Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde

Lippi · 14.04.2015, 19:32

Hallo,
vor 2 Tagen hat mein PC mehrmals nach Bluescreens (MEMORY_MANAGEMENT) neu gestartet. Ich ging zunächst von einem Hardware-Fehler aus, allerdings ließ sich dann zusätzlich trotz mehrmaliger Versuche mein Avira Antivirus Pro nicht mehr aktualisieren. Die Daten werden heruntergeladen, können aber nicht installiert werden. Der daraufhin durchgeführte Suchlauf zunächst mit Avira, anschließend mit dem dann zusätzlich heruntergeladenen Malwarebytes haben unterschiedliche Funde ergeben. Mittlerweile kommt hinzu, dass Hoch- und Herunterfahren des PCs teilweise ewig lange dauert.

Bei den Vorbereitungen gemäß der Anleitung hier im Forum ist dann noch das eine oder andere Problemchen aufgetaucht (kann nicht einschätzen, ob davon etwas von Bedeutung ist).

Logfile des Avira Suchlaufs:

Code:

ATTFilter

Antivirus Pro
Erstellungsdatum der Reportdatei: Sonntag, 12. April 2015  21:04


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : xxx
Seriennummer   : xxx
Plattform      : Windows 8.1
Windowsversion : (plain)  [6.2.9200]
Boot Modus     : Normal gebootet
Benutzername   : SYSTEM
Computername   : NOTEBOOK

Versionsinformationen:
BUILD.DAT      : 15.0.9.504     94784 Bytes  24.03.2015 14:59:00
AVSCAN.EXE     : 15.0.9.504   1027528 Bytes  01.04.2015 07:12:34
AVSCANRC.DLL   : 15.0.9.460     64760 Bytes  01.04.2015 07:12:35
LUKE.DLL       : 15.0.9.460     60664 Bytes  01.04.2015 07:12:52
AVSCPLR.DLL    : 15.0.9.460     95536 Bytes  01.04.2015 07:12:35
REPAIR.DLL     : 15.0.9.504    374064 Bytes  01.04.2015 07:12:33
REPAIR.RDF     : 1.0.6.98      831936 Bytes  10.04.2015 18:09:12
AVREG.DLL      : 15.0.9.460    273712 Bytes  01.04.2015 07:12:33
AVLODE.DLL     : 15.0.9.504    596272 Bytes  01.04.2015 07:12:32
AVLODE.RDF     : 14.0.4.64      79226 Bytes  09.04.2015 21:05:50
XBV00018.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00019.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00020.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00021.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00022.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00023.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00024.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00025.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00026.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00027.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00028.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00029.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00030.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00031.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00032.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00033.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00034.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00035.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00036.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:41
XBV00037.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:42
XBV00038.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:42
XBV00039.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:42
XBV00040.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:42
XBV00041.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 17:20:42
XBV00179.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00180.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00181.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00182.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00183.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00184.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00185.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00186.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00187.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00188.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00189.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00190.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00191.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00192.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00193.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00194.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00195.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00196.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00197.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00198.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00199.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00200.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00201.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00202.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00203.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00204.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00205.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00206.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00207.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00208.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:25
XBV00209.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00210.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00211.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00212.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00213.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00214.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00215.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00216.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00217.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00218.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00219.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00220.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00221.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00222.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00223.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00224.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00225.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00226.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00227.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00228.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00229.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:26
XBV00230.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00231.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00232.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00233.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00234.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00235.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00236.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00237.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00238.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00239.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00240.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00241.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00242.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00243.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00244.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00245.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00246.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00247.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:27
XBV00248.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00249.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00250.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00251.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00252.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00253.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00254.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00255.VDF   : 8.11.219.166     2048 Bytes  25.03.2015 17:08:28
XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 09:00:13
XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 18:37:35
XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 18:21:46
XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:01:57
XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 20:23:53
XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 10:07:48
XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 08:12:11
XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 13:20:57
XBV00008.VDF   : 8.11.165.192  4251136 Bytes  07.08.2014 17:20:40
XBV00009.VDF   : 8.11.172.30  2094080 Bytes  15.09.2014 17:37:43
XBV00010.VDF   : 8.11.178.32  1581056 Bytes  14.10.2014 12:05:14
XBV00011.VDF   : 8.11.184.50  2178560 Bytes  11.11.2014 19:27:31
XBV00012.VDF   : 8.11.190.32  1876992 Bytes  03.12.2014 17:06:19
XBV00013.VDF   : 8.11.201.28  2973696 Bytes  14.01.2015 18:01:21
XBV00014.VDF   : 8.11.206.252  2695680 Bytes  04.02.2015 18:33:24
XBV00015.VDF   : 8.11.213.84  3175936 Bytes  03.03.2015 18:29:16
XBV00016.VDF   : 8.11.213.176   212480 Bytes  05.03.2015 12:52:03
XBV00017.VDF   : 8.11.219.166  2033664 Bytes  25.03.2015 17:08:20
XBV00042.VDF   : 8.11.219.194    36864 Bytes  25.03.2015 19:04:47
XBV00043.VDF   : 8.11.219.218     7168 Bytes  25.03.2015 19:04:47
XBV00044.VDF   : 8.11.219.242     6144 Bytes  25.03.2015 19:04:47
XBV00045.VDF   : 8.11.219.244     7680 Bytes  25.03.2015 19:04:47
XBV00046.VDF   : 8.11.219.246     5632 Bytes  26.03.2015 19:04:47
XBV00047.VDF   : 8.11.219.250    38400 Bytes  26.03.2015 19:04:47
XBV00048.VDF   : 8.11.219.252    14336 Bytes  26.03.2015 19:04:47
XBV00049.VDF   : 8.11.219.254    18432 Bytes  26.03.2015 19:04:47
XBV00050.VDF   : 8.11.220.0      7680 Bytes  26.03.2015 19:04:47
XBV00051.VDF   : 8.11.220.2     10240 Bytes  26.03.2015 19:04:47
XBV00052.VDF   : 8.11.220.6      2048 Bytes  26.03.2015 19:04:47
XBV00053.VDF   : 8.11.220.8      2560 Bytes  26.03.2015 19:04:47
XBV00054.VDF   : 8.11.220.10    17408 Bytes  26.03.2015 10:40:01
XBV00055.VDF   : 8.11.220.12     2048 Bytes  26.03.2015 10:40:01
XBV00056.VDF   : 8.11.220.16    23040 Bytes  26.03.2015 10:40:01
XBV00057.VDF   : 8.11.220.18     8704 Bytes  26.03.2015 10:40:01
XBV00058.VDF   : 8.11.220.22    30720 Bytes  27.03.2015 10:40:01
XBV00059.VDF   : 8.11.220.24     6144 Bytes  27.03.2015 10:40:01
XBV00060.VDF   : 8.11.220.26     2048 Bytes  27.03.2015 10:40:01
XBV00061.VDF   : 8.11.220.48     9728 Bytes  27.03.2015 10:40:01
XBV00062.VDF   : 8.11.220.68    14848 Bytes  27.03.2015 10:40:01
XBV00063.VDF   : 8.11.220.88    23552 Bytes  27.03.2015 12:39:58
XBV00064.VDF   : 8.11.220.108     9216 Bytes  27.03.2015 08:52:33
XBV00065.VDF   : 8.11.220.110    15360 Bytes  27.03.2015 08:52:33
XBV00066.VDF   : 8.11.220.116    27648 Bytes  27.03.2015 08:52:33
XBV00067.VDF   : 8.11.220.118    10752 Bytes  27.03.2015 08:52:33
XBV00068.VDF   : 8.11.220.120     6144 Bytes  27.03.2015 08:52:33
XBV00069.VDF   : 8.11.220.122    62976 Bytes  28.03.2015 21:59:31
XBV00070.VDF   : 8.11.220.124     2048 Bytes  28.03.2015 21:59:31
XBV00071.VDF   : 8.11.220.126     9728 Bytes  28.03.2015 21:59:31
XBV00072.VDF   : 8.11.220.128    20992 Bytes  28.03.2015 21:59:31
XBV00073.VDF   : 8.11.220.148    54784 Bytes  29.03.2015 16:02:31
XBV00074.VDF   : 8.11.220.176     7680 Bytes  29.03.2015 16:02:31
XBV00075.VDF   : 8.11.220.196    32768 Bytes  30.03.2015 17:56:21
XBV00076.VDF   : 8.11.220.216     2048 Bytes  30.03.2015 17:56:21
XBV00077.VDF   : 8.11.220.236     9728 Bytes  30.03.2015 17:56:21
XBV00078.VDF   : 8.11.220.238    15360 Bytes  30.03.2015 17:56:21
XBV00079.VDF   : 8.11.220.240     9216 Bytes  30.03.2015 17:56:21
XBV00080.VDF   : 8.11.220.242     4608 Bytes  30.03.2015 17:56:21
XBV00081.VDF   : 8.11.220.248    58368 Bytes  30.03.2015 18:45:56
XBV00082.VDF   : 8.11.220.250     2048 Bytes  30.03.2015 18:45:56
XBV00083.VDF   : 8.11.220.252     2048 Bytes  30.03.2015 18:45:56
XBV00084.VDF   : 8.11.220.254    39424 Bytes  31.03.2015 18:45:56
XBV00085.VDF   : 8.11.221.0      2048 Bytes  31.03.2015 18:45:56
XBV00086.VDF   : 8.11.221.6     40960 Bytes  31.03.2015 18:45:56
XBV00087.VDF   : 8.11.221.8      2048 Bytes  31.03.2015 18:45:56
XBV00088.VDF   : 8.11.221.10    16896 Bytes  31.03.2015 18:45:56
XBV00089.VDF   : 8.11.221.30    10240 Bytes  31.03.2015 18:45:56
XBV00090.VDF   : 8.11.221.48    29184 Bytes  31.03.2015 18:45:56
XBV00091.VDF   : 8.11.221.50     2048 Bytes  31.03.2015 18:45:56
XBV00092.VDF   : 8.11.221.70    27648 Bytes  31.03.2015 07:12:59
XBV00093.VDF   : 8.11.221.88     3584 Bytes  31.03.2015 07:12:59
XBV00094.VDF   : 8.11.221.90    32256 Bytes  31.03.2015 07:13:00
XBV00095.VDF   : 8.11.221.94    34816 Bytes  01.04.2015 07:13:00
XBV00096.VDF   : 8.11.221.96     8704 Bytes  01.04.2015 07:13:00
XBV00097.VDF   : 8.11.221.100     8704 Bytes  01.04.2015 13:50:57
XBV00098.VDF   : 8.11.221.102     7680 Bytes  01.04.2015 13:50:57
XBV00099.VDF   : 8.11.221.106    39936 Bytes  01.04.2015 10:57:54
XBV00100.VDF   : 8.11.221.124     8704 Bytes  01.04.2015 10:57:54
XBV00101.VDF   : 8.11.221.142    12288 Bytes  01.04.2015 10:57:54
XBV00102.VDF   : 8.11.221.160     7168 Bytes  01.04.2015 10:57:54
XBV00103.VDF   : 8.11.221.178     7168 Bytes  01.04.2015 10:57:54
XBV00104.VDF   : 8.11.221.196     8192 Bytes  01.04.2015 10:57:54
XBV00105.VDF   : 8.11.221.200    33280 Bytes  02.04.2015 10:57:54
XBV00106.VDF   : 8.11.221.202     2048 Bytes  02.04.2015 10:57:54
XBV00107.VDF   : 8.11.221.204    28160 Bytes  02.04.2015 17:50:00
XBV00108.VDF   : 8.11.221.206     2048 Bytes  02.04.2015 17:50:00
XBV00109.VDF   : 8.11.221.208    33792 Bytes  02.04.2015 17:50:00
XBV00110.VDF   : 8.11.221.210    24576 Bytes  02.04.2015 17:50:00
XBV00111.VDF   : 8.11.221.214    18944 Bytes  02.04.2015 08:37:17
XBV00112.VDF   : 8.11.221.216    11264 Bytes  02.04.2015 08:37:17
XBV00113.VDF   : 8.11.221.220    29696 Bytes  03.04.2015 08:37:17
XBV00114.VDF   : 8.11.221.222     2048 Bytes  03.04.2015 08:37:17
XBV00115.VDF   : 8.11.221.224    31232 Bytes  03.04.2015 07:31:59
XBV00116.VDF   : 8.11.221.242     3584 Bytes  03.04.2015 07:31:59
XBV00117.VDF   : 8.11.222.2     11776 Bytes  03.04.2015 07:31:59
XBV00118.VDF   : 8.11.222.18     7168 Bytes  03.04.2015 07:31:59
XBV00119.VDF   : 8.11.222.34     6656 Bytes  03.04.2015 07:31:59
XBV00120.VDF   : 8.11.222.38    15360 Bytes  03.04.2015 07:31:59
XBV00121.VDF   : 8.11.222.40     5632 Bytes  03.04.2015 07:31:59
XBV00122.VDF   : 8.11.222.42     6144 Bytes  03.04.2015 07:31:59
XBV00123.VDF   : 8.11.222.44    46592 Bytes  04.04.2015 07:31:59
XBV00124.VDF   : 8.11.222.46     2048 Bytes  04.04.2015 07:31:59
XBV00125.VDF   : 8.11.222.48     2048 Bytes  04.04.2015 07:31:59
XBV00126.VDF   : 8.11.222.50    36864 Bytes  04.04.2015 07:31:59
XBV00127.VDF   : 8.11.222.52     2048 Bytes  04.04.2015 07:31:59
XBV00128.VDF   : 8.11.222.68    68096 Bytes  05.04.2015 15:37:27
XBV00129.VDF   : 8.11.222.84     2048 Bytes  05.04.2015 15:37:27
XBV00130.VDF   : 8.11.222.116    18432 Bytes  05.04.2015 15:37:27
XBV00131.VDF   : 8.11.222.132    62464 Bytes  06.04.2015 16:09:48
XBV00132.VDF   : 8.11.222.134    10752 Bytes  06.04.2015 16:09:48
XBV00133.VDF   : 8.11.222.138     2048 Bytes  06.04.2015 16:09:48
XBV00134.VDF   : 8.11.222.154    13312 Bytes  06.04.2015 16:09:48
XBV00135.VDF   : 8.11.222.156     8704 Bytes  06.04.2015 16:09:49
XBV00136.VDF   : 8.11.222.158     9216 Bytes  06.04.2015 16:09:49
XBV00137.VDF   : 8.11.222.160     2048 Bytes  06.04.2015 16:09:49
XBV00138.VDF   : 8.11.222.164    18432 Bytes  06.04.2015 15:41:51
XBV00139.VDF   : 8.11.222.166    10752 Bytes  06.04.2015 15:41:51
XBV00140.VDF   : 8.11.222.182     7168 Bytes  06.04.2015 15:41:51
XBV00141.VDF   : 8.11.222.196     8704 Bytes  07.04.2015 15:41:51
XBV00142.VDF   : 8.11.222.212    29696 Bytes  07.04.2015 15:41:52
XBV00143.VDF   : 8.11.222.226     6656 Bytes  07.04.2015 15:41:52
XBV00144.VDF   : 8.11.222.228    10752 Bytes  07.04.2015 15:41:52
XBV00145.VDF   : 8.11.222.230     4096 Bytes  07.04.2015 15:41:52
XBV00146.VDF   : 8.11.222.232     5120 Bytes  07.04.2015 15:41:52
XBV00147.VDF   : 8.11.222.234     5632 Bytes  07.04.2015 15:41:52
XBV00148.VDF   : 8.11.222.240    34816 Bytes  07.04.2015 06:22:21
XBV00149.VDF   : 8.11.222.242     2048 Bytes  07.04.2015 06:22:21
XBV00150.VDF   : 8.11.222.244     3584 Bytes  07.04.2015 06:22:21
XBV00151.VDF   : 8.11.222.246    24576 Bytes  07.04.2015 06:22:21
XBV00152.VDF   : 8.11.222.250    37888 Bytes  08.04.2015 06:22:21
XBV00153.VDF   : 8.11.223.8     12800 Bytes  08.04.2015 08:22:19
XBV00154.VDF   : 8.11.223.22     2048 Bytes  08.04.2015 08:22:20
XBV00155.VDF   : 8.11.223.36    10752 Bytes  08.04.2015 21:05:50
XBV00156.VDF   : 8.11.223.52    35328 Bytes  08.04.2015 21:05:50
XBV00157.VDF   : 8.11.223.66     7168 Bytes  08.04.2015 21:05:50
XBV00158.VDF   : 8.11.223.68     2048 Bytes  08.04.2015 21:05:50
XBV00159.VDF   : 8.11.223.72    15360 Bytes  08.04.2015 21:05:50
XBV00160.VDF   : 8.11.223.74     7168 Bytes  09.04.2015 21:05:50
XBV00161.VDF   : 8.11.223.78    38400 Bytes  09.04.2015 21:05:50
XBV00162.VDF   : 8.11.223.80     2048 Bytes  09.04.2015 21:05:50
XBV00163.VDF   : 8.11.223.82    35328 Bytes  09.04.2015 21:05:50
XBV00164.VDF   : 8.11.223.90    80896 Bytes  09.04.2015 18:09:10
XBV00165.VDF   : 8.11.223.92     2048 Bytes  09.04.2015 18:09:10
XBV00166.VDF   : 8.11.223.94    30208 Bytes  09.04.2015 18:09:10
XBV00167.VDF   : 8.11.223.108    30208 Bytes  10.04.2015 18:09:10
XBV00168.VDF   : 8.11.223.120    35840 Bytes  10.04.2015 18:09:10
XBV00169.VDF   : 8.11.223.124     3072 Bytes  10.04.2015 18:09:10
XBV00170.VDF   : 8.11.223.136    20480 Bytes  10.04.2015 18:09:10
XBV00171.VDF   : 8.11.223.148    14848 Bytes  10.04.2015 18:09:10
XBV00172.VDF   : 8.11.223.150     2048 Bytes  10.04.2015 18:09:10
XBV00173.VDF   : 8.11.223.154    23552 Bytes  10.04.2015 14:01:40
XBV00174.VDF   : 8.11.223.156     8192 Bytes  10.04.2015 14:01:40
XBV00175.VDF   : 8.11.223.158     7680 Bytes  11.04.2015 14:01:40
XBV00176.VDF   : 8.11.223.162    49152 Bytes  11.04.2015 14:01:40
XBV00177.VDF   : 8.11.223.164     2048 Bytes  11.04.2015 14:01:40
XBV00178.VDF   : 8.11.223.176    18944 Bytes  11.04.2015 08:23:03
Engineversion  : 8.3.30.16 
AEVDF.DLL      : 8.3.1.6       133992 Bytes  20.08.2014 18:13:47
AESCRIPT.DLL   : 8.2.2.58      560248 Bytes  17.03.2015 15:51:03
AESCN.DLL      : 8.3.2.2       139456 Bytes  21.07.2014 17:42:46
AESBX.DLL      : 8.2.20.34    1615784 Bytes  04.03.2015 18:29:15
AERDL.DLL      : 8.2.1.20      731040 Bytes  11.02.2015 14:13:39
AEPACK.DLL     : 8.4.0.62      793456 Bytes  20.02.2015 17:36:08
AEOFFICE.DLL   : 8.3.1.16      359280 Bytes  27.03.2015 12:39:58
AEMOBILE.DLL   : 8.1.7.0       281456 Bytes  10.03.2015 12:31:35
AEHEUR.DLL     : 8.1.4.1634   8259496 Bytes  10.04.2015 18:09:10
AEHELP.DLL     : 8.3.2.0       281456 Bytes  20.03.2015 08:11:34
AEGEN.DLL      : 8.1.7.40      456608 Bytes  19.12.2014 15:37:52
AEEXP.DLL      : 8.4.2.82      260968 Bytes  10.04.2015 18:09:10
AEEMU.DLL      : 8.1.3.4       399264 Bytes  07.08.2014 17:20:31
AEDROID.DLL    : 8.4.3.116    1050536 Bytes  10.03.2015 12:31:32
AECORE.DLL     : 8.3.4.0       243624 Bytes  17.12.2014 20:41:40
AEBB.DLL       : 8.1.2.0        60448 Bytes  07.08.2014 17:20:30
AVWINLL.DLL    : 15.0.9.460     26872 Bytes  01.04.2015 07:12:29
AVPREF.DLL     : 15.0.9.460     52984 Bytes  01.04.2015 07:12:33
AVREP.DLL      : 15.0.9.460    220464 Bytes  01.04.2015 07:12:33
AVARKT.DLL     : 15.0.9.460    228088 Bytes  01.04.2015 07:12:30
AVEVTLOG.DLL   : 15.0.9.460    193328 Bytes  01.04.2015 07:12:31
SQLITE3.DLL    : 15.0.9.460    455472 Bytes  01.04.2015 07:12:56
AVSMTP.DLL     : 15.0.9.460     79096 Bytes  01.04.2015 07:12:35
NETNT.DLL      : 15.0.9.460     15152 Bytes  01.04.2015 07:12:53
CommonImageRc.dll: 15.0.9.460   4355376 Bytes  01.04.2015 07:12:29
CommonTextRc.DLL: 15.0.9.476     70960 Bytes  01.04.2015 07:12:29

