseitigt habe. Was ist das Problem mit Tuvaro - spioniert er Daten aus? Mit FreeFileSync habe ich mir gestern noch was installiert - irgendwas mit Candy. Ich hoffe, es ist weg, nachdem ich FreeFileSync gleich wieder deinstalliert habe. Aber ansonsten lief das System stabil, so dass ich nicht unbedingt beunruhigt war. Die Probleme fingen an, als ich von Office 2000 auf Office 2007 Professional Plus umgestiegen bin. Eigentlich klappte alles wunderbar. Es wurden sogar ohne Probleme meine E-Mails + Kontakte übernommen, womit ich gar nicht gerechnet hatte. Ich wurde aufgefordert, unglaublich viele Updates zu installieren - ich glaube 50 Stück oder so. Dabei wurden mir auch ein paar neue Programme untergemogelt. Ich war aber so naiv + bin davon ausgegangen, dass alles was mit Windows Update zu tun hat, auch in Ordnung sein muss. So hatte ich dann auf einmal auch Skype auf dem Rechner, Microsoft Office File Validation + noch ein drittes Programm, von dem mir der Name nicht mehr einfällt. Aber selbst danach funktionierte noch alles, bis ich am nächsten Tag meinen Rechner neu gestartet habe. Dann fingen die Probleme an: E-Mails mit HTML-Inhalt schafften es nicht mehr die Bilder anzuzeigen. Es kam irgendeine Meldung, dass die Daten nicht geladen werden können oder so. Leider weiß ich sie nicht mehr. Im Internet war es genauso schlimm. Es dauerte länger als mit einem 56k-Modem die Seiten aufzubauen. Es ging eigentlich gar nicht. Daraufhin habe ich File Validation + das andere Programm deinstalliert. Das brachte aber nicht wirklich was. Dann habe ich den Rechner auf ein paar Tage zurück wiederhergestellt + anschließend nicht alle Windows Updates installiert. Komischerweise wollte er aber auch nur noch 30 installieren + nicht so 50 wie vorher. Danach läuft Outlook wieder gut, aber das Internet geht immer noch nicht. In meinem Admin-Konto habe ich keine Probleme - Internet läuft einwandfrei. In mein Benutzerkonto wollte ich nicht mehr, aber wegen meinem Sohn musste ich noch eine E-Mail abrufen. Dabei habe ich gesehen, dass die Verknüpfung vom Avira EU Cleaner auf dem Desktop auf einmal als Zeichen dargestellt wird, das Windows nicht mehr erkennt. Mit GMER hatte ich Probleme: Es kam immer wieder die Meldung, dass kein Datenträger im Laufwerk liegt + dass ich einen einlegen soll. Ich benutze einen USB-Stick als Arbeitsspeichererweiterung. Den habe ich dann entfernt + auch einfach irgendeine CD eingelegt, aber GMER lief trotzdem nicht weiter. :-( Ich hoffe sehr, dass ihr mir helfen könnt. Wenn ich jetzt ein neues Benutzerkonto auf + das alte schließen würde, könnte ich damit Viren + andere Probleme abschütteln? LG von Daniela Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 02:22 on 04/04/2015 (Admin)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by Admin (administrator) on DANIELA-PC on 04-04-2015 02:25:21 Running from C:\Users\Admin\Downloads Loaded Profiles: Admin (Available profiles: Daniela & Admin) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe (Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaRegistry.exe (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe (Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaUI.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDExtHost.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDAppHost.exe (Microsoft Corp.) C:\Program Files\Microsoft\BingDesktop\BDRuntimeHost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_17_0_0_134_ActiveX.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [978520 2015-01-30] (Microsoft Corporation) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] () HKLM\...\Run: [BingDesktop] => C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2353880 2013-11-01] (Microsoft Corp.) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM\...\Run: [] => [X] HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2428704 2015-01-20] (IObit) HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Policies\Explorer: [DisallowRun] 1 HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\MountPoints2: {ec6b676d-bd97-11e3-acb5-806e6f6e6963} - E:\Setup.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\Ralink\Common\RaUI.exe (Ralink Technology, Corp.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.) BHO: No Name -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-25] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation) BHO: No Name -> {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} -> No File BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-25] (Oracle Corporation) BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.) DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default FF SelectedSearchEngine: Google FF Homepage: about:home FF Keyword.URL: hxxp://google.de FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-25] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-25] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-25] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\searchplugins\search_engine.xml [2014-07-14] FF Extension: Amazon-Icon - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\Extensions\amazon-icon@giga.de [2014-06-07] FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ubhm5qpi.default\Extensions\iobitascsurfingprotection@iobit.com [2015-03-25] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-04-08] FF HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HKLM\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Admin\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-06-07] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit) R2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173272 2013-11-01] (Microsoft Corp.) R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] () R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed] S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation) R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed] R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22184 2015-01-30] (Microsoft Corporation) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed] R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284472 2015-01-30] (Microsoft Corporation) R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] () R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed] R2 RalinkRegistryWriter; C:\Program Files\Ralink\Common\RaRegistry.exe [372736 2012-01-13] (Ralink Technology, Corp.) [File not signed] S3 RaMediaServer; C:\Program Files\Ralink\Common\RaMediaServer.exe [625728 2011-08-18] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 cpuz137; C:\Program Files\CPUID\PC Wizard 2013\pcwiz_x32.sys [26856 2014-02-17] (CPUID) R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [92888 2015-03-17] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-04] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [239224 2014-11-15] (Microsoft Corporation) S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [1308736 2012-03-02] (Ralink Technology Corp.) R3 Ph6xIB32; C:\Windows\System32\DRIVERS\Ph6xIB32.sys [1277952 2009-07-14] (NXP Semiconductors GmbH) S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15576 2013-07-01] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [10200 2013-07-01] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-04 02:25 - 2015-04-04 02:25 - 00014045 _____ () C:\Users\Admin\Downloads\FRST.txt 2015-04-04 02:25 - 2015-04-04 02:25 - 00000000 ____D () C:\FRST 2015-04-04 02:24 - 2015-04-04 02:24 - 01135104 _____ (Farbar) C:\Users\Admin\Downloads\FRST.exe 2015-04-04 02:22 - 2015-04-04 02:23 - 00000472 _____ () C:\Users\Admin\Downloads\defogger_disable.log 2015-04-04 02:22 - 2015-04-04 02:22 - 00000000 _____ () C:\Users\Admin\defogger_reenable 2015-04-04 02:21 - 2015-04-04 02:21 - 00050477 _____ () C:\Users\Admin\Downloads\Defogger.exe 2015-04-04 02:07 - 2015-04-04 02:07 - 00109664 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2015-04-04 02:05 - 2015-04-04 02:05 - 00411880 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-04-04 02:05 - 2015-04-04 02:05 - 00000056 _____ () C:\Windows\setupact.log 2015-04-04 02:05 - 2015-04-04 02:05 - 00000000 _____ () C:\Windows\setuperr.log 2015-04-04 02:04 - 2015-04-04 02:04 - 00003608 ____N () C:\bootsqm.dat 2015-04-03 14:16 - 2015-03-14 03:58 - 02171392 _____ () C:\Users\Daniela\Downloads\adwcleaner_4.112.exe 2015-04-03 14:16 - 2014-04-07 19:23 - 27560794 _____ () C:\Users\Daniela\Downloads\ar11lite_11.0.0.379_deu Vorsicht.exe 2015-04-03 14:16 - 2013-10-16 18:55 - 29040552 _____ (Oracle Corporation) C:\Users\Daniela\Downloads\jre-7u45-windows-i586.exe 2015-04-03 14:16 - 2013-09-27 01:26 - 29036456 _____ (Oracle Corporation) C:\Users\Daniela\Downloads\jre-7u40-windows-i586.exe 2015-04-03 14:16 - 2013-09-15 23:28 - 00080456 _____ (Malwarebytes Corporation) C:\Users\Daniela\Downloads\mbam-clean-1.60.2.0003.exe 2015-04-03 14:16 - 2013-09-05 01:04 - 31714728 _____ (Oracle Corporation) C:\Users\Daniela\Downloads\jre-7u25-windows-i586.exe 2015-04-03 14:16 - 2013-07-10 18:13 - 03866624 _____ (Microsoft Corporation) C:\Users\Daniela\Downloads\FreePDF4.08.EXE 2015-04-03 14:16 - 2013-01-18 14:23 - 27291400 _____ () C:\Users\Daniela\Downloads\arxlite_deu (2).exe 2015-04-03 14:16 - 2012-12-08 03:06 - 16979960 _____ (Sun Microsystems, Inc.) C:\Users\Daniela\Downloads\jre-6u37-windows-i586.exe 2015-04-03 14:16 - 2012-10-03 03:57 - 27291400 _____ () C:\Users\Daniela\Downloads\arxlite_deu (1).exe 2015-04-03 13:55 - 2015-04-03 14:01 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DirSync 2015-04-01 04:47 - 2015-04-04 02:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-04-01 04:47 - 2015-04-01 04:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-04-01 04:47 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-04-01 04:47 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-04-01 04:47 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-04-01 04:00 - 2015-04-01 04:00 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE 2015-04-01 03:29 - 2015-04-01 03:30 - 02208768 _____ () C:\Users\Daniela\Downloads\AdwCleaner 4.200.exe 2015-03-31 09:33 - 2015-03-31 09:33 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2015-03-29 11:57 - 2015-03-31 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in 2015-03-29 11:57 - 2015-03-29 11:57 - 00000000 ____D () C:\Program Files\Microsoft CAPICOM 2.1.0.2 2015-03-29 11:52 - 2015-03-29 11:52 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2015-03-29 11:52 - 2015-03-29 11:52 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2015-03-29 11:09 - 2015-03-29 11:09 - 00000000 ____D () C:\Users\Daniela\AppData\Local\Microsoft Help 2015-03-29 10:57 - 2015-03-29 10:57 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Neues Microsoft Office-Dokument.lnk 2015-03-29 10:57 - 2015-03-29 10:57 - 00002639 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft Office-Dokument öffnen.lnk 2015-03-29 10:57 - 2015-03-29 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2015-03-29 