Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 15.06.2015, 13:11   #1
Patroklos91
 
Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser) - Standard

Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser)



Liebes Trojanerteam,

in unregelmäßigen Abständen werden in Auswahl- und Informationsfenstern wirre Zeichen und Farbverläufe dargestellt. Darüber hinaus hängt sich der Rechner immer wieder bei Internetnutzung auf (sowohl Firefox als auch Chrome) - zunächst wird dabei der Bildschirm von Pixelsturm überlagert und der Rechner stürtzt daraufhin gelegentlich komplett ab ...
Meine bisherigen Virenscans haben nicht zu einer Verbesserung beigetragen. Unten findet ihr die entsprechenden Log-Dateien.

Vielen Dank vorab für eure Unterstützung!
Gruß Patroklos

P.S.: Die Log-Dateien von Avira und Malewarebytes kann ich nachreichen - ich möchte nur nicht direkt auf meinen eigenen Eintrag antworten.


Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:50 on 15/06/2015 (Jonas *****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-06-2015
Ran by Jonas ***** (administrator) on ZUKUNFT on 15-06-2015 13:07:36
Running from C:\Users\Jonas *****\Desktop
Loaded Profiles: Jonas ***** (Available Profiles: Jonas *****)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\ownCloud\owncloud.exe
(Geek Software GmbH) C:\ProgrammeJonas\PDF24\pdf24.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(6 Wunderkinder GmbH) C:\Program Files\Wunderlist2\Wunderlist.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-11-02] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421736 2012-01-16] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ownCloud] => C:\Program Files\ownCloud\owncloud.exe [1253540 2013-04-22] ()
HKLM\...\Run: [PDFPrint] => C:\ProgrammeJonas\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [Wunderlist] => C:\Program Files\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)
HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6714136 2015-05-08] (SUPERAntiSpyware)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2011-03-25]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-10-01]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files\WISO\Steuersoftware 2014\mshaktuell.exe ()
Startup: C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-11-28]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)
Toolbar: HKLM - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2000-11-06] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\nqpp7qwl.default-1434298472436
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-13] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2010-08-18] (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-11-14] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-04] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Extension: Adblock Plus - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\nqpp7qwl.default-1434298472436\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-06-14]
FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-06-03]