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\program files (x86)\avira\antivir desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, 
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Abweichende Gefahrenkategorien........: +SPR,

Beginn des Suchlaufs: Sonntag, 12. April 2015  21:04

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
Fehler in der ARK Library

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'dwm.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxCUIService.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'ClassicShellService.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '130' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'adminservice.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCDMonitorService.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'dsiwmis.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'dashost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'HeciServer.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'jhi_service.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'IScheduleSvc.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'RfBtnSvc64.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'ClassicStartMenu.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMutilps32.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhostex.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '278' Modul(e) wurden durchsucht
Durchsuche Prozess 'LManager.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'iuBrowserIEAgent.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'iuEmailOutlookAgent.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerTray.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'MMDx64Fx.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxext.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'unsecapp.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'avmailc7.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avwebg7.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'PresentationFontCache.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'ePowerSvc.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxEM.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxHK.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'igfxTray.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'skydrive.exe' - '94' Modul(e) wurden durchsucht
Durchsuche Prozess 'BtvStack.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'Apoint.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'ActivateDesktop.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVBg64.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'ApMsgFwd.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'Amazon Music Helper.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'BtTray.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'HidFind.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'BackupManagerTray.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'pcee4.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '116' Modul(e) wurden durchsucht
Durchsuche Prozess 'UIExec.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'Apntex.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'GamesAppIntegrationService.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'RIconMan.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'LMS.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'UNS.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'PMMUpdate.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'EgisUpdate.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'SettingSyncHost.exe' - '133' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '145' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '112' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '8' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '15' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '60' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1608' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Festplatte>
C:\swapfile.sys
  [WARNUNG]   Die Datei konnte nicht geöffnet werden!
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\RSHP.exe.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona

Beginne mit der Desinfektion:
C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\RSHP.exe.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir
  [FUND]      Enthält Muster der Software PUA/Subtab.opona
  [WARNUNG]   Die Datei wurde ignoriert.


Ende des Suchlaufs: Montag, 13. April 2015  06:02
Benötigte Zeit:  2:15:09 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  56487 Verzeichnisse wurden überprüft
 1412436 Dateien wurden geprüft
     10 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      1 Dateien konnten nicht durchsucht werden
 1412425 Dateien ohne Befall
  11197 Archive wurden durchsucht
     11 Warnungen
      0 Hinweise
   1097 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

MBAM:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 13.04.2015
Suchlauf-Zeit: 21:45:43
Logdatei: Ergebnis.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.04.13.07
Rootkit Datenbank: v2015.03.31.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: F

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 417158
Verstrichene Zeit: 23 Min, 50 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 1
PUP.Optional.QuickStart.A, HKU\S-1-5-21-3895752773-28151637-153242272-1002\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, In Quarantäne, [a279e18b0189f442e4f62fc162a1f40c]

Registrierungsdaten: 2
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[8d8e6606a2e84aecd0d9ff0233d35ca4]
PUP.Optional.SweetPage.A, HKU\S-1-5-21-3895752773-28151637-153242272-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.sweet-page.com/?type=hp&ts=1402422231&from=wld&uid=TOSHIBAXMQ01ABD075_238LS572SXX238LS572S, Gut: (www.google.com), Schlecht: (hxxp://www.sweet-page.com/?type=hp&ts=1402422231&from=wld&uid=TOSHIBAXMQ01ABD075_238LS572SXX238LS572S),Ersetzt,[04170a6293f775c135cb5ea441c5fa06]

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

FRST:

Code:

ATTFilter

ï»¿Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2015
Ran by F (administrator) on NOTEBOOK on 14-04-2015 18:42:37
Running from C:\Users\F\Desktop
Loaded Profiles: F &  (Available profiles: UpdatusUser & F)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtTray.exe
() C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [661400 2012-11-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtPreLoad.exe [64640 2013-01-28] ()
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [153424 2011-08-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))
HKU\S-1-5-21-3895752773-28151637-153242272-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [27390024 2013-05-31] (Acer Incorporated)
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [Amazon Music] => C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886272 2015-03-03] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\MountPoints2: {0f1adf2a-8de7-11e2-be69-806e6f6e6963} - "D:\Autorun.exe" 
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [27390024 2013-05-31] (Acer Incorporated)
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886272 2015-03-03] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [Adobe Speed Launcher] => 1428952730
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {0f1adf2a-8de7-11e2-be69-806e6f6e6963} - "D:\Autorun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3895752773-28151637-153242272-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com
HKU\S-1-5-21-3895752773-28151637-153242272-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1402422231&from=wld&uid=TOSHIBAXMQ01ABD075_238LS572SXX238LS572S
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll [2013-01-28] (Qualcomm Atheros Commnucations)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\F\AppData\Roaming\Mozilla\Firefox\Profiles\07g4921b.default-1402425214541
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-04-11] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3895752773-28151637-153242272-1002: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2630728 2013-05-31] (Acer Incorporated)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft) [File not signed]
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-03-12] (WildTangent)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1930608 2015-03-27] (Electronic Arts)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-03-16] (Dritek System INC.)
S2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-03-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-05] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-16] (Dritek System Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-09-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 18:42 - 2015-04-14 18:43 - 00019201 _____ () C:\Users\F\Desktop\FRST.txt
2015-04-14 18:42 - 2015-04-14 18:42 - 00000000 ____D () C:\FRST
2015-04-14 18:40 - 2015-04-14 18:40 - 02096640 _____ (Farbar) C:\Users\F\Desktop\FRST64.exe
2015-04-14 18:39 - 2015-04-14 18:39 - 00000464 _____ () C:\Users\F\Desktop\defogger_disable.log
2015-04-14 18:39 - 2015-04-14 18:39 - 00000000 _____ () C:\Users\F\defogger_reenable
2015-04-14 18:38 - 2015-04-14 18:38 - 00050477 _____ () C:\Users\F\Desktop\Defogger.exe
2015-04-13 22:17 - 2015-04-13 22:17 - 00001986 _____ () C:\Users\F\Desktop\Ergebnis.txt
2015-04-13 21:43 - 2015-04-13 21:43 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-13 21:43 - 2015-04-13 21:43 - 00001120 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-13 21:42 - 2015-04-13 21:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\F\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (3).old
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive
2015-04-13 20:56 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (2).old
2015-04-13 19:29 - 2015-04-13 19:29 - 00801912 _____ () C:\WINDOWS\Minidump\041315-28328-01.dmp
2015-04-13 06:05 - 2015-04-13 06:05 - 00293512 _____ () C:\WINDOWS\Minidump\041315-31671-01.dmp
2015-04-12 20:37 - 2015-04-12 20:37 - 00294144 _____ () C:\WINDOWS\Minidump\041215-28937-01.dmp
2015-04-12 19:53 - 2015-04-12 19:53 - 00301472 _____ () C:\WINDOWS\Minidump\041215-34593-01.dmp
2015-04-06 12:52 - 2015-04-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-06 12:49 - 2015-04-06 12:50 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 12:49 - 2015-04-06 12:49 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-03-16 18:36 - 2015-03-16 18:36 - 00000303 _____ () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\Documents\GameShadow
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\Documents\Battlestations-Midway
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameShadow
2015-03-15 13:59 - 2015-03-15 13:59 - 00000000 ____D () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EIDOS
2015-03-15 13:36 - 2015-03-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Battlestations Midway

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 18:39 - 2014-10-26 21:20 - 00000000 ____D () C:\Users\F
2015-04-14 18:39 - 2013-05-22 21:45 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 18:39 - 2013-05-22 21:45 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-14 18:30 - 2014-10-26 22:47 - 00000000 ___RD () C:\Users\F\OneDrive.old
2015-04-14 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-14 18:29 - 2013-06-13 22:55 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-14 05:56 - 2013-06-13 22:55 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-13 23:07 - 2014-10-26 21:12 - 01470241 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-13 22:10 - 2013-05-22 20:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3895752773-28151637-153242272-1002
2015-04-13 21:26 - 2013-05-23 20:51 - 00000000 ____D () C:\Fotos
2015-04-13 21:25 - 2013-05-23 20:51 - 00000000 ____D () C:\Kerstin
2015-04-13 21:21 - 2014-09-24 08:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-13 21:21 - 2014-09-24 07:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2015-04-13 21:21 - 2014-09-24 07:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2015-04-13 21:20 - 2013-08-22 16:46 - 00350112 _____ () C:\WINDOWS\setupact.log
2015-04-13 21:15 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-13 19:29 - 2014-12-19 17:31 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-13 19:28 - 2014-12-19 17:31 - 472977239 _____ () C:\WINDOWS\MEMORY.DMP
2015-04-12 20:51 - 2013-05-23 20:50 - 00000000 ____D () C:\Florian
2015-04-11 16:01 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-06 20:25 - 2013-06-04 21:28 - 00000000 ____D () C:\ProgramData\Origin
2015-04-06 18:09 - 2013-05-22 20:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-06 16:19 - 2014-05-29 11:24 - 00000000 ____D () C:\Users\F\Documents\FIFA 14
2015-04-06 15:21 - 2013-06-04 21:28 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-06 12:51 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-02 19:44 - 2014-09-23 23:06 - 00206988 _____ () C:\WINDOWS\PFRO.log
2015-04-02 17:10 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-01 20:21 - 2013-05-22 21:11 - 00000000 ___RD () C:\Users\F\Desktop\Krempel
2015-04-01 09:20 - 2013-05-22 20:36 - 00000000 ____D () C:\Users\F\AppData\Roaming\Avira
2015-04-01 09:14 - 2013-05-22 20:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-01 09:14 - 2013-05-22 20:35 - 00000000 ____D () C:\ProgramData\Avira
2015-03-26 21:09 - 2014-08-21 21:02 - 00000000 ____D () C:\Users\F\AppData\Local\Adobe
2015-03-25 19:49 - 2014-08-18 11:01 - 00001090 _____ () C:\Users\F\Desktop\tiptoi.lnk
2015-03-25 19:49 - 2014-08-18 11:01 - 00000000 ____D () C:\ProgramData\RavensburgerTipToi
2015-03-15 23:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-15 14:01 - 2014-12-22 20:50 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2015-03-15 14:00 - 2014-08-16 13:58 - 00221956 _____ () C:\WINDOWS\DirectX.log

==================== Files in the root of some directories =======

2013-08-11 20:39 - 2013-08-11 20:39 - 5082084 _____ (The Public) C:\Users\F\AppData\Roaming\Avisynth.exe
2013-08-11 20:40 - 2013-08-11 20:41 - 5243208 _____ (                                                            ) C:\Users\F\AppData\Roaming\AvsP.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 5514668 _____ (LIGHTNING UK!) C:\Users\F\AppData\Roaming\Imgburn.exe
2013-08-11 20:39 - 2013-08-11 20:40 - 1357348 _____ () C:\Users\F\AppData\Roaming\MatroskaSplitter.exe
2013-08-11 20:41 - 2013-08-11 20:41 - 7760687 _____ (Boraxsoft) C:\Users\F\AppData\Roaming\SetupGFD.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 0117723 _____ () C:\Users\F\AppData\Roaming\yuvcodecs-1.3.exe
2014-10-03 12:05 - 2014-10-03 12:05 - 0002409 _____ () C:\Users\F\AppData\Local\recently-used.xbel
2014-02-06 21:34 - 2014-02-06 21:34 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-03-16 05:42 - 2013-03-16 05:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\F\AppData\Local\Temp\avgnt.exe
C:\Users\F\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\F\AppData\Local\Temp\jre-8u31-windows-au.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-13 22:13

==================== End Of Log ============================

FRST Addition:

Code:

ATTFilter

ï»¿Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-04-2015
Ran by F at 2015-04-14 18:43:26
Running from C:\Users\F\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 clear.fi SDK - Video 2 (x32 Version: 2.2.2722 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.2.2729 - CyberLink Corp.) Hidden
1&1 Surf-Stick (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0071 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated)
Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3004 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{8215A318-CC27-435E-B3EA-2E3443C8998C}) (Version: 1.00.3013 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3006.4 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3006.6 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3011 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3012 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.3008.0 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALDI Bestellsoftware 4.14.3 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.116 - Alps Electric)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
Amazon Music Importer (HKLM-x32\...\com.amazon.music.uploader) (Version: 3.1.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 3.1.0 - Amazon Services LLC) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.2 - GPL Public release.)
AvsP (HKLM-x32\...\AvsP_is1) (Version:  - )
Backup Manager v4 (x32 Version: 4.0.0.0071 - NTI Corporation) Hidden
Battlestations: Midway (HKLM-x32\...\{6BC0CDD6-E0C2-434D-9365-23E79E42DA95}) (Version: 1.00.0000 - Ihr Firmenname)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
CivCity (HKLM-x32\...\{994E24A6-EC47-4201-8D0B-D4563B7AD66B}) (Version: 1.10.0000 - Firefly Studios)
Classic Shell (HKLM\...\{7F34ADBE-77C0-47A0-BBC6-B3DA16CE8E68}) (Version: 3.6.7 - IvoSoft)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)
Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)
DVD slideshow GUI 0.9.5.4 (HKLM-x32\...\BE37E547-62DF-43C8-AE6A-D03E82BC67A2_is1) (Version: 0.9.5.4 - Tin2tin)
FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)
FIFA 13 (HKLM-x32\...\{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}) (Version: 1.0.0.0 - Electronic Arts)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Free YouTube to MP3 Converter version 3.12.2.430 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.2.430 - DVDVideoSoft Ltd.)
GameShadow (HKLM-x32\...\{3FD9FADF-E9C2-440B-B787-F44C7185C3D4}) (Version: 2.03.0000 - GameShadow Ltd)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version:  - )
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Acer Inc.)
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.14.20140117 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3006 - Acer Incorporated)
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Zoo Tycoon (HKLM-x32\...\Zoo Tycoon 1.0) (Version:  - )
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 31.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.5.0 (x86 de)) (Version: 31.5.0 - Mozilla)
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9014 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9014 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2008 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.0.10.69 - Electronic Arts, Inc.)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Qualcomm Atheros Communications Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.41 - Qualcomm Atheros)
Ravensburger tiptoi (HKLM-x32\...\Ravensburger tiptoi) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28124 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skigebiet Simulator 2012 (HKLM-x32\...\Skiworld Simulator 2012) (Version:  - )
SpielkanÃ¤le (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 7.1.0.17 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Welt der Zahl 1 (HKLM-x32\...\Welt der Zahl 1) (Version:  - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg SchÃ¶ningh Winklers GmbH)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.7 - WildTangent) Hidden
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3895752773-28151637-153242272-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FB8D2E-3368-42ED-8FC8-8AA0763B98CD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {0F68F58C-0DF4-4736-98FA-893E30F452BA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {14A948FC-495C-436C-A6E4-65DAC79E5392} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {29A724F5-793E-4745-8484-523CA1A17CF6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {302D3EAD-291D-412A-8C8A-5841FFDB23A5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] ()
Task: {314F1477-5E91-4568-945B-71235A489C38} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {36172A88-D35A-42AE-8DCB-E9E73A5DB48E} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-23] ()
Task: {4B042DAA-3E20-4F9A-9514-863E876D93AD} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-20] (CyberLink)
Task: {71B50456-1006-4058-8EDC-602C87A88F98} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-13] (Google Inc.)
Task: {7926FA87-DA5C-4ECC-8267-781CFD8C0023} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] ()
Task: {79C05CE8-4F5D-4BE0-8A7F-CF2AEEA5151B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {8FAAC0A6-B053-4F67-99C4-9C33D3879FD1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-13] (Google Inc.)
Task: {C9FC56C5-5DA7-4F67-B91E-436A4C7D167F} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {CE3610DF-44F9-4346-8844-670E26348870} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-03-11] (Microsoft Corporation)
Task: {D9F0462D-76DC-4445-AB75-8E1D0695B8FC} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {E267F0C9-112C-4F83-9E47-C37401A23E9C} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-10-23] (Acer Incorporated)
Task: {E5507CDC-2F41-42A4-A869-178992957D7C} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-23] ()
Task: {EAC1663F-40B1-4CFE-9A44-FEAAB2C7E5CF} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-01-28 14:45 - 2013-01-28 14:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-28 14:42 - 2013-01-28 14:42 - 00084992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-01-28 14:47 - 2013-01-28 14:47 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-01-28 14:47 - 2013-01-28 14:47 - 00384128 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ContactsApi.dll
2013-01-28 14:42 - 2013-01-28 14:42 - 00020992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2014-07-01 21:53 - 2015-03-03 00:44 - 05886272 _____ () C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe
2013-05-31 10:38 - 2011-08-25 10:50 - 00153424 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
2012-08-23 01:04 - 2012-08-23 01:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-08-23 01:04 - 2012-08-23 01:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-03 02:38 - 2012-11-03 02:38 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-11-03 02:38 - 2012-11-03 02:38 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2013-03-16 05:29 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\F\OneDrive:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3895752773-28151637-153242272-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-3895752773-28151637-153242272-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\F\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\leutasch 2013 (466).jpg
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\F\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\leutasch 2013 (466).jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "AcerCloud"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "Amazon Cloud Player"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "AcerCloud"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Amazon Cloud Player"

==================== Accounts: =============================

Administrator (S-1-5-21-3895752773-28151637-153242272-500 - Administrator - Disabled)
F (S-1-5-21-3895752773-28151637-153242272-1002 - Administrator - Enabled) => C:\Users\F
Gast (S-1-5-21-3895752773-28151637-153242272-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-3895752773-28151637-153242272-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/14/2015 06:36:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts fÃ¼r "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine fÃ¼r die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/14/2015 06:29:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts fÃ¼r "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine fÃ¼r die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/14/2015 05:20:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts fÃ¼r "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine fÃ¼r die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/13/2015 10:27:11 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes fÃ¼r "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstÃ¼tzt wird.