10:57 - 2009-02-26 19:18 - 00029552 _____ (Microsoft Corporation) C:\Windows\system32\mdimon.dll 2015-03-29 10:54 - 2015-03-29 11:51 - 00000000 ____D () C:\Program Files\Microsoft Works 2015-03-29 10:48 - 2015-03-29 11:00 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8 2015-03-29 10:48 - 2015-03-29 10:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005 2015-03-29 10:48 - 2015-03-29 10:48 - 00000000 ____D () C:\IDE 2015-03-29 10:47 - 2015-03-31 09:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-03-29 10:47 - 2015-03-29 10:47 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help 2015-03-29 10:46 - 2015-03-29 10:46 - 00000000 __RHD () C:\MSOCache 2015-03-29 10:41 - 2015-03-29 10:35 - 1122369536 _____ () C:\Users\Daniela\outlook.pst 2015-03-29 05:15 - 2015-03-29 10:43 - 00000000 ____D () C:\Users\Daniela\Downloads\Microsoft Office 2007 Professional Plus 2015-03-29 03:26 - 2015-03-29 03:26 - 00000000 ____D () C:\Users\Daniela\AppData\Local\Sun 2015-03-28 07:35 - 2015-03-31 09:04 - 00000000 ___SD () C:\Windows\system32\GWX 2015-03-27 04:05 - 2015-03-27 04:15 - 492980834 _____ () C:\Users\Daniela\Downloads\MSO2007P.exe 2015-03-25 06:12 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-03-25 06:02 - 2015-03-31 09:04 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\ProductData 2015-03-25 06:02 - 2015-03-25 06:02 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2015-03-25 06:02 - 2015-03-25 06:02 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2015-03-25 05:37 - 2015-03-25 05:37 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\IObit 2015-03-25 05:27 - 2015-03-25 05:28 - 40909304 _____ () C:\Users\Daniela\Downloads\Firefox Setup 36.0.4.exe 2015-03-25 05:23 - 2015-03-25 05:24 - 37064104 _____ (Oracle Corporation) C:\Users\Daniela\Downloads\jre-8u40-windows-i586.exe 2015-03-25 04:12 - 2015-04-03 15:25 - 58048512 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2015-03-25 04:12 - 2015-04-03 15:25 - 34934784 _____ () C:\Windows\system32\config\components.iobit 2015-03-25 04:12 - 2015-04-03 15:25 - 00360448 _____ () C:\Windows\system32\config\DEFAULT.iobit 2015-03-25 04:12 - 2015-04-03 15:25 - 00098304 _____ () C:\Windows\system32\config\SAM.iobit 2015-03-25 04:12 - 2015-04-03 15:25 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2015-03-25 03:03 - 2015-03-25 03:05 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype 2015-03-25 03:03 - 2015-03-25 03:03 - 00000000 ____D () C:\Users\Admin\AppData\Local\Skype 2015-03-25 03:02 - 2015-03-25 03:02 - 00000000 ___RD () C:\Program Files\Skype 2015-03-25 03:02 - 2015-03-25 03:02 - 00000000 ____D () C:\ProgramData\Skype 2015-03-25 03:02 - 2015-03-25 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-03-25 03:02 - 2015-03-25 03:02 - 00000000 ____D () C:\Program Files\Common Files\Skype 2015-03-25 02:16 - 2015-03-25 02:16 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2015-03-25 02:16 - 2015-03-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8 2015-03-25 02:16 - 2015-03-25 02:16 - 00000000 ____D () C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} 2015-03-25 02:16 - 2015-03-25 02:16 - 00000000 ____D () C:\Program Files\Common Files\IObit 2015-03-25 02:15 - 2015-03-31 09:04 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ProductData 2015-03-25 02:14 - 2015-04-01 02:49 - 00000000 ____D () C:\ProgramData\ProductData 2015-03-25 02:14 - 2015-03-25 02:16 - 00000000 ____D () C:\ProgramData\IObit 2015-03-25 02:14 - 2015-03-25 02:16 - 00000000 ____D () C:\Program Files\IObit 2015-03-25 02:14 - 2015-03-25 02:15 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\IObit 2015-03-25 02:14 - 2015-03-25 02:14 - 00000000 ____D () C:\Users\Admin\AppData\IObit 2015-03-25 01:58 - 2015-03-11 05:30 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-03-25 01:58 - 2015-03-11 05:30 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-03-25 01:58 - 2015-03-11 05:29 - 00818176 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-03-25 01:58 - 2015-03-11 05:29 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-03-25 01:58 - 2015-03-11 05:29 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-03-25 01:58 - 2015-03-11 05:29 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-03-25 01:58 - 2015-03-11 05:29 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-03-25 01:58 - 2015-03-11 05:26 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-03-24 05:01 - 2015-03-24 05:01 - 00000000 ____D () C:\Users\Daniela\Downloads\MSO2007P 2015-03-24 04:50 - 2015-03-24 04:54 - 498949156 _____ () C:\Users\Daniela\Downloads\MSO2007P.zip 2015-03-24 03:01 - 2015-03-24 03:01 - 00000000 ____D () C:\ProgramData\ATI 2015-03-24 01:53 - 2015-03-24 01:53 - 00000000 ____D () C:\Program Files\Microsoft ASP.NET 2015-03-24 01:37 - 2015-03-24 02:38 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation 2015-03-24 00:45 - 2015-03-24 00:45 - 00000000 ____D () C:\Program Files\Hewlett-Packard 2015-03-23 22:21 - 2015-03-23 22:21 - 00000000 ____D () C:\Users\Daniela\AppData\Local\NVIDIA Corporation 2015-03-23 05:24 - 2015-03-23 05:24 - 00000000 ____D () C:\Users\Daniela\AppData\Local\NVIDIA 2015-03-23 05:22 - 2015-03-24 04:19 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-03-23 05:20 - 2015-03-24 02:40 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-03-19 06:58 - 2015-03-19 06:58 - 00002019 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2015-03-19 06:58 - 2015-03-19 06:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2015-03-19 