Chrome: 
=======
CHR Profile: C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-10]
CHR Extension: (Google Wallet) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-26]
CHR HKLM\...\Chrome\Extension: [ckjhoplcbnkhgnnahfbcdmganjhpcceg] - C:\Users\JONASR~1\AppData\Local\Temp\ckjhoplcbnkhgnnahfbcdmganjhpcceg.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-23] (SUPERAntiSpyware.com)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [450808 2015-06-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-09] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [489408 2009-11-05] (ITETech                  )
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-06-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-06-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-21] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-12] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-06-15] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)
S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [189184 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [33536 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [43392 2012-01-09] (Realtek)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-09] (Avira Operations GmbH & Co. KG)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\JONASR~1\AppData\Local\Temp\catchme.sys [X]
S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 13:07 - 2015-06-15 13:08 - 00014506 _____ C:\Users\Jonas *****\Desktop\FRST.txt
2015-06-15 13:07 - 2015-06-15 13:07 - 00000000 ____D C:\FRST
2015-06-15 13:06 - 2015-06-15 13:06 - 01148416 _____ (Farbar) C:\Users\Jonas *****\Desktop\FRST.exe
2015-06-15 12:50 - 2015-06-15 12:50 - 00000482 _____ C:\Users\Jonas *****\Desktop\defogger_disable.log
2015-06-15 12:50 - 2015-06-15 12:50 - 00000000 _____ C:\Users\Jonas *****\defogger_reenable
2015-06-15 12:46 - 2015-06-15 12:46 - 00050477 _____ C:\Users\Jonas *****\Desktop\Defogger.exe
2015-06-15 12:43 - 2015-06-15 12:44 - 00050477 _____ C:\Users\Jonas *****\Downloads\Defogger.exe
2015-06-15 01:30 - 2015-06-15 01:30 - 00001969 _____ C:\Users\Jonas *****\Desktop\SUPERAntiSpyware Free Edition.lnk
2015-06-15 01:30 - 2015-06-15 01:30 - 00000000 ____D C:\Users\Jonas *****\AppData\Roaming\SUPERAntiSpyware.com
2015-06-15 01:30 - 2015-06-15 01:30 - 00000000 ____D C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-06-15 01:30 - 2015-06-15 01:30 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-06-15 01:30 - 2015-06-15 01:30 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2015-06-15 01:24 - 2015-06-15 01:29 - 21920312 _____ (SUPERAntiSpyware) C:\Users\Jonas *****\Downloads\SUPERAntiSpyware.exe
2015-06-15 00:58 - 2015-06-15 00:58 - 00064236 _____ C:\Users\Jonas *****\Downloads\+UcLCH1+
2015-06-15 00:39 - 2015-06-15 00:42 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Jonas *****\Downloads\mbam-setup-2.1.6.1022.exe
2015-06-15 00:27 - 2015-06-15 00:27 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-06-15 00:27 - 2015-06-15 00:27 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-06-15 00:27 - 2015-06-15 00:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-06-15 00:21 - 2015-06-15 00:21 - 00243592 _____ C:\Users\Jonas *****\Downloads\Firefox Setup Stub 38.0.5.exe
2015-06-14 17:54 - 2015-06-14 17:54 - 00243592 _____ C:\Users\Jonas *****\Downloads\Nicht bestätigt 898654.crdownload
2015-06-14 17:53 - 2015-06-14 17:54 - 00243592 _____ C:\Users\Jonas *****\Downloads\Firefox Setup Stub 38.0.5 (1).exe
2015-06-13 23:54 - 2015-06-13 23:55 - 01290144 _____ C:\Windows\Minidump\061315-22245-01.dmp
2015-06-13 02:15 - 2015-06-13 02:15 - 01125056 _____ (Adobe Systems Incorporated) C:\Users\Jonas *****\Downloads\flashplayer18au_ha_install.exe
2015-06-12 21:13 - 2015-06-12 21:13 - 00962560 _____ C:\Windows\Minidump\061215-20061-01.dmp
2015-06-10 21:02 - 2015-06-10 21:02 - 00515368 _____ C:\Windows\Minidump\061015-31465-01.dmp
2015-06-10 15:34 - 2015-06-02 21:35 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 15:34 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 15:34 - 2015-05-25 19:00 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 15:34 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 15:34 - 2015-05-23 05:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 15:34 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 15:34 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 15:34 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 15:34 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 15:34 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 15:34 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 15:34 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 15:34 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 15:34 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 15:34 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 15:34 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 15:34 - 2015-05-23 05:05 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 15:34 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 15:34 - 2015-05-23 05:00 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 15:34 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 15:34 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 15:34 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 15:34 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 15:34 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 15:34 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 15:34 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 15:34 - 2015-05-23 04:38 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 15:34 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 15:34 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 15:34 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 15:34 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 15:34 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 15:34 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 15:34 - 2015-04-11 05:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-10 15:31 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-06-10 15:31 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 15:31 - 2015-05-25 20:07 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 15:31 - 2015-05-25 20:07 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 15:31 - 2015-05-25 20:04 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 15:31 - 2015-05-25 20:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 15:31 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 15:31 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 15:31 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 15:31 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 15:31 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 15:31 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 15:31 - 2015-05-25 18:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 15:31 - 2015-05-09 05:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 15:31 - 2015-05-09 05:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 15:31 - 2015-05-09 05:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 15:31 - 2015-05-09 05:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 15:31 - 2015-05-09 05:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 03:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 15:31 - 2015-05-09 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 15:31 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 15:31 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 15:31 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 15:31 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 15:31 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 15:31 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 10:08 - 2015-06-10 10:08 - 00636448 _____ C:\Windows\Minidump\061015-21980-01.dmp
2015-06-06 12:34 - 2015-06-10 10:18 - 00078388 _____ C:\Users\Jonas *****\Desktop\Mit schwierigen Texten ringen - Entwurf Vortragshandout -1.odt
2015-06-06 03:24 - 2015-06-06 03:24 - 00000000 ____D C:\Users\Jonas *****\AppData\Local\GWX
2015-06-05 10:15 - 2015-05-22 20:03 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-05 10:15 - 2015-05-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-05 10:15 - 2015-05-22 20:02 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-05 10:15 - 2015-05-22 20:02 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-05 10:15 - 2015-05-22 20:02 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-05 10:15 - 2015-05-22 20:02 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-05 10:15 - 2015-05-22 19:58 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-05 10:15 - 2015-05-21 15:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-03 11:03 - 2015-06-03 11:03 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\Jonas *****\Downloads\flashplayer17au_ha_install.exe
2015-06-03 11:01 - 2015-06-15 00:27 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-05-20 01:15 - 2015-05-20 01:16 - 00001986 _____ C:\DelFix.txt
2015-05-20 01:15 - 2015-05-20 01:15 - 00000000 ____D C:\Windows\ERUNT