Error: (04/13/2015 10:26:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts fÃ¼r "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine fÃ¼r die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.


System errors:
=============
Error: (04/14/2015 06:36:30 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:26 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:22 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:18 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine TransaktionsrÃ¼ckmeldung von Dienst WerSvc erreicht.

Error: (04/14/2015 06:32:16 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:12 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:08 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:04 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:01 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.

Error: (04/14/2015 06:31:57 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei GerÃ¤t \Device\Harddisk0\DR0.


Microsoft Office Sessions:
=========================
Error: (04/14/2015 06:36:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/14/2015 06:29:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4

Error: (04/14/2015 05:20:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/13/2015 10:27:11 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4

Error: (04/13/2015 10:26:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe


CodeIntegrity Errors:
===================================
  Date: 2015-02-05 15:01:53.830
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\WindowsApps\TuneIn.TuneInRadio_1.0.1.587_neutral__6bhtb546zcxnj\TuneIn.exe that did not meet the Store signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Percentage of memory in use: 24%
Total physical RAM: 8010.27 MB
Available physical RAM: 6008.37 MB
Total Pagefile: 16202.27 MB
Available Pagefile: 13791.92 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Festplatte) (Fixed) (Total:680.39 GB) (Free:480.77 GB) NTFS
Drive d: (FIFA 13) (CDROM) (Total:6.9 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 1424BEBF)

Partition: GPT Partition Type.

==================== End Of Log ============================

Bei GMER gab es zwei Fehlermeldungen:
- "C:\Windows\system32\config\system: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird."
- "C:\Users\F\ntuser.dat: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird."

Nach dem Suchlauf von GMER konnte ich Avira nicht wieder aktivieren, herunterfahren ließ sich der PC auch nicht. Nach einem Neustart (der ziemlich lange gedauert hat), ging es dann wieder ganz normal.

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-04-14 18:54:30
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\0000002f TOSHIBA_MQ01ABD075 rev.AX003J 698,64GB
Running: Gmer-19357.exe; Driver: C:\Users\F\AppData\Local\Temp\uxtoqpog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation       00007ff9f3423e10 7 bytes JMP 00007ffaf13202d0
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW              00007ff9f3423e20 7 bytes JMP 00007ffaf1320308
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                00007ff9f34d39b0 7 bytes JMP 00007ffaf13203b0
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW               00007ff9f34d3ef0 7 bytes JMP 00007ffaf1320340
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                00007ff9f34d3fe0 7 bytes JMP 00007ffaf1320378
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx       00007ff9f35006c0 7 bytes JMP 00007ffaf1320228
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW         00007ff9f3500730 7 bytes JMP 00007ffaf1320298
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleFileNameExW       00007ff9f3500760 7 bytes JMP 00007ffaf1320260
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                 00007ff9f13321d0 5 bytes JMP 00007ffaf1320180
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW            00007ff9f13329d0 7 bytes JMP 00007ffaf13200d8
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW          00007ff9f1334310 5 bytes JMP 00007ffaf1320110
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW              00007ff9f1338d80 5 bytes JMP 00007ffaf1320148
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                 00007ff9f1686d90 10 bytes JMP 00007ffaf1320490
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW             00007ff9f16974a0 5 bytes JMP 00007ffaf1320458
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo      00007ff9f1697560 1 byte JMP 00007ffaf13203e8
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo + 2  00007ff9f1697562 7 bytes {JMP 0xffffffffffc88e88}
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA             00007ff9f16a6b10 5 bytes JMP 00007ffaf1320420
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList         00007ff9f2f81500 8 bytes JMP 00007ffaf13201b8
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo           00007ff9f2f81750 8 bytes JMP 00007ffaf13201f0
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\System32\dxgi.dll!CreateDXGIFactory                 00007ff9ef017750 5 bytes JMP 00007ffaeee900d8
.text   C:\WINDOWS\System32\dwm.exe[5076] C:\WINDOWS\System32\dxgi.dll!CreateDXGIFactory1                00007ff9ef018ee0 5 bytes JMP 00007ffaeee90110

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [2740:244]                                                         fffff9600086d2d0
Thread  C:\WINDOWS\SYSTEM32\ntdll.dll [5808:2808]                                                        00000000001d13a7
Thread  C:\WINDOWS\SYSTEM32\ntdll.dll [5808:4736]                                                        000000006e9af8a0
Thread  C:\WINDOWS\SYSTEM32\ntdll.dll [5808:3908]                                                        000000006e9ae890
Thread  C:\WINDOWS\SYSTEM32\ntdll.dll [5808:3256]                                                        000000006e9af2d0
Thread  C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [1112:4500]     000000006e82c1f0

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                            unknown MBR code

---- EOF - GMER 2.1 ----

Eben erst entdeckt bei meinem Avira unter Ereignissen, kann leider nicht einschätzen ob in diesem Zusammenhang von Bedeutung:
12.04.2015 20:04

Code:

ATTFilter

Beim Zugriff auf Daten der URL "hxxp://fra1.ib.adnxs.com/if?e=wqT_3QLZBPDEUAIAAAIA1gAFCIrnqqkFELLa7LiOmY38DRiok9fBl-TK1lAgASotCQw-uDU1Yfs_EbNvCFd1LfY_GdNNYhBYuRxAIQMTAeQ-PhFAKRM3Op6vSRVAMNydSjjbCkDMEUgCULXv-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&dlo=1&referrer=http%3A%2F%2Fwww.gutefrage.net%2Ffrage%2Fwindows-8-auf-dem-pc-ist-ein-fehler-aufgetreten"
wurde ein Virus oder unerwünschtes Programm 'HTML/Infected.WebPage.Gen2' [virus] gefunden.
Durchgeführte Aktion: Der Zugriff auf die Datei wurde blockiert

06.04.2015 20:07

Code:

ATTFilter

Beim Zugriff auf Daten der URL "hxxp://ams1.ib.adnxs.com/if?e=wqT_3QLVBPDUTAIAAAIA1gAFCL6Wi6kFEPOv9pSs2vvZCRiok9fBl-TK1lAgASotCfH6FK4_uwJAEfjTxY9NWP4_GW8Sg8DKof8_IbhD6w3k_A1AKX5yH07SghJAMOebQjjbCkDMEUgCUL6mowdYuLkLYABozbgCcAB4mvgCgAEAigEDVVNEkgEDRVVSmAGsAqAB-gGoAQGwAQC4AQLAAQXIAQDQAQDYAQDgAQDwAQCKAld1ZignYScsIDI0ODM4NywgMTQyODM0MzYxNCk7dWYoJ2MnLCA0MTY5MTMwRh0ALHInLCAxNTI1ODQzMDYeAPC6kgKtASEtQ3ExdGdpcXVfNEJFTDZtb3djWUFDQzR1UXN3QURnQVFBQkl6QkZRNTV0Q1dBQmd5QU5vQUhBR2VJcXhCSUFCdUFHSUFhcUxBcEFCQVpnQkFhQUJBYWdCQTdBQkFMa0I0SkxwSzgzWUVFREJBWDV5SDA3U2doSkF5UUhNdDNWNWVfVHFQOWtCQWQ0Q0NZb2Y3VF9nQVFEcUFRY3hOek13TURnNTlRRUFBQUFBmgIdIVB3WmFQQTawALB1TGtMSUFBLtgC8ALgAsKDCOoCSWh0dHA6Ly93d3cuZ3V0ZWZyYWdlLm5ldC8FCvBYL2FyYmVpdHNsb3NlbmdlbGQtbmFjaC13ZWhyZGllbnN0LTIzLW1vbmF0ZYADAIgDAZADySqYAw2gAwCqAwCwAwC4AwDAA6wCyAMA2APyqx_gAwDoAwDwAwA.&dlo=1&referrer=http%3A%2F%2Fwww.gutefrage.net%2Ffrage%2Farbeitslosengeld-nach-wehrdienst-23-monate"
wurde ein Virus oder unerwünschtes Programm 'HTML/Infected.WebPage.Gen2' [virus] gefunden.
Durchgeführte Aktion: Der Zugriff auf die Datei wurde blockiert

06.04.2015 20:01

Code:

ATTFilter

Beim Zugriff auf Daten der URL "hxxp://nym1.ib.adnxs.com/if?e=wqT_3QLLBPDEQgIAAAIA1gAFCNmTi6kFEKXotLy4_5SMFhiok9fBl-TK1lAgASotCXEcx3EcxxVAEaNwPQrXoxFAGcHKoUW28wJAIZmUKHmTSRNAKfMPRd7FzxdAMJD6SjjbCkDMEUgCULXv-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_KrH-ADAOgDAPADAA..&dlo=1&referrer=http%3A%2F%2Fwww.gutefrage.net%2Ffrage%2Fwas-bedeutet-vollzeitschulpflicht"
wurde ein Virus oder unerwünschtes Programm 'HTML/Infected.WebPage.Gen2' [virus] gefunden.
Durchgeführte Aktion: Der Zugriff auf die Datei wurde blockiert

Damit wäre ich am Ende meines Lateins und bin für jegliche Hilfe dankbar!

schrauber · 14.04.2015, 19:41

hi,

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Lippi · 14.04.2015, 20:28

Hallo schrauber,

während des Neustarts nach dem Suchlauf von AdwCleaner gab es einen Bluescreen und dadurch erneuten Neustart: KMODE_EXCEPTION_NOT_HANDLED

Code:

ATTFilter

# AdwCleaner v4.201 - Bericht erstellt 14/04/2015 um 20:57:27
# Aktualisiert 08/04/2015 von Xplode
# Datenbank : 2015-04-08.1 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : F - NOTEBOOK
# Gestarted von : C:\Users\F\Desktop\AdwCleaner_4.201.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
Schlüssel Gelöscht : HKU\.DEFAULT\Software\AskPartnerNetwork
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v37.0.1 (x86 de)


*************************

AdwCleaner[R0].txt - [5983 Bytes] - [10/06/2014 21:17:29]
AdwCleaner[R1].txt - [908 Bytes] - [10/06/2014 21:38:33]
AdwCleaner[R2].txt - [1284 Bytes] - [14/04/2015 20:56:16]
AdwCleaner[S0].txt - [4366 Bytes] - [10/06/2014 21:19:16]
AdwCleaner[S1].txt - [1204 Bytes] - [14/04/2015 20:57:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1263  Bytes] ##########

JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.4 (04.13.2015:1)
OS: Windows 8.1 x64
Ran by F on 14.04.2015 at 21:17:30,14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\F\AppData\Roaming\mozilla\firefox\profiles\07g4921b.default-1402425214541\minidumps [6 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.04.2015 at 21:19:33,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST
[CODE]ï»¿
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2015
Ran by F (administrator) on NOTEBOOK on 14-04-2015 21:20:56
Running from C:\Users\F\Desktop
Loaded Profiles: F (Available profiles: UpdatusUser & F)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtTray.exe
() C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [661400 2012-11-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtPreLoad.exe [64640 2013-01-28] ()
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [153424 2011-08-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [27390024 2013-05-31] (Acer Incorporated)
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [Amazon Music] => C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886272 2015-03-03] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\RunOnce: [Adobe Speed Launcher] => 1429038459
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\MountPoints2: {0f1adf2a-8de7-11e2-be69-806e6f6e6963} - "D:\Autorun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll [2013-01-28] (Qualcomm Atheros Commnucations)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\F\AppData\Roaming\Mozilla\Firefox\Profiles\07g4921b.default-1402425214541
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-04-11] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3895752773-28151637-153242272-1002: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2630728 2013-05-31] (Acer Incorporated)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft) [File not signed]
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-03-12] (WildTangent)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1930608 2015-03-27] (Electronic Arts)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-03-16] (Dritek System INC.)
S2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-03-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-05] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-16] (Dritek System Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-09-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 21:19 - 2015-04-14 21:19 - 00000751 _____ () C:\Users\F\Desktop\JRT.txt
2015-04-14 21:17 - 2015-04-14 21:17 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-NOTEBOOK-Windows-8.1-(64-bit).dat
2015-04-14 21:17 - 2015-04-14 21:17 - 00000000 ____D () C:\RegBackup
2015-04-14 21:13 - 2015-04-14 21:16 - 02687136 _____ (Thisisu) C:\Users\F\Desktop\JRT.exe
2015-04-14 21:08 - 2015-04-14 21:08 - 00001343 _____ () C:\Users\F\Desktop\AdwCleaner[S1].txt
2015-04-14 21:03 - 2015-04-14 21:03 - 00291232 _____ () C:\WINDOWS\Minidump\041415-24234-01.dmp
2015-04-14 20:59 - 2015-04-14 20:59 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-14 20:55 - 2015-04-14 20:57 - 00000000 ____D () C:\f05e78e422f81d734c
2015-04-14 20:54 - 2015-04-14 20:54 - 02217984 _____ () C:\Users\F\Desktop\AdwCleaner_4.201.exe
2015-04-14 20:04 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-14 20:04 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-14 20:04 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-14 20:04 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-14 20:04 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-14 20:04 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-14 20:04 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-14 20:04 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-14 20:04 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-14 20:04 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-14 20:04 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-14 20:04 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-14 20:04 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-14 20:04 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-14 20:04 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-14 20:04 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-14 20:04 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-14 20:04 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-14 20:04 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-14 20:04 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-14 20:04 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-14 20:04 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-14 20:04 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-14 20:04 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-14 20:04 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-14 20:04 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-14 20:04 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-14 20:04 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-14 20:04 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-14 20:04 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-14 20:04 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-14 20:04 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-14 20:04 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-14 20:04 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-14 20:04 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-14 20:04 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-14 20:04 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-14 20:04 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-14 20:04 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-14 20:04 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-14 20:04 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-14 20:04 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-14 20:04 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-14 20:04 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-14 20:04 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-14 20:04 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-14 20:04 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-14 20:04 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-14 20:04 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-14 20:04 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-14 20:04 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-14 20:04 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-14 20:04 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-14 20:04 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-14 20:04 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-14 20:04 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-14 20:04 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-14 20:04 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-14 20:04 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-14 20:04 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-14 20:04 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-14 20:04 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-14 20:04 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-14 20:04 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-14 20:04 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-14 18:54 - 2015-04-14 18:54 - 00004458 _____ () C:\Users\F\Desktop\Gmer.txt
2015-04-14 18:48 - 2015-04-14 18:48 - 00380416 _____ () C:\Users\F\Desktop\Gmer-19357.exe
2015-04-14 18:43 - 2015-04-14 18:43 - 00038503 _____ () C:\Users\F\Desktop\Addition.txt
2015-04-14 18:42 - 2015-04-14 21:20 - 00017283 _____ () C:\Users\F\Desktop\FRST.txt
2015-04-14 18:42 - 2015-04-14 21:20 - 00000000 ____D () C:\FRST
2015-04-14 18:40 - 2015-04-14 18:40 - 02096640 _____ (Farbar) C:\Users\F\Desktop\FRST64.exe
2015-04-14 18:39 - 2015-04-14 18:39 - 00000464 _____ () C:\Users\F\Desktop\defogger_disable.log
2015-04-14 18:39 - 2015-04-14 18:39 - 00000000 _____ () C:\Users\F\defogger_reenable
2015-04-14 18:38 - 2015-04-14 18:38 - 00050477 _____ () C:\Users\F\Desktop\Defogger.exe
2015-04-13 21:43 - 2015-04-13 21:43 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-13 21:43 - 2015-04-13 21:43 - 00001120 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-13 21:42 - 2015-04-13 21:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\F\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (3).old
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive
2015-04-13 20:56 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (2).old
2015-04-13 19:29 - 2015-04-13 19:29 - 00801912 _____ () C:\WINDOWS\Minidump\041315-28328-01.dmp
2015-04-13 06:05 - 2015-04-13 06:05 - 00293512 _____ () C:\WINDOWS\Minidump\041315-31671-01.dmp
2015-04-12 20:37 - 2015-04-12 20:37 - 00294144 _____ () C:\WINDOWS\Minidump\041215-28937-01.dmp
2015-04-12 19:53 - 2015-04-12 19:53 - 00301472 _____ () C:\WINDOWS\Minidump\041215-34593-01.dmp
2015-04-06 12:52 - 2015-04-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-06 12:49 - 2015-04-06 12:50 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 12:49 - 2015-04-06 12:49 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-03-16 18:36 - 2015-03-16 18:36 - 00000303 _____ () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\Documents\GameShadow
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\Documents\Battlestations-Midway
2015-03-15 14:01 - 2015-03-15 14:01 - 00000000 ____D () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameShadow
2015-03-15 13:59 - 2015-03-15 13:59 - 00000000 ____D () C:\Users\F\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EIDOS
2015-03-15 13:36 - 2015-03-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Battlestations Midway

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 21:09 - 2014-10-26 22:47 - 00000000 ____D () C:\Users\F\OneDrive.old
2015-04-14 21:09 - 2014-10-26 21:12 - 01058720 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-14 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-14 21:07 - 2014-06-10 21:17 - 00000000 ____D () C:\AdwCleaner
2015-04-14 21:06 - 2013-06-13 22:55 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-14 21:03 - 2014-12-19 17:31 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-14 21:03 - 2013-08-22 16:46 - 00350420 _____ () C:\WINDOWS\setupact.log
2015-04-14 21:03 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-14 21:02 - 2014-12-19 17:31 - 413761367 _____ () C:\WINDOWS\MEMORY.DMP
2015-04-14 20:59 - 2014-09-24 09:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-14 20:59 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-14 20:57 - 2014-10-26 21:20 - 00000000 ____D () C:\Users\F
2015-04-14 20:56 - 2013-06-13 22:55 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-14 20:55 - 2013-09-08 21:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-14 20:55 - 2013-05-23 22:29 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-14 20:55 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-14 20:39 - 2013-05-22 21:45 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-14 20:04 - 2014-11-12 21:08 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-04-14 19:13 - 2014-09-23 23:06 - 00207364 _____ () C:\WINDOWS\PFRO.log
2015-04-14 18:39 - 2013-05-22 21:45 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-13 22:10 - 2013-05-22 20:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3895752773-28151637-153242272-1002
2015-04-13 21:26 - 2013-05-23 20:51 - 00000000 ____D () C:\Fotos
2015-04-13 21:25 - 2013-05-23 20:51 - 00000000 ____D () C:\Kerstin
2015-04-13 21:21 - 2014-09-24 08:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-13 21:21 - 2014-09-24 07:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2015-04-13 21:21 - 2014-09-24 07:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2015-04-12 20:51 - 2013-05-23 20:50 - 00000000 ____D () C:\Florian
2015-04-11 16:01 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-06 20:25 - 2013-06-04 21:28 - 00000000 ____D () C:\ProgramData\Origin
2015-04-06 18:09 - 2013-05-22 20:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-06 16:19 - 2014-05-29 11:24 - 00000000 ____D () C:\Users\F\Documents\FIFA 14
2015-04-06 15:21 - 2013-06-04 21:28 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-02 17:10 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-01 20:21 - 2013-05-22 21:11 - 00000000 ___RD () C:\Users\F\Desktop\Krempel
2015-04-01 09:20 - 2013-05-22 20:36 - 00000000 ____D () C:\Users\F\AppData\Roaming\Avira
2015-04-01 09:14 - 2013-05-22 20:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-01 09:14 - 2013-05-22 20:35 - 00000000 ____D () C:\ProgramData\Avira
2015-03-26 21:09 - 2014-08-21 21:02 - 00000000 ____D () C:\Users\F\AppData\Local\Adobe
2015-03-25 19:49 - 2014-08-18 11:01 - 00001090 _____ () C:\Users\F\Desktop\tiptoi.lnk
2015-03-25 19:49 - 2014-08-18 11:01 - 00000000 ____D () C:\ProgramData\RavensburgerTipToi
2015-03-15 23:18 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-15 14:01 - 2014-12-22 20:50 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2015-03-15 14:00 - 2014-08-16 13:58 - 00221956 _____ () C:\WINDOWS\DirectX.log

==================== Files in the root of some directories =======

2013-08-11 20:39 - 2013-08-11 20:39 - 5082084 _____ (The Public) C:\Users\F\AppData\Roaming\Avisynth.exe
2013-08-11 20:40 - 2013-08-11 20:41 - 5243208 _____ (                                                            ) C:\Users\F\AppData\Roaming\AvsP.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 5514668 _____ (LIGHTNING UK!) C:\Users\F\AppData\Roaming\Imgburn.exe
2013-08-11 20:39 - 2013-08-11 20:40 - 1357348 _____ () C:\Users\F\AppData\Roaming\MatroskaSplitter.exe
2013-08-11 20:41 - 2013-08-11 20:41 - 7760687 _____ (Boraxsoft) C:\Users\F\AppData\Roaming\SetupGFD.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 0117723 _____ () C:\Users\F\AppData\Roaming\yuvcodecs-1.3.exe
2014-10-03 12:05 - 2014-10-03 12:05 - 0002409 _____ () C:\Users\F\AppData\Local\recently-used.xbel
2014-02-06 21:34 - 2014-02-06 21:34 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-03-16 05:42 - 2013-03-16 05:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\F\AppData\Local\Temp\avgnt.exe
C:\Users\F\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\F\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\F\AppData\Local\Temp\Quarantine.exe
C:\Users\F\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-14 19:45

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

schrauber · 15.04.2015, 10:58

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Lippi · 16.04.2015, 18:39

Hallo,

ja, leider immer noch Probleme. Ich habe nach ESET abgebrochen und SecurityCheck erstmal noch nicht ausgeführt, weil:
1) Bluescreen beim Versuch, Antivir zu aktualisieren. Aktualisierungsdateien werden heruntergeladen, können aber nach wie vor nicht installiert werden weil Systemkomponenten nicht geladen werden können oder so ähnlich.
2) Während des Suchlaufs von ESET hat der Rechner plötzlich aus dem Nichts neu gebootet. Hochfahren hat jedoch nicht funktioniert.
3) Bei einem zweiten Suchlauf hat ESET etwas neues gefunden: Win32/SpeedUpMyPC

So langsam mache ich mir ja echt Sorgen ...

Soll ich SecurityCheck jetzt trotzdem laufen lassen?

Logfile ESET Online Scanner:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=be678b26df4a744e84c820f9bd093a10
# engine=23402
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-04-16 01:01:31
# local_time=2015-04-16 03:01:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 3036938 54027384 0 0
# scanned=655150
# found=1
# cleaned=0
# scan_time=15299
sh=92962813AB03375D06DEEC70F8B145DFD7444489 ft=1 fh=be60b5ebbf004ae2 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\F\AppData\Roaming\OpenCandy\1396FBC1D95441C588E387949D64889E\speedupmypcDE.exe.vir"

schrauber · 17.04.2015, 06:12

Der ESET Fund ist schon in Quarantäne. Bitte mal einen Bericht mit Bluescreenview erstellen:

Windows Bluescreen Absturz analysieren und beheben - so geht's - Anleitungen

Lippi · 17.04.2015, 21:43

Die .txt-Datei kann ich leider nicht öffnen, hoffe es geht auch so:

Code:

ATTFilter

<?xml version="1.0" ?>
<crash_list>
<item>
<dump_file>041515-29328-01.dmp</dump_file>
<crash_time>15.04.2015 18:34:38</crash_time>
<bug_check_string>KERNEL_DATA_INPAGE_ERROR</bug_check_string>
<bug_check_code>0x0000007a</bug_check_code>
<parameter_1>00000000`00000004</parameter_1>
<parameter_2>00000000`00000000</parameter_2>
<parameter_3>ffffe001`5fd42010</parameter_3>
<parameter_4>fffff801`d72b3000</parameter_4>
<caused_by_driver>tm.sys</caused_by_driver>
<caused_by_address>tm.sys+5f6d000</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+150ca0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\041515-29328-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>295.104</dump_file_size>
<dump_file_time>15.04.2015 18:36:24</dump_file_time>
</item>
<item>
<dump_file>041415-24234-01.dmp</dump_file>
<crash_time>14.04.2015 21:02:08</crash_time>
<bug_check_string>KMODE_EXCEPTION_NOT_HANDLED</bug_check_string>
<bug_check_code>0x0000001e</bug_check_code>
<parameter_1>ffffffff`c0000005</parameter_1>
<parameter_2>fffff802`46ad221a</parameter_2>
<parameter_3>00000000`00000000</parameter_3>
<parameter_4>000000fb`45ad0b58</parameter_4>
<caused_by_driver>ntoskrnl.exe</caused_by_driver>
<caused_by_address>ntoskrnl.exe+150ca0</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+150ca0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\041415-24234-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>291.232</dump_file_size>
<dump_file_time>14.04.2015 21:03:43</dump_file_time>
</item>
<item>
<dump_file>041315-28328-01.dmp</dump_file>
<crash_time>13.04.2015 19:28:03</crash_time>
<bug_check_string>DRIVER_POWER_STATE_FAILURE</bug_check_string>
<bug_check_code>0x0000009f</bug_check_code>
<parameter_1>00000000`00000003</parameter_1>
<parameter_2>ffffe001`631544d0</parameter_2>
<parameter_3>fffff802`c2e8c960</parameter_3>
<parameter_4>ffffe001`6160dbb0</parameter_4>
<caused_by_driver>ntoskrnl.exe</caused_by_driver>
<caused_by_address>ntoskrnl.exe+1509a0</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+1509a0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\041315-28328-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>801.912</dump_file_size>
<dump_file_time>13.04.2015 19:29:13</dump_file_time>
</item>
<item>
<dump_file>041315-31671-01.dmp</dump_file>
<crash_time>13.04.2015 06:03:54</crash_time>
<bug_check_string>MEMORY_MANAGEMENT</bug_check_string>
<bug_check_code>0x0000001a</bug_check_code>
<parameter_1>00000000`00041201</parameter_1>
<parameter_2>fffff680`150c2000</parameter_2>
<parameter_3>a7c211f3`6231d209</parameter_3>
<parameter_4>ffffe000`f8fc66f0</parameter_4>
<caused_by_driver>ntoskrnl.exe</caused_by_driver>
<caused_by_address>ntoskrnl.exe+1509a0</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+1509a0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\041315-31671-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>293.512</dump_file_size>
<dump_file_time>13.04.2015 06:05:38</dump_file_time>
</item>
<item>
<dump_file>041215-28937-01.dmp</dump_file>
<crash_time>12.04.2015 20:36:01</crash_time>
<bug_check_string>KERNEL_DATA_INPAGE_ERROR</bug_check_string>
<bug_check_code>0x0000007a</bug_check_code>
<parameter_1>00000000`00000004</parameter_1>
<parameter_2>00000000`00000000</parameter_2>
<parameter_3>ffffe000`d10f6a10</parameter_3>
<parameter_4>00000030`8500000c</parameter_4>
<caused_by_driver>ntoskrnl.exe</caused_by_driver>
<caused_by_address>ntoskrnl.exe+1509a0</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+1509a0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\041215-28937-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>294.144</dump_file_size>
<dump_file_time>12.04.2015 20:37:27</dump_file_time>
</item>
<item>
<dump_file>121914-30328-01.dmp</dump_file>
<crash_time>19.12.2014 15:58:19</crash_time>
<bug_check_string>DRIVER_POWER_STATE_FAILURE</bug_check_string>
<bug_check_code>0x0000009f</bug_check_code>
<parameter_1>00000000`00000003</parameter_1>
<parameter_2>ffffe001`648c2060</parameter_2>
<parameter_3>ffffd001`399d1960</parameter_3>
<parameter_4>ffffe001`607788a0</parameter_4>
<caused_by_driver>ntoskrnl.exe</caused_by_driver>
<caused_by_address>ntoskrnl.exe+14f1a0</caused_by_address>
<file_description></file_description>
<product_name></product_name>
<company></company>
<file_version></file_version>
<processor>x64</processor>
<crash_address>ntoskrnl.exe+14f1a0</crash_address>
<stack_address_1></stack_address_1>
<stack_address_2></stack_address_2>
<stack_address_3></stack_address_3>
<computer_name></computer_name>
<full_path>C:\WINDOWS\Minidump\121914-30328-01.dmp</full_path>
<processors_count>4</processors_count>
<major_version>15</major_version>
<minor_version>9600</minor_version>
<dump_file_size>960.312</dump_file_size>
<dump_file_time>19.12.2014 17:33:31</dump_file_time>
</item>
</crash_list>

schrauber · 18.04.2015, 19:58

warum kannste die txt nicht öffnen?

Lippi · 18.04.2015, 21:07

War etwas unpräzise, Entschuldigung. OpenOffice konnte den Text der txt nicht anzeigen. Habe im Eifer des Gefechts nicht daran gedacht, dass es auch noch andere Möglichkeiten gibt.

Sorry, also jetzt richtig:

Code:

ATTFilter

==================================================
Dump File         : 041515-29328-01.dmp
Crash Time        : 15.04.2015 18:34:38
Bug Check String  : KERNEL_DATA_INPAGE_ERROR
Bug Check Code    : 0x0000007a
Parameter 1       : 00000000`00000004
Parameter 2       : 00000000`00000000
Parameter 3       : ffffe001`5fd42010
Parameter 4       : fffff801`d72b3000
Caused By Driver  : tm.sys
Caused By Address : tm.sys+5f6d000
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+150ca0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\041515-29328-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 295.104
Dump File Time    : 15.04.2015 18:36:24
==================================================

==================================================
Dump File         : 041415-24234-01.dmp
Crash Time        : 14.04.2015 21:02:08
Bug Check String  : KMODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x0000001e
Parameter 1       : ffffffff`c0000005
Parameter 2       : fffff802`46ad221a
Parameter 3       : 00000000`00000000
Parameter 4       : 000000fb`45ad0b58
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+150ca0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+150ca0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\041415-24234-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 291.232
Dump File Time    : 14.04.2015 21:03:43
==================================================

==================================================
Dump File         : 041315-28328-01.dmp
Crash Time        : 13.04.2015 19:28:03
Bug Check String  : DRIVER_POWER_STATE_FAILURE
Bug Check Code    : 0x0000009f
Parameter 1       : 00000000`00000003
Parameter 2       : ffffe001`631544d0
Parameter 3       : fffff802`c2e8c960
Parameter 4       : ffffe001`6160dbb0
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+1509a0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+1509a0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\041315-28328-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 801.912
Dump File Time    : 13.04.2015 19:29:13
==================================================

==================================================
Dump File         : 041315-31671-01.dmp
Crash Time        : 13.04.2015 06:03:54
Bug Check String  : MEMORY_MANAGEMENT
Bug Check Code    : 0x0000001a
Parameter 1       : 00000000`00041201
Parameter 2       : fffff680`150c2000
Parameter 3       : a7c211f3`6231d209
Parameter 4       : ffffe000`f8fc66f0
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+1509a0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+1509a0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\041315-31671-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 293.512
Dump File Time    : 13.04.2015 06:05:38
==================================================

==================================================
Dump File         : 041215-28937-01.dmp
Crash Time        : 12.04.2015 20:36:01
Bug Check String  : KERNEL_DATA_INPAGE_ERROR
Bug Check Code    : 0x0000007a
Parameter 1       : 00000000`00000004
Parameter 2       : 00000000`00000000
Parameter 3       : ffffe000`d10f6a10
Parameter 4       : 00000030`8500000c
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+1509a0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+1509a0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\041215-28937-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 294.144
Dump File Time    : 12.04.2015 20:37:27
==================================================

==================================================
Dump File         : 121914-30328-01.dmp
Crash Time        : 19.12.2014 15:58:19
Bug Check String  : DRIVER_POWER_STATE_FAILURE
Bug Check Code    : 0x0000009f
Parameter 1       : 00000000`00000003
Parameter 2       : ffffe001`648c2060
Parameter 3       : ffffd001`399d1960
Parameter 4       : ffffe001`607788a0
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+14f1a0
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+14f1a0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\WINDOWS\Minidump\121914-30328-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 9600
Dump File Size    : 960.312
Dump File Time    : 19.12.2014 17:33:31
==================================================

schrauber · 19.04.2015, 07:43

Mach mal bitte WIndows Update, bis keine mehr gefunden werden.

UNd dann das:

Windows Repair Tool laufen lassen:
Windows reparieren - so geht's - Anleitungen

Lippi · 21.04.2015, 19:58

So, Windows Updates waren problemlos. Habe nur ein optionales weg gelassen, da damit Skype installiert werden sollte. Brauche ich nicht.

Der Neustart im abgesicherten Modus hat einige Probleme verursacht. Mal ein Bluescreen, mal ein eingefrorener Anmeldebildbschirm, mal schwarzer Bildschirm nach dem Hochfahren oder einfach mal so abgeschaltet. Repair Tool ist dann irgendwann mal problemlos drübergelaufen. Allerdings keine Besserung.

Auch eben wieder mehrfach diverse Probleme beim Hochfahren wie oben beschrieben. Avira Antivirus Pro ist noch immer auf dem Stand vom 12.4. weil die Updates problemlos heruntergeladen werden, aber nicht installiert werden können. Fehlermeldung Systemkomponenten können nicht geladen werden.

Meine Hoffnung schwindet ...

schrauber · 22.04.2015, 11:54

Avira komplett deinstallieren, Avira Cleaner benutzen.

Lippi · 26.04.2015, 11:46

Avira Cleaner hat nichts gefunden. Nach De- und Neuinstallation lässt sich Avira Pro wieder aktualisieren. Ich werte das mal als Erfolg! Ob die sonstigen Probleme noch bestehen, kann ich noch nicht sagen.

schrauber · 26.04.2015, 18:25

Dann teste mal und berichte wieder

Lippi · 03.05.2015, 19:18

Hallo,
zumindest habe ich nun nichts gravierendes mehr feststellen können. Bluescreen z. B. gab es keinen mehr.
Ich bin einfach noch mal weiter oben wieder eingestiegen und habe mal weitergemacht bzw. nachgeholt:

SecurityCheck:

Code:

ATTFilter

 Results of screen317's Security Check version 1.00  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 8 Update 45  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	17.0.0.169  
 Mozilla Firefox (37.0.2) 
 Mozilla Thunderbird (31.5.0) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Avira Antivirus sched.exe  
 Avira Antivirus avshadow.exe  
 Avira Antivirus avmailc7.exe  
 Avira Antivirus avwebg7.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

Kann ich Java 32-bit ignorieren, da ich ein 64-bit-System habe?