06:58 - 2015-03-19 06:58 - 00000000 ____D () C:\Program Files\MyPhoneExplorer 2015-03-19 05:55 - 2015-04-01 04:49 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2015-03-19 05:55 - 2015-03-19 05:55 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-03-19 05:52 - 2015-03-19 05:53 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Daniela\Downloads\Malwarebytes 2.0.4.exe 2015-03-19 04:21 - 2015-03-19 04:21 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Games 2015-03-19 00:56 - 2015-03-19 00:56 - 00000000 ____D () C:\Users\Daniela\Documents\onetouch Manager 2015-03-18 23:49 - 2015-03-19 04:45 - 00000000 ____D () C:\Users\Daniela\Documents\MyPhoneExplorer 2015-03-18 23:25 - 2015-03-19 08:59 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\MyPhoneExplorer 2015-03-18 23:00 - 2015-03-18 23:00 - 07332272 _____ () C:\Users\Daniela\Downloads\MyPhoneExplorer.exe 2015-03-18 22:28 - 2015-03-18 22:28 - 00000000 ____D () C:\Users\Daniela\AppData\Local\{042FA28C-4DB3-4B64-94C0-A384193D060C} 2015-03-16 02:59 - 2015-03-16 04:08 - 00110080 _____ () C:\Users\Daniela\Documents\Lampenwelt Lieferantenliste Ersatzgläser 1.5.xls 2015-03-10 22:29 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-03-10 22:29 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-03-10 22:29 - 2015-01-31 05:33 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-03-10 22:29 - 2015-01-31 05:33 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-03-10 22:29 - 2015-01-31 02:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-03-10 22:28 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-03-10 22:28 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-03-10 22:28 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-03-10 22:28 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-03-10 22:28 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-03-10 22:28 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-03-10 22:28 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-03-10 22:28 - 2015-02-20 04:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-03-10 22:28 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-03-10 22:28 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-03-10 22:28 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-03-10 22:28 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-03-10 22:28 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-03-10 22:28 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-03-10 22:28 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-03-10 22:28 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-03-10 22:28 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-03-10 22:28 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-03-10 22:28 - 2015-02-20 03:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-03-10 22:28 - 2015-02-20 03:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-03-10 22:28 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-03-10 22:28 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-03-10 22:28 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-03-10 22:28 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-03-10 22:28 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-03-10 22:28 - 2015-02-20 03:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-03-10 22:28 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-03-10 22:28 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-03-10 22:28 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-03-10 22:28 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-03-10 22:28 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-03-10 22:28 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-03-10 22:28 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-03-10 22:28 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-03-10 22:28 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-03-10 22:28 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-03-10 22:28 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-03-10 22:28 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-03-10 22:28 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-03-10 22:28 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2015-03-10 22:28 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2015-03-10 22:28 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2015-03-10 22:28 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-03-10 22:28 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-03-10 22:28 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2015-03-10 22:28 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-03-10 22:28 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-03-10 22:28 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-03-10 22:27 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-03-10 22:27 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-03-10 22:27 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-03-10 22:27 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-03-10 22:27 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-03-10 22:27 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-03-10 22:27 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-03-10 22:27 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-03-10 22:27 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-03-10 22:27 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-03-10 22:27 