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-15 13:08 - 2010-11-25 22:14 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-15 13:07 - 2013-05-08 14:16 - 00710656 ____H C:\Users\Jonas *****\Documents\.csync_journal.db.ctmp
2015-06-15 13:07 - 2013-05-08 14:16 - 00710656 ____H C:\Users\Jonas *****\Documents\.csync_journal.db
2015-06-15 13:04 - 2010-11-26 05:51 - 01839694 _____ C:\Windows\WindowsUpdate.log
2015-06-15 12:59 - 2010-11-25 22:14 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-15 12:59 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-15 12:59 - 2009-07-14 06:39 - 00132283 _____ C:\Windows\setupact.log
2015-06-15 12:56 - 2012-08-06 19:08 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-15 12:50 - 2010-11-25 22:19 - 00000000 ____D C:\Users\Jonas *****
2015-06-15 11:17 - 2010-11-28 15:15 - 00000000 ____D C:\ProgrammeJonas
2015-06-15 00:47 - 2015-05-07 18:56 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-15 00:47 - 2015-05-07 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-06-15 00:47 - 2015-05-07 18:55 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 
2015-06-15 00:47 - 2014-01-06 12:33 - 00001068 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-06-15 00:27 - 2009-07-14 06:34 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-15 00:27 - 2009-07-14 06:34 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-15 00:17 - 2010-08-30 11:48 - 00829512 _____ C:\Windows\PFRO.log
2015-06-14 18:07 - 2015-01-15 23:11 - 00000000 ____D C:\Users\Jonas *****\AppData\Local\Wunderlist
2015-06-13 23:54 - 2011-10-07 00:22 - 00000000 ____D C:\Windows\Minidump
2015-06-13 23:54 - 2011-10-07 00:21 - 374124444 _____ C:\Windows\MEMORY.DMP
2015-06-13 02:22 - 2014-06-12 21:28 - 00000000 ____D C:\Users\Jonas *****\AppData\Local\Adobe
2015-06-13 02:22 - 2012-05-03 17:23 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-06-13 02:22 - 2011-05-15 22:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-06-12 20:26 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2015-06-12 00:23 - 2010-08-28 02:49 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-11 09:43 - 2009-07-14 06:33 - 00345272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 09:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2015-06-11 02:19 - 2013-07-21 03:01 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 02:11 - 2010-08-30 18:47 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 01:48 - 2013-04-07 11:24 - 00000000 ____D C:\ProgramData\Avira
2015-06-10 21:22 - 2013-11-16 20:44 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-10 21:22 - 2013-04-07 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-10 21:22 - 2013-04-07 11:24 - 00000000 ____D C:\Program Files\Avira
2015-06-10 18:14 - 2014-04-03 10:19 - 00000000 ____D C:\Users\Jonas *****\Desktop\Christina
2015-06-10 16:15 - 2012-06-18 08:27 - 00000000 ____D C:\Users\Jonas *****\Documents\EigenePDFs
2015-06-10 00:00 - 2010-11-25 22:14 - 00002125 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-09 11:21 - 2013-04-07 11:24 - 00136728 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-06-09 11:21 - 2013-04-07 11:24 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-09 11:21 - 2013-04-07 11:24 - 00031848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\ssmdrv.sys
2015-06-06 03:18 - 2014-12-11 04:30 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-06 03:18 - 2014-05-07 03:02 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-04 19:49 - 2011-01-10 01:00 - 00000000 ____D C:\Users\Jonas *****\Documents\Privat
2015-05-25 01:41 - 2011-01-10 00:59 - 00000000 ____D C:\Users\Jonas *****\Documents\Studium
2015-05-21 09:30 - 2013-04-07 11:24 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-05-21 03:01 - 2015-04-07 03:01 - 00000000 ___SD C:\Windows\system32\GWX