FRST:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by F (administrator) on NOTEBOOK on 03-05-2015 20:05:26
Running from C:\Users\F\Desktop
Loaded Profiles: F (Available profiles: UpdatusUser & F)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtTray.exe
() C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [661400 2012-11-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtPreLoad.exe [64640 2013-01-28] ()
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [153424 2011-08-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [726320 2015-03-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] (Atheros Communications)
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [27390024 2013-05-31] (Acer Incorporated)
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Run: [Amazon Music] => C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886272 2015-03-03] ()
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\MountPoints2: {0f1adf2a-8de7-11e2-be69-806e6f6e6963} - "D:\Autorun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk [2012-12-20]
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3895752773-28151637-153242272-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll [2013-01-28] (Qualcomm Atheros Commnucations)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-26] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-26] (Oracle Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\F\AppData\Roaming\Mozilla\Firefox\Profiles\07g4921b.default-1402425214541
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-04-11] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3895752773-28151637-153242272-1002: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\F\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [815920 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [434424 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [434424 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1004280 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2630728 2013-05-31] (Acer Incorporated)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft) [File not signed]
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658064 2012-10-23] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-03-12] (WildTangent)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-11-03] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1930608 2015-03-27] (Electronic Arts)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2013-03-16] (Dritek System INC.)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-03-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-24] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-03-16] (Dritek System Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-09-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-03 20:05 - 2015-05-03 20:05 - 00000904 _____ () C:\Users\F\Desktop\checkup.txt
2015-05-03 20:05 - 2015-05-03 20:05 - 00000000 ____D () C:\Users\F\Desktop\FRST-OlderVersion
2015-05-03 20:02 - 2015-05-03 20:02 - 00852616 _____ () C:\Users\F\Downloads\SecurityCheck.exe
2015-04-27 21:06 - 2015-04-27 21:06 - 00000017 _____ () C:\Users\F\AppData\Local\resmon.resmoncfg
2015-04-26 21:06 - 2015-04-26 21:05 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-04-26 21:05 - 2015-04-26 21:05 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-26 21:04 - 2015-04-26 21:04 - 00561576 _____ (Oracle Corporation) C:\Users\F\Downloads\jre-8u45-windows-i586-iftw.exe
2015-04-26 20:59 - 2015-04-26 20:59 - 00003886 _____ () C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-04-26 20:59 - 2015-04-26 20:59 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-04-26 10:32 - 2015-04-26 10:36 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-26 10:32 - 2015-04-26 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-04-26 10:32 - 2015-04-26 10:32 - 00000000 ____D () C:\Users\F\AppData\Roaming\Avira
2015-04-26 10:31 - 2015-04-26 10:36 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-04-26 10:31 - 2015-03-24 14:59 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2015-04-26 10:31 - 2015-03-24 14:59 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-04-26 10:31 - 2015-03-24 14:59 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2015-04-26 10:31 - 2015-03-24 14:59 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2015-04-26 10:16 - 2015-04-26 10:15 - 186726144 _____ () C:\Users\F\Downloads\avira_antivirus_de-de.exe
2015-04-22 19:50 - 2015-04-22 19:50 - 00088626 _____ () C:\Users\F\Downloads\avira_registry_cleaner_de.zip
2015-04-22 19:47 - 2015-04-22 19:47 - 00000000 ____D () C:\Users\F\Desktop\Avira
2015-04-22 19:37 - 2015-04-22 19:37 - 02314104 _____ () C:\Users\F\Downloads\avira_pc_cleaner_de.exe
2015-04-22 19:37 - 2015-04-22 19:37 - 00002071 _____ () C:\Users\F\Desktop\Entfernen des Avira PC Cleaners.lnk
2015-04-22 19:37 - 2015-04-22 19:37 - 00002015 _____ () C:\Users\F\Desktop\Avira PC Cleaner.lnk
2015-04-20 20:42 - 2015-04-20 20:42 - 00280544 _____ () C:\WINDOWS\Minidump\042015-20812-01.dmp
2015-04-20 20:26 - 2015-04-20 20:26 - 00000000 ____D () C:\Users\F\Downloads\tweaking.com_windows_repair_aio
2015-04-20 20:25 - 2015-04-20 20:25 - 10661980 _____ () C:\Users\F\Downloads\tweaking.com_windows_repair_aio.zip
2015-04-19 21:18 - 2015-04-19 21:18 - 00003072 _____ () C:\WINDOWS\System32\Tasks\{9EBDCF22-404C-41E9-B4AA-A25DAB76446E}
2015-04-19 21:16 - 2015-04-19 21:16 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2015-04-19 21:16 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-04-19 21:16 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-04-19 21:15 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-19 21:15 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-19 21:15 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2015-04-19 21:15 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-04-19 21:14 - 2014-11-17 22:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-04-19 21:14 - 2014-11-17 22:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-04-19 21:14 - 2014-11-15 21:05 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-04-19 21:14 - 2014-11-15 08:29 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-04-19 21:14 - 2014-11-14 08:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-04-19 21:14 - 2014-11-14 08:57 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-04-19 21:14 - 2014-11-14 08:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-04-19 21:14 - 2014-11-14 08:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-04-19 21:14 - 2014-11-14 08:39 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-04-19 21:14 - 2014-11-14 07:03 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-04-19 21:14 - 2014-11-10 20:06 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-04-19 21:14 - 2014-11-10 20:06 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-04-19 21:14 - 2014-11-10 20:06 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-04-19 21:14 - 2014-11-10 20:06 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-04-19 21:14 - 2014-11-10 04:57 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-04-19 21:14 - 2014-11-10 03:37 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-04-19 21:14 - 2014-11-10 03:34 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-04-19 21:14 - 2014-11-10 03:26 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-04-19 21:14 - 2014-11-10 03:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-04-19 21:14 - 2014-11-10 03:09 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2015-04-19 21:14 - 2014-11-10 03:08 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-04-19 21:14 - 2014-11-10 03:06 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-04-19 21:14 - 2014-11-10 02:57 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-04-19 21:14 - 2014-11-10 02:57 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-04-19 21:14 - 2014-11-08 06:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-04-19 21:14 - 2014-11-08 05:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2015-04-19 21:14 - 2014-11-08 05:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2015-04-19 21:14 - 2014-11-08 05:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2015-04-19 21:14 - 2014-11-08 05:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2015-04-19 21:14 - 2014-11-08 05:24 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2015-04-19 21:14 - 2014-11-08 05:13 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2015-04-19 21:14 - 2014-11-08 05:13 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2015-04-19 21:14 - 2014-11-08 05:13 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2015-04-19 21:14 - 2014-11-08 04:48 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2015-04-19 21:14 - 2014-11-08 04:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-04-19 21:14 - 2014-11-08 04:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-04-19 21:14 - 2014-11-08 04:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-04-19 21:14 - 2014-11-08 03:58 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2015-04-19 21:14 - 2014-11-08 03:49 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2015-04-19 21:14 - 2014-11-07 05:58 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-04-19 21:14 - 2014-11-07 05:20 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-04-19 21:14 - 2014-11-05 04:12 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
2015-04-19 21:14 - 2014-11-05 04:12 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL
2015-04-19 21:14 - 2014-11-05 04:06 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-04-19 21:14 - 2014-11-05 03:44 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-04-19 21:14 - 2014-11-05 03:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-04-19 21:14 - 2014-11-05 03:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-04-19 21:14 - 2014-11-05 03:39 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL
2015-04-19 21:14 - 2014-11-05 03:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL
2015-04-19 21:14 - 2014-11-05 03:33 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-04-19 21:14 - 2014-11-05 03:21 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-04-19 21:14 - 2014-11-05 03:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-04-19 21:14 - 2014-11-05 03:18 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-04-19 21:14 - 2014-11-05 03:14 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-04-19 21:14 - 2014-11-05 03:06 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-04-19 21:14 - 2014-11-04 21:33 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-04-19 21:14 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-04-19 21:14 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-04-19 21:14 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-04-19 21:14 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-04-19 21:14 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-04-19 21:14 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-04-19 21:14 - 2014-11-04 08:27 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2015-04-19 21:14 - 2014-11-04 07:01 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-04-19 21:14 - 2014-10-31 02:51 - 18823168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-04-19 21:14 - 2014-10-31 02:10 - 15158784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-04-19 21:14 - 2014-10-29 05:05 - 00551232 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-04-19 21:14 - 2014-10-29 03:55 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-04-19 21:14 - 2014-10-29 03:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-04-19 21:14 - 2014-10-21 03:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-04-19 21:14 - 2014-10-21 03:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-04-19 21:14 - 2014-10-21 02:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-04-19 21:14 - 2014-10-21 02:31 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-04-19 21:14 - 2014-10-21 02:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-04-19 21:14 - 2014-10-21 02:30 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-04-19 21:14 - 2014-10-21 02:20 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-04-19 21:14 - 2014-10-17 06:56 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-04-19 21:14 - 2014-10-17 06:56 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-04-19 21:14 - 2014-10-17 06:56 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2015-04-19 21:14 - 2014-10-17 05:35 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-04-18 22:01 - 2015-04-18 22:01 - 00011296 _____ () C:\Users\F\Desktop\bluescreens.txt
2015-04-17 22:27 - 2015-04-17 22:33 - 00000000 ____D () C:\Users\F\Documents\bluescreenview_v1.55
2015-04-17 22:26 - 2015-04-17 22:26 - 00000315 _____ () C:\Users\F\Desktop\Windows 8 Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde - Trojaner-Board.URL
2015-04-15 21:11 - 2015-04-15 21:11 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-04-15 21:06 - 2015-04-15 21:06 - 02347384 _____ (ESET) C:\Users\F\Desktop\esetsmartinstaller_deu.exe
2015-04-15 18:36 - 2015-04-15 18:36 - 00295104 _____ () C:\WINDOWS\Minidump\041515-29328-01.dmp
2015-04-14 21:19 - 2015-04-14 21:19 - 00000751 _____ () C:\Users\F\Desktop\JRT.txt
2015-04-14 21:17 - 2015-04-14 21:17 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-NOTEBOOK-Windows-8.1-(64-bit).dat
2015-04-14 21:17 - 2015-04-14 21:17 - 00000000 ____D () C:\RegBackup
2015-04-14 21:13 - 2015-04-14 21:16 - 02687136 _____ (Thisisu) C:\Users\F\Desktop\JRT.exe
2015-04-14 21:08 - 2015-04-14 21:08 - 00001343 _____ () C:\Users\F\Desktop\AdwCleaner[S1].txt
2015-04-14 21:03 - 2015-04-14 21:03 - 00291232 _____ () C:\WINDOWS\Minidump\041415-24234-01.dmp
2015-04-14 20:59 - 2015-04-14 20:59 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-14 20:55 - 2015-04-14 20:57 - 00000000 ____D () C:\f05e78e422f81d734c
2015-04-14 20:54 - 2015-04-14 20:54 - 02217984 _____ () C:\Users\F\Desktop\AdwCleaner_4.201.exe
2015-04-14 20:04 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-14 20:04 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-14 20:04 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-14 20:04 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-14 20:04 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-14 20:04 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-14 20:04 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-14 20:04 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-14 20:04 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-14 20:04 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-14 20:04 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-14 20:04 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-14 20:04 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-14 20:04 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-14 20:04 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-14 20:04 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-14 20:04 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-14 20:04 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-14 20:04 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-14 20:04 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-14 20:04 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-14 20:04 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-14 20:04 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-14 20:04 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-14 20:04 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-14 20:04 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-14 20:04 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-14 20:04 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-14 20:04 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-14 20:04 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-14 20:04 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-14 20:04 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-14 20:04 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-14 20:04 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-14 20:04 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-14 20:04 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-14 20:04 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-14 20:04 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-14 20:04 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-14 20:04 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-14 20:04 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-14 20:04 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-14 20:04 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-14 20:04 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-14 20:04 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-14 20:04 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-14 20:04 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-14 20:04 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-14 20:04 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-14 20:04 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-14 20:04 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-14 20:04 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-14 20:04 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-14 20:04 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-14 20:04 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-14 20:04 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-14 20:04 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-14 20:04 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-14 20:04 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-14 20:04 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-14 20:04 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-14 20:04 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-14 20:04 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-14 20:04 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-14 20:04 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-14 20:04 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-14 18:54 - 2015-04-14 18:54 - 00004458 _____ () C:\Users\F\Desktop\Gmer.txt
2015-04-14 18:48 - 2015-04-14 18:48 - 00380416 _____ () C:\Users\F\Desktop\Gmer-19357.exe
2015-04-14 18:43 - 2015-04-14 18:43 - 00038503 _____ () C:\Users\F\Desktop\Addition.txt
2015-04-14 18:42 - 2015-05-03 20:05 - 00017880 _____ () C:\Users\F\Desktop\FRST.txt
2015-04-14 18:42 - 2015-05-03 20:05 - 00000000 ____D () C:\FRST
2015-04-14 18:40 - 2015-05-03 20:05 - 02101248 _____ (Farbar) C:\Users\F\Desktop\FRST64.exe
2015-04-14 18:39 - 2015-04-14 18:39 - 00000464 _____ () C:\Users\F\Desktop\defogger_disable.log
2015-04-14 18:39 - 2015-04-14 18:39 - 00000000 _____ () C:\Users\F\defogger_reenable
2015-04-14 18:38 - 2015-04-14 18:38 - 00050477 _____ () C:\Users\F\Desktop\Defogger.exe
2015-04-13 21:43 - 2015-04-13 21:43 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-04-13 21:43 - 2015-04-13 21:43 - 00001120 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-04-13 21:43 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-13 21:43 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-04-13 21:43 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-04-13 21:42 - 2015-04-13 21:42 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\F\Downloads\mbam-setup-2.1.4.1018.exe
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (3).old
2015-04-13 21:03 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive
2015-04-13 20:56 - 2015-04-13 21:03 - 00000000 ___RD () C:\Users\F\OneDrive (2).old
2015-04-13 19:29 - 2015-04-13 19:29 - 00801912 _____ () C:\WINDOWS\Minidump\041315-28328-01.dmp
2015-04-13 06:05 - 2015-04-13 06:05 - 00293512 _____ () C:\WINDOWS\Minidump\041315-31671-01.dmp
2015-04-12 20:37 - 2015-04-12 20:37 - 00294144 _____ () C:\WINDOWS\Minidump\041215-28937-01.dmp
2015-04-12 19:53 - 2015-04-12 19:53 - 00301472 _____ () C:\WINDOWS\Minidump\041215-34593-01.dmp
2015-04-06 12:52 - 2015-04-26 10:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-06 12:49 - 2015-04-06 12:50 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-06 12:49 - 2015-04-06 12:49 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-03 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-03 20:00 - 2013-05-23 20:51 - 00000000 ____D () C:\Kerstin
2015-05-03 19:58 - 2014-10-26 21:12 - 01811120 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-03 19:56 - 2013-06-13 22:55 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-03 19:56 - 2013-06-13 22:55 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-03 19:54 - 2014-09-24 08:17 - 01561384 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-03 19:54 - 2014-09-24 07:43 - 00660862 _____ () C:\WINDOWS\system32\perfh007.dat
2015-05-03 19:54 - 2014-09-24 07:43 - 00134562 _____ () C:\WINDOWS\system32\perfc007.dat
2015-05-03 19:39 - 2013-05-22 21:45 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-03 18:43 - 2014-10-26 22:47 - 00000000 ___RD () C:\Users\F\OneDrive.old
2015-05-03 18:40 - 2013-08-22 16:46 - 00353023 _____ () C:\WINDOWS\setupact.log
2015-05-03 18:40 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-03 18:39 - 2014-09-23 23:06 - 00367140 _____ () C:\WINDOWS\PFRO.log
2015-05-03 18:39 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-30 20:39 - 2013-05-22 20:14 - 00000000 ____D () C:\Users\F\AppData\Roaming\Adobe
2015-04-30 20:23 - 2014-08-21 21:02 - 00000000 ____D () C:\Users\F\AppData\Local\Adobe
2015-04-26 21:14 - 2013-05-22 20:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3895752773-28151637-153242272-1002
2015-04-26 21:06 - 2014-01-26 19:42 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-26 21:05 - 2014-10-29 19:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-26 20:59 - 2013-06-22 19:36 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-26 20:59 - 2013-05-22 21:45 - 00000000 ____D () C:\ProgramData\Adobe
2015-04-26 10:43 - 2013-05-22 20:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-26 10:32 - 2013-05-22 20:35 - 00000000 ____D () C:\ProgramData\Avira
2015-04-22 22:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-04-21 20:59 - 2014-10-26 21:20 - 00000000 ____D () C:\Users\F
2015-04-21 20:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-20 23:07 - 2013-08-22 16:44 - 00364992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-04-20 23:01 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-20 22:09 - 2012-07-26 07:26 - 00000309 _____ () C:\WINDOWS\win.ini
2015-04-20 20:42 - 2014-12-19 17:31 - 350950303 _____ () C:\WINDOWS\MEMORY.DMP
2015-04-19 21:32 - 2014-10-26 22:42 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-04-19 21:29 - 2013-03-16 05:35 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2015-04-19 21:29 - 2013-03-16 05:35 - 00000000 ____D () C:\WINDOWS\system32\NV
2015-04-19 21:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-04-19 21:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup
2015-04-19 21:25 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2015-04-19 21:16 - 2013-08-22 16:46 - 00000262 _____ () C:\WINDOWS\setuperr.log
2015-04-16 03:15 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-15 18:36 - 2014-12-19 17:31 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-14 21:08 - 2014-06-10 21:17 - 00000000 ____D () C:\AdwCleaner
2015-04-14 20:59 - 2014-09-24 09:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-14 20:55 - 2013-09-08 21:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-14 20:55 - 2013-05-23 22:29 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-14 20:04 - 2014-11-12 21:08 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-04-14 18:39 - 2013-05-22 21:45 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 01:24 - 2014-09-24 09:46 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2014-09-24 09:46 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 21:26 - 2013-05-23 20:51 - 00000000 ____D () C:\Fotos
2015-04-12 20:51 - 2013-05-23 20:50 - 00000000 ____D () C:\Florian
2015-04-06 20:25 - 2013-06-04 21:28 - 00000000 ____D () C:\ProgramData\Origin
2015-04-06 16:19 - 2014-05-29 11:24 - 00000000 ____D () C:\Users\F\Documents\FIFA 14
2015-04-06 15:21 - 2013-06-04 21:28 - 00000000 ____D () C:\Program Files (x86)\Origin