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-03-10 22:27 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-03-10 22:27 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-03-10 22:27 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-03-10 22:27 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-03-10 22:27 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-03-10 22:26 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-03-10 22:26 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2015-03-10 22:26 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2015-03-09 00:09 - 2015-03-09 00:09 - 00107301 _____ () C:\Users\Admin\Desktop\DANIELA-PC.html 2015-03-08 03:50 - 2015-03-08 03:50 - 01710888 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Daniela\Downloads\GPU+Z.exe 2015-03-08 03:44 - 2015-03-08 03:44 - 01582736 _____ ( ) C:\Users\Daniela\Downloads\CPU+Z.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-04 02:22 - 2014-04-07 01:31 - 00000000 ____D () C:\Users\Admin 2015-04-04 02:13 - 2009-07-14 06:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-04 02:13 - 2009-07-14 06:34 - 00023168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-04 02:10 - 2014-04-06 07:33 - 02025148 _____ () C:\Windows\WindowsUpdate.log 2015-04-04 02:05 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-04 00:46 - 2014-05-14 19:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-03 15:19 - 2014-04-08 01:15 - 00000000 ____D () C:\Users\Daniela\Documents\Bewerbungen, Schriftverkehr 2015-04-03 15:09 - 2014-04-06 13:08 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2015-04-03 14:16 - 2014-05-26 00:59 - 00000000 ____D () C:\Users\Daniela\Downloads\Alcatel 2015-04-03 13:36 - 2014-04-06 07:44 - 01619272 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-03 12:41 - 2015-01-29 22:00 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2015-04-03 12:41 - 2014-04-06 13:08 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-04-02 21:37 - 2014-04-08 01:39 - 00000000 ____D () C:\Users\Daniela\Scans 2015-04-02 01:27 - 2014-04-08 01:17 - 00062464 _____ () C:\Users\Daniela\Documents\Finanzen.xls 2015-04-01 22:54 - 2014-04-08 01:17 - 00272384 _____ () C:\Users\Daniela\Documents\Lampenwelt_Arbeitszeiten.xls 2015-04-01 05:54 - 2015-02-12 04:38 - 00000000 ____D () C:\AdwCleaner 2015-04-01 04:01 - 2015-01-24 04:01 - 00000000 ____D () C:\Program Files\DAP 2015-04-01 04:01 - 2015-01-24 03:59 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit 2015-04-01 03:52 - 2015-01-24 04:01 - 00000000 ____D () C:\ProgramData\TEMP 2015-04-01 03:02 - 2015-01-29 03:52 - 00000000 ____D () C:\Users\Daniela\Downloads\Filme 2015-03-31 09:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System 2015-03-31 09:26 - 2009-07-14 04:04 - 00000534 _____ () C:\Windows\win.ini 2015-03-31 09:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp 2015-03-31 09:04 - 2014-04-06 07:37 - 00000000 ____D () C:\Users\Daniela 2015-03-31 09:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration 2015-03-30 00:48 - 2014-04-06 07:55 - 00109664 _____ () C:\Users\Daniela\AppData\Local\GDIPFONTCACHEV1.DAT 2015-03-29 11:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-03-29 11:01 - 2009-07-14 10:57 - 00000000 ____D () C:\Windows\ShellNew 2015-03-29 10:54 - 2014-04-26 08:18 - 00000000 ____D () C:\Program Files\Microsoft Office 2015-03-29 10:54 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\MSBuild 2015-03-29 10:52 - 2014-04-06 14:00 - 00000000 ____D () C:\Program Files\Microsoft.NET 2015-03-29 10:52 - 2009-07-14 04:37 - 00000000 __RSD () C:\Windows\Media 2015-03-29 10:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help 2015-03-29 10:51 - 2014-04-26 08:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2015-03-29 10:07 - 2014-04-08 01:42 - 00000000 ____D () C:\Users\Daniela\Ulk 2015-03-29 04:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF 2015-03-25 05:30 - 2014-04-07 18:43 - 00000000 ____D () C:\ProgramData\Oracle 2015-03-25 05:25 - 2014-07-27 05:09 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2015-03-25 05:25 - 2014-07-27 05:08 - 00000000 ____D () C:\Program Files\Java 2015-03-25 05:18 - 2014-10-15 04:18 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe 2015-03-25 05:18 - 2014-04-06 14:54 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-03-25 05:18 - 2014-04-06 14:54 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-03-25 04:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-03-25 04:19 - 2014-04-06 08:30 - 00000000 ____D () C:\Windows\Panther 2015-03-25 03:55 - 2014-06-09 14:39 - 00000000 ____D () C:\Windows\Minidump 2015-03-25 03:06 - 2014-12-09 23:46 - 00000000 ____D () C:\Windows\system32\appraiser 2015-03-25 03:06 - 2014-04-23 00:16 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-03-25 02:51 - 2014-11-19 23:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys 2015-03-25 02:16 - 2014-04-07 18:18 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Apple Computer 2015-03-25 02:03 - 2014-05-20 03:54 - 00000000 ____D () C:\ProgramData\Nokia 2015-03-25 02:03 - 2014-04-13 07:08 - 00000000 ____D () C:\Program Files\Common Files\Nokia 2015-03-25 02:03 - 2014-04-13 06:09 - 00000000 ____D () C:\Program Files\Nokia 2015-03-25 01:48 - 2014-06-20 23:59 - 00000000 ____D () C:\Program Files\Allway Sync 2015-03-25 01:47 - 2014-11-19 23:14 - 00000000 ____D () C:\Program Files\Lavalys 2015-03-25 01:47 - 2014-05-02 20:41 - 00000000 ____D () C:\Windows\pss 2015-03-25 