==================== Files in the root of some directories =======

2012-02-13 17:10 - 2012-02-13 17:10 - 0000085 ___SH () C:\ProgramData\.zreglib
2014-05-29 00:36 - 2014-09-18 01:22 - 0002097 _____ () C:\ProgramData\flcd_proxy.log
2011-12-13 14:19 - 2011-12-13 14:25 - 0000355 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Jonas *****\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-14 05:45

==================== End of log ============================
         
--- --- ---


FRST Additions Logfile:
[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x86) Version: 13-06-2015
Ran by Jonas ***** at 2015-06-15 13:08:45
Running from C:\Users\Jonas *****\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1471510115-2474919708-3564051268-500 - Administrator - Disabled)
Gast (S-1-5-21-1471510115-2474919708-3564051268-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1471510115-2474919708-3564051268-1002 - Limited - Enabled)
Jonas ***** (S-1-5-21-1471510115-2474919708-3564051268-1001 - Administrator - Enabled) => C:\Users\Jonas *****

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.160 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.8.612 - Adobe Systems, Inc.)
Anki (HKLM\...\Anki) (Version:  - )
Apple Application Support (HKLM\...\{343666E2-A059-48AC-AD67-230BF74E2DB2}) (Version: 2.1.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{8153ED9A-C94A-426E-9880-5E6775C08B62}) (Version: 4.0.0.97 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avira (HKLM\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
BlueJ 3.0.4 (HKLM\...\BlueJ_is1) (Version:  - La Trobe University)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden
CdCreate AM Testversion (HKLM\...\{98667FC9-D57F-11DD-B64E-93631AE7A456}) (Version: 2.80.0000 - Galerie Fuchstal)
Cinergy T Stick RC V86.001.1129.2011 (HKLM\...\Cinergy T Stick RC) (Version: 86.001.1129.2011 - )
Cinergy T USB XXS V2.03.03.29 (HKLM\...\Cinergy T USB XXS) (Version: 2.03.03.29 - )
Cinergy T-Stick MKII V9.06.3.01 (HKLM\...\Cinergy T-Stick MKII) (Version: 9.06.3.01 - )
CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden
CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)
CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.3.14949 - Landesfinanzdirektion Thüringen)
FIFA 2003 (HKLM\...\{6A1DC8D4-9FA4-43C3-00B3-5993B4BBE7D4}) (Version:  - )
Funkyplot 1.1.0-pre1 (HKLM\...\Funkyplot_is1) (Version:  - LOGICIEL)
GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.05) (Version: 9.05 - Artifex Software Inc.)
GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Scanjet G4000 Series (HKLM\...\{10297E58-2DFE-478B-9A1D-4B14E4E79CDF}) (Version: 13.0 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
hpg4000 (Version: 13.0.0.0 - Ihr Firmenname) Hidden
HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}) (Version: 10.5.3.3 - Apple Inc.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) SE Development Kit 6 Update 23 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160230}) (Version: 1.6.0.230 - Oracle)
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kalenderchen 6 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Kalenderchen 6) (Version:  - )
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.)
Media Markt Fotoservice 4.4 (HKLM\...\Media Markt Fotoservice_is1) (Version:  - )
Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)
Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Developer - German (HKLM\...\Microsoft Office XP Developer - German) (Version:  - )
Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MiKTeX 2.9 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
MOD 10.0 Baseline (English-x86-CD) (Version: 7.00.9177 - Microsoft) Hidden
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
ownCloud (HKLM\...\ownCloud) (Version: 1.2.5 - ownCloud, Inc)
PDF24 Creator 6.9.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Project64 1.6 (HKLM\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)
Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden
RStudio (HKLM\...\RStudio) (Version: 0.98.983 - RStudio)
Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden
SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Stellar Phoenix Windows Data Recovery-Home (HKLM\...\Stellar Phoenix Windows Data Recovery-Home_is1) (Version: 4.2.0.0 - Stellar Information Systems Ltd)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1194 - SUPERAntiSpyware.com)
TerraTec Home Cinema (HKLM\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - )
Texmaker (HKLM\...\Texmaker) (Version:  - )
TIPP10 Version 2.1.0 (HKLM\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
TmNationsForever (HKLM\...\TmNationsForever_is1) (Version:  - Nadeo)
WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
WinRAR 4.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
WISO Mein Geld 2011 Professional (HKLM\...\WISO Mein Geld 2011 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2011 Professional (Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden
WISO Steuer-Sparbuch 2014 (HKLM\...\{F03AAE28-2598-4490-AB26-2