==================== Files in the root of some directories =======

2013-08-11 20:39 - 2013-08-11 20:39 - 5082084 _____ (The Public) C:\Users\F\AppData\Roaming\Avisynth.exe
2013-08-11 20:40 - 2013-08-11 20:41 - 5243208 _____ (                                                            ) C:\Users\F\AppData\Roaming\AvsP.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 5514668 _____ (LIGHTNING UK!) C:\Users\F\AppData\Roaming\Imgburn.exe
2013-08-11 20:39 - 2013-08-11 20:40 - 1357348 _____ () C:\Users\F\AppData\Roaming\MatroskaSplitter.exe
2013-08-11 20:41 - 2013-08-11 20:41 - 7760687 _____ (Boraxsoft) C:\Users\F\AppData\Roaming\SetupGFD.exe
2013-08-11 20:39 - 2013-08-11 20:39 - 0117723 _____ () C:\Users\F\AppData\Roaming\yuvcodecs-1.3.exe
2014-10-03 12:05 - 2014-10-03 12:05 - 0002409 _____ () C:\Users\F\AppData\Local\recently-used.xbel
2015-04-27 21:06 - 2015-04-27 21:06 - 0000017 _____ () C:\Users\F\AppData\Local\resmon.resmoncfg
2014-02-06 21:34 - 2014-02-06 21:34 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-03-16 05:42 - 2013-03-16 05:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\F\AppData\Local\Temp\avgnt.exe
C:\Users\F\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\F\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\F\AppData\Local\Temp\Quarantine.exe
C:\Users\F\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-03 18:51

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-04-2015
Ran by F at 2015-04-14 18:43:26
Running from C:\Users\F\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 clear.fi SDK - Video 2 (x32 Version: 2.2.2722 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.2.2729 - CyberLink Corp.) Hidden
1&1 Surf-Stick (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0071 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated)
Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3004 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{8215A318-CC27-435E-B3EA-2E3443C8998C}) (Version: 1.00.3013 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.3006.4 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.3006.6 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3011 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3012 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.3008.0 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALDI Bestellsoftware 4.14.3 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.14.3 - ORWO Net)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.116 - Alps Electric)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
Amazon Music Importer (HKLM-x32\...\com.amazon.music.uploader) (Version: 3.1.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 3.1.0 - Amazon Services LLC) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.2 - GPL Public release.)
AvsP (HKLM-x32\...\AvsP_is1) (Version:  - )
Backup Manager v4 (x32 Version: 4.0.0.0071 - NTI Corporation) Hidden
Battlestations: Midway (HKLM-x32\...\{6BC0CDD6-E0C2-434D-9365-23E79E42DA95}) (Version: 1.00.0000 - Ihr Firmenname)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
CivCity (HKLM-x32\...\{994E24A6-EC47-4201-8D0B-D4563B7AD66B}) (Version: 1.10.0000 - Firefly Studios)
Classic Shell (HKLM\...\{7F34ADBE-77C0-47A0-BBC6-B3DA16CE8E68}) (Version: 3.6.7 - IvoSoft)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)
Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)
DVD slideshow GUI 0.9.5.4 (HKLM-x32\...\BE37E547-62DF-43C8-AE6A-D03E82BC67A2_is1) (Version: 0.9.5.4 - Tin2tin)
FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)
FIFA 13 (HKLM-x32\...\{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}) (Version: 1.0.0.0 - Electronic Arts)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Free YouTube to MP3 Converter version 3.12.2.430 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.2.430 - DVDVideoSoft Ltd.)
GameShadow (HKLM-x32\...\{3FD9FADF-E9C2-440B-B787-F44C7185C3D4}) (Version: 2.03.0000 - GameShadow Ltd)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version:  - )
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Acer Inc.)
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.14.20140117 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3006 - Acer Incorporated)
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Zoo Tycoon (HKLM-x32\...\Zoo Tycoon 1.0) (Version:  - )
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 31.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.5.0 (x86 de)) (Version: 31.5.0 - Mozilla)
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9014 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9014 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.02.2008 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.0.10.69 - Electronic Arts, Inc.)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Qualcomm Atheros Communications Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.41 - Qualcomm Atheros)
Ravensburger tiptoi (HKLM-x32\...\Ravensburger tiptoi) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28124 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skigebiet Simulator 2012 (HKLM-x32\...\Skiworld Simulator 2012) (Version:  - )
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 7.1.0.17 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Welt der Zahl 1 (HKLM-x32\...\Welt der Zahl 1) (Version:  - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.7 - WildTangent) Hidden
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3895752773-28151637-153242272-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FB8D2E-3368-42ED-8FC8-8AA0763B98CD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {0F68F58C-0DF4-4736-98FA-893E30F452BA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {14A948FC-495C-436C-A6E4-65DAC79E5392} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {29A724F5-793E-4745-8484-523CA1A17CF6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {302D3EAD-291D-412A-8C8A-5841FFDB23A5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-11-06] ()
Task: {314F1477-5E91-4568-945B-71235A489C38} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {36172A88-D35A-42AE-8DCB-E9E73A5DB48E} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-23] ()
Task: {4B042DAA-3E20-4F9A-9514-863E876D93AD} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-20] (CyberLink)
Task: {71B50456-1006-4058-8EDC-602C87A88F98} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-13] (Google Inc.)
Task: {7926FA87-DA5C-4ECC-8267-781CFD8C0023} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-21] ()
Task: {79C05CE8-4F5D-4BE0-8A7F-CF2AEEA5151B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {8FAAC0A6-B053-4F67-99C4-9C33D3879FD1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-13] (Google Inc.)
Task: {C9FC56C5-5DA7-4F67-B91E-436A4C7D167F} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {CE3610DF-44F9-4346-8844-670E26348870} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-03-11] (Microsoft Corporation)
Task: {D9F0462D-76DC-4445-AB75-8E1D0695B8FC} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {E267F0C9-112C-4F83-9E47-C37401A23E9C} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-10-23] (Acer Incorporated)
Task: {E5507CDC-2F41-42A4-A869-178992957D7C} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-23] ()
Task: {EAC1663F-40B1-4CFE-9A44-FEAAB2C7E5CF} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-01-28 14:45 - 2013-01-28 14:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-28 14:42 - 2013-01-28 14:42 - 00084992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-01-28 14:47 - 2013-01-28 14:47 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-01-28 14:47 - 2013-01-28 14:47 - 00384128 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ContactsApi.dll
2013-01-28 14:42 - 2013-01-28 14:42 - 00020992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2014-07-01 21:53 - 2015-03-03 00:44 - 05886272 _____ () C:\Users\F\AppData\Local\Amazon Music\Amazon Music Helper.exe
2013-05-31 10:38 - 2011-08-25 10:50 - 00153424 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
2012-08-23 01:04 - 2012-08-23 01:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-08-23 01:04 - 2012-08-23 01:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-03 02:38 - 2012-11-03 02:38 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-11-03 02:38 - 2012-11-03 02:38 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-11-03 02:37 - 2012-11-03 02:37 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2013-03-16 05:29 - 2012-06-25 04:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\F\OneDrive:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\F\OneDrive.old:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3895752773-28151637-153242272-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-3895752773-28151637-153242272-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\F\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\leutasch 2013 (466).jpg
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\F\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\leutasch 2013 (466).jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "AcerCloud"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002\...\StartupApproved\Run: => "Amazon Cloud Player"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "AcerCloud"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"
HKU\S-1-5-21-3895752773-28151637-153242272-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Amazon Cloud Player"

==================== Accounts: =============================

Administrator (S-1-5-21-3895752773-28151637-153242272-500 - Administrator - Disabled)
F (S-1-5-21-3895752773-28151637-153242272-1002 - Administrator - Enabled) => C:\Users\F
Gast (S-1-5-21-3895752773-28151637-153242272-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-3895752773-28151637-153242272-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/14/2015 06:36:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/14/2015 06:29:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/14/2015 05:20:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.

Error: (04/13/2015 10:27:11 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (04/13/2015 10:26:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.


System errors:
=============
Error: (04/14/2015 06:36:30 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:26 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:22 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:36:18 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WerSvc erreicht.

Error: (04/14/2015 06:32:16 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:12 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:08 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:04 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:32:01 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (04/14/2015 06:31:57 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


Microsoft Office Sessions:
=========================
Error: (04/14/2015 06:36:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/14/2015 06:29:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4

Error: (04/14/2015 05:24:18 AM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4

Error: (04/14/2015 05:20:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/13/2015 10:27:11 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\WordAddIn2003.dll.Manifest4

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\ExcelAddIn2003.dll.Manifest4

Error: (04/13/2015 10:27:10 PM) (Source: SideBySide) (EventID: 72) (User: )
Description: asmv2:clrClassInvocationurn:schemas-microsoft-com:asm.v1^entryPointC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.ManifestC:\Program Files (x86)\Acer\Office Addin 2003\PowerPointAddIn2003.dll.Manifest4

Error: (04/13/2015 10:26:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe


CodeIntegrity Errors:
===================================
  Date: 2015-02-05 15:01:53.830
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\WindowsApps\TuneIn.TuneInRadio_1.0.1.587_neutral__6bhtb546zcxnj\TuneIn.exe that did not meet the Store signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Percentage of memory in use: 24%
Total physical RAM: 8010.27 MB
Available physical RAM: 6008.37 MB
Total Pagefile: 16202.27 MB
Available Pagefile: 13791.92 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Festplatte) (Fixed) (Total:680.39 GB) (Free:480.77 GB) NTFS
Drive d: (FIFA 13) (CDROM) (Total:6.9 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 1424BEBF)

Partition: GPT Partition Type.

==================== End Of Log ============================

17.04.2015, 06:12	#6
schrauber /// the machine /// TB-Ausbilder	Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde Der ESET Fund ist schon in Quarantäne. Bitte mal einen Bericht mit Bluescreenview erstellen: Windows Bluescreen Absturz analysieren und beheben - so geht's - Anleitungen __________________ --> Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde

18.04.2015, 19:58	#8
schrauber /// the machine /// TB-Ausbilder	Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde warum kannste die txt nicht öffnen? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

22.04.2015, 11:54	#12
schrauber /// the machine /// TB-Ausbilder	Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde Avira komplett deinstallieren, Avira Cleaner benutzen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

26.04.2015, 18:25	#14
schrauber /// the machine /// TB-Ausbilder	Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde Dann teste mal und berichte wieder __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde

Log-Analyse und Auswertung: Windows 8: Bluescreen, Antivirenprogramm lässt sich nicht aktualisieren, verschiedene PUP-Funde