01:47 - 2014-04-08 23:24 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\IrfanView 2015-03-25 01:47 - 2014-04-08 22:47 - 00000000 ____D () C:\ProgramData\HP Product Assistant 2015-03-25 01:47 - 2014-04-08 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2015-03-25 01:47 - 2014-04-08 22:42 - 00000000 ____D () C:\Program Files\HP 2015-03-25 01:47 - 2014-04-08 22:40 - 00000000 ____D () C:\ProgramData\HP 2015-03-25 01:47 - 2014-04-06 16:24 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-03-25 01:47 - 2014-04-06 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-03-25 01:47 - 2014-04-06 16:20 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-03-25 01:47 - 2014-04-06 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center 2015-03-25 01:47 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32 2015-03-25 01:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\security 2015-03-25 01:46 - 2014-04-08 22:45 - 00000000 ____D () C:\Program Files\Common Files\HP 2015-03-25 01:46 - 2014-04-06 11:58 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2015-03-25 01:46 - 2014-04-06 11:58 - 00000000 ____D () C:\Program Files\AMD APP 2015-03-25 01:43 - 2014-04-06 16:19 - 00000000 ____D () C:\NVIDIA 2015-03-25 01:43 - 2014-04-06 11:58 - 00000000 ____D () C:\Program Files\AMD AVT 2015-03-25 01:43 - 2014-04-06 11:55 - 00000000 ____D () C:\Program Files\ATI Technologies 2015-03-25 01:43 - 2014-04-06 11:55 - 00000000 ____D () C:\Program Files\ATI 2015-03-24 03:54 - 2014-04-08 22:53 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\HP 2015-03-24 03:53 - 2014-04-08 22:41 - 00012575 _____ () C:\ProgramData\hpzinstall.log 2015-03-24 03:49 - 2014-04-12 01:44 - 00000000 ____D () C:\Users\Admin\AppData\Local\HP 2015-03-24 03:00 - 2014-04-06 11:58 - 00000000 ____D () C:\ProgramData\AMD 2015-03-24 02:28 - 2014-08-19 03:59 - 00000000 ____D () C:\Users\Admin\AppData\Local\NokiaAccount 2015-03-24 00:35 - 2014-10-02 02:13 - 00000000 ____D () C:\Users\Daniela\AppData\Local\FreePDF_XP 2015-03-23 01:46 - 2014-04-13 03:41 - 1108410368 _____ () C:\Users\Daniela\outlook_alt.pst 2015-03-19 04:46 - 2014-04-08 23:24 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\IrfanView 2015-03-19 04:45 - 2014-04-06 14:54 - 00000000 ____D () C:\Windows\system32\Macromed 2015-03-19 04:44 - 2014-06-11 02:05 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mobile Action 2015-03-19 02:38 - 2014-04-13 06:11 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\PC Suite 2015-03-18 23:35 - 2014-06-21 01:19 - 00000000 ____D () C:\Users\Daniela\Documents\Nokia 2015-03-18 23:35 - 2014-05-25 22:51 - 00000000 ____D () C:\Users\Daniela\Documents\Android Manager 2015-03-18 22:12 - 2014-04-08 01:15 - 00000000 ____D () C:\Users\Daniela\Documents\Eigene Scans 2015-03-10 22:50 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2015-03-08 23:52 - 2014-09-14 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2015-03-08 23:52 - 2014-09-14 20:43 - 00000000 ____D () C:\Program Files\CPUID 2015-03-08 04:01 - 2014-04-06 12:23 - 00000000 ____D () C:\Windows\system32\MRT 2015-03-08 03:49 - 2014-04-06 12:23 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Files in the root of some directories ======= 2014-08-05 00:03 - 2014-10-07 05:56 - 0128621 _____ () C:\Users\Admin\AppData\Local\ars.cache 2014-08-05 00:04 - 2014-10-07 05:57 - 0367993 _____ () C:\Users\Admin\AppData\Local\census.cache 2014-08-04 18:38 - 2014-08-04 18:38 - 0000036 _____ () C:\Users\Admin\AppData\Local\housecall.guid.cache 2014-04-08 22:41 - 2015-03-24 03:53 - 0012575 _____ () C:\ProgramData\hpzinstall.log Files to move or delete: ==================== C:\Users\Daniela\Registry.reg ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-26 02:56 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Admin at 2015-04-04 02:26:36
Running from C:\Users\Admin\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
4500_G510af_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden
4500G510af (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510af_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI Lite - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
Advanced SystemCare 8 (HKLM\...\Advanced SystemCare 8_is1) (Version: 8.1.0 - IObit)
Alcatel onetouch Manager (HKLM\...\{C32EDA33-2F6F-0200-0000-000000000000}) (Version: 13.05.2155 - Mobile Action)
AMD Catalyst Install Manager (HKLM\...\{B448BC74-1CB7-7A57-3313-5E075AFB413E}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bing Bar (HKLM\...\{449CE12D-E2C7-4B97-B19E-55D163EA9435}) (Version: 7.0.619.0 - Microsoft Corporation)
Bing-Desktop (HKLM\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.347.0 - Microsoft Corporation)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
concept/design online.TiVi (HKLM\...\{2EC5640C-A426-4CFA-8737-656D1FE58128}_is1) (Version: 1.6.0.0 - concept/design GmbH)
concept/design onlineTV 11 (HKLM\...\{8A4C3184-DA2F-4553-BF61-83F5690C3048}_is1) (Version: 11.0.0.0 - concept/design GmbH)
CoolSoft VirtualMIDISynth 1.9.2 (HKLM\...\CoolSoft VirtualMIDISynth) (Version: 1.9.2.0 - CoolSoft)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DirSync 2.96 (HKLM\...\DirSync) (Version: - Stephen Kalisch)
DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden
EGVP (HKLM\...\{EDA192EA-4DA3-416D-965D-65BFDA0E3715}) (Version: 1.5.3.0 - Governikus KG)
Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden
FreePDF (Remove only) (HKLM\...\FreePDF_XP) (Version: - )
GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510a-f (HKLM\...\{C98517B6-DCE9-49B7-B19E-E384178D3986}) (Version: 13.0 - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
hpPrintProjects (Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (Version: 130.0.303.000 - Hewlett-Packard) Hidden
inSSIDer Home (HKLM\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2000 SR-1 Premium (HKLM\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.3821 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 8.0 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
MKV Player 2.1.17 (HKLM\...\MKV Player_is1) (Version: - )
Mozilla Firefox 37.0 (x86 de) (HKLM\...\Mozilla Firefox 37.0 (x86 de)) (Version: 37.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
Nokia PC Suite (Version: 7.1.180.94 - Nokia) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PC Wizard 2013.2.12 (HKLM\...\PC Wizard 2013_is1) (Version: - CPUID)
PDF reDirect (remove only) (HKLM\...\PDF reDirect) (Version: v2.5.2 - EXP Systems LLC)
PDF24 Creator 6.7.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PixelNet Software 4.14.4 (HKLM\...\PixelNet Software) (Version: 4.14.4 - ORWO Net)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.17.0 - Ralink)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd)
Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
28-03-2015 07:34:27 Windows Update
29-03-2015 06:34:04 Installed Microsoft Fix it 50848
29-03-2015 10:45:52 Installed Microsoft Office Professional Plus 2007
29-03-2015 11:46:06 Windows Update
29-03-2015 12:06:20 Windows Update
30-03-2015 01:04:48 Windows Update
30-03-2015 02:29:09 Windows Update
31-03-2015 07:17:04 Microsoft Office File Validation Add-In wird entfernt
31-03-2015 07:37:13 Microsoft Office Live Add-in 1.5 wird entfernt
31-03-2015 08:29:58 Wiederherstellungsvorgang
31-03-2015 09:23:23 Windows Update
31-03-2015 09:38:06 Windows Update
01-04-2015 03:18:51 Installed Microsoft Fix it 50195
03-04-2015 12:22:14 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {3625605D-9736-4E0D-ADED-80AB17549529} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-25] (Adobe Systems Incorporated)
Task: {3A05D166-9113-4EC4-9566-5F56785457AF} - System32\Tasks\ASC8_SkipUac_Admin => C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [2015-01-27] (IObit)
Task: {4A95605E-2F72-413F-9F4A-4F9B662C3B70} - System32\Tasks\{5589489F-BCF7-4E4E-A924-E7FCCE636DA8} => pcalua.exe -a "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Task: {653435B1-E8BB-4611-8BBB-E2FE2CBE8B8C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {690E5BA0-2B04-4E7B-906A-6CCA9CB3331D} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [2015-01-23] (IObit)
Task: {7FEA1C05-5956-47C1-9720-5580AA7A98CB} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {8734083E-A084-4978-A36C-CA4115FD8883} - System32\Tasks\{085A87EE-090C-40C6-B1AC-A2A6111D4864} => C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
Task: {BDAC862A-E650-4CF1-B04B-EDEB1AB59011} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {F2CAD89D-9A42-4025-8876-58161729CDCB} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {F815A518-89BD-445C-8A71-0D92281353F8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2015-03-25 02:16 - 2013-10-25 13:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 8\sqlite3.dll
2010-06-06 16:20 - 2010-06-06 16:20 - 00065344 _____ () C:\Windows\System32\PDFreDirectMonNT.dll
2014-10-02 02:12 - 2012-06-21 07:25 - 00094208 _____ () C:\Windows\System32\redmon32.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00370792 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
2014-04-06 16:24 - 2010-01-21 01:51 - 00062568 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00565864 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll
2014-04-06 16:24 - 2010-01-21 01:52 - 00167528 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
2015-03-25 02:16 - 2013-01-15 19:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-03-25 02:16 - 2013-01-15 19:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-03-25 02:16 - 2013-01-15 19:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2015-03-25 02:16 - 2013-01-15 19:47 - 00893248 _____ () C:\Program Files\IObit\Advanced SystemCare 8\webres.dll
2015-01-06 20:50 - 2012-02-20 13:59 - 01087336 _____ () C:\Program Files\Ralink\Common\RaWLAPI.dll
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2015-03-25 02:16 - 2014-12-10 10:14 - 01284896 _____ () C:\Program Files\IObit\Advanced SystemCare 8\Scan.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3046395627-4054670192-1170409365-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: FreePDF Assistant => "C:\Program Files\FreePDF_XP\fpassist.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
MSCONFIG\startupreg: PDFPrint => C:\Program Files\PDF24\pdf24.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
==================== Accounts: =============================
Admin (S-1-5-21-3046395627-4054670192-1170409365-1003 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-3046395627-4054670192-1170409365-500 - Administrator - Disabled)
Daniela (S-1-5-21-3046395627-4054670192-1170409365-1000 - Limited - Enabled) => C:\Users\Daniela
Gast (S-1-5-21-3046395627-4054670192-1170409365-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3046395627-4054670192-1170409365-1002 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/03/2015 03:10:49 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1160) WebCacheLocal: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Error: (04/03/2015 02:07:26 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (04/03/2015 02:00:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DirSync.exe, Version: 2.9.6.0, Zeitstempel: 0x512363e2
Name des fehlerhaften Moduls: DirSync.exe, Version: 2.9.6.0, Zeitstempel: 0x512363e2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003a888
ID des fehlerhaften Prozesses: 0x1500
Startzeit der fehlerhaften Anwendung: 0xDirSync.exe0
Pfad der fehlerhaften Anwendung: DirSync.exe1
Pfad des fehlerhaften Moduls: DirSync.exe2
Berichtskennung: DirSync.exe3
Error: (04/03/2015 01:29:18 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
Error: (04/02/2015 09:40:59 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (04/02/2015 09:40:59 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (04/02/2015 01:47:05 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (04/02/2015 01:47:05 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (04/01/2015 11:16:32 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 12f0
Startzeit: 01d06cc0e1b5bce8
Endzeit: 35
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID:
Error: (04/01/2015 04:57:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 36.0.4.5557, Zeitstempel: 0x550d0883
Name des fehlerhaften Moduls: mozalloc.dll, Version: 36.0.4.5557, Zeitstempel: 0x550cfa82
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001e02
ID des fehlerhaften Prozesses: 0x11c4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
System errors:
=============
Error: (04/03/2015 02:00:43 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/03/2015 01:55:06 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/03/2015 01:55:06 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/02/2015 09:40:39 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (04/01/2015 11:35:01 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/01/2015 11:34:53 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/01/2015 11:34:53 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/01/2015 11:34:22 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/01/2015 11:34:22 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (04/01/2015 11:34:12 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz
Percentage of memory in use: 44%
Total physical RAM: 3071.3 MB
Available physical RAM: 1719.71 MB
Total Pagefile: 6140.9 MB
Available Pagefile: 4310.11 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.58 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:218.24 GB) (Free:119.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:14.52 GB) NTFS
Drive i: (KINGSTON) (Removable) (Total:7.44 GB) (Free:3.44 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2BAB359D)
Partition 1: (Active) - (Size=218.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=14.6 GB) - (Type=OF Extended)
========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0C)
==================== End Of Log ============================
hier habe ich noch die Log-Datei von AdwCleaner. Tuvaro bin ich wohl so gut wie losgeworden, denn beim Internet Explorer + im Firefox hat AdwCleaner die ganze Zeit etwas gefunden. Jetzt aber nicht mehr. LG von Daniela Code:
ATTFilter # AdwCleaner v4.200 - Bericht erstellt 04/04/2015 um 07:55:29
# Aktualisiert 29/03/2015 von Xplode
# Datenbank : 2015-03-29.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x86)
# Benutzername : Admin - DANIELA-PC
# Gestarted von : C:\Users\Admin\Downloads\AdwCleaner 4.200.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Conduit
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17689
-\\ Mozilla Firefox v37.0 (x86 de)
*************************
AdwCleaner[R0].txt - [4682 Bytes] - [12/02/2015 04:39:20]
AdwCleaner[R10].txt - [2683 Bytes] - [01/04/2015 05:52:12]
AdwCleaner[R11].txt - [2079 Bytes] - [04/04/2015 07:53:23]
AdwCleaner[R1].txt - [912 Bytes] - [12/02/2015 04:56:14]
AdwCleaner[R2].txt - [2596 Bytes] - [14/03/2015 04:01:49]
AdwCleaner[R3].txt - [2696 Bytes] - [19/03/2015 05:04:42]
AdwCleaner[R4].txt - [2473 Bytes] - [19/03/2015 05:16:55]
AdwCleaner[R5].txt - [2728 Bytes] - [19/03/2015 05:40:43]
AdwCleaner[R6].txt - [3187 Bytes] - [19/03/2015 21:25:25]
AdwCleaner[R7].txt - [3062 Bytes] - [19/03/2015 21:44:08]
AdwCleaner[R8].txt - [3751 Bytes] - [21/03/2015 04:56:50]
AdwCleaner[R9].txt - [4246 Bytes] - [01/04/2015 03:41:06]
AdwCleaner[S0].txt - [4766 Bytes] - [12/02/2015 04:46:24]
AdwCleaner[S10].txt - [1469 Bytes] - [04/04/2015 07:55:29]
AdwCleaner[S1].txt - [972 Bytes] - [12/02/2015 05:00:33]
AdwCleaner[S2].txt - [2663 Bytes] - [14/03/2015 04:14:13]
AdwCleaner[S3].txt - [2771 Bytes] - [19/03/2015 05:09:41]
AdwCleaner[S4].txt - [2531 Bytes] - [19/03/2015 05:21:32]
AdwCleaner[S5].txt - [2819 Bytes] - [19/03/2015 05:45:12]
AdwCleaner[S6].txt - [3296 Bytes] - [19/03/2015 21:28:42]
AdwCleaner[S7].txt - [3162 Bytes] - [19/03/2015 21:48:22]
AdwCleaner[S8].txt - [7835 Bytes] - [21/03/2015 04:59:32]
AdwCleaner[S9].txt - [2795 Bytes] - [01/04/2015 05:54:15]
########## EOF - C:\AdwCleaner\AdwCleaner[S10].txt - [2059 Bytes] ##########
|
| Themen zu Windows 7: Internet fasst zum Stillstand verlangsamt |
| avira, branding, browser, cpu-z, desktop, excel, fehler, firefox, flash player, helper, home, homepage, installation, internet, launch, microsoft fix it, mozilla, officejet, problem, scan, security, software, svchost.exe, system, updates, viren, warnung, windows, windows updates, windows xp |
Baum-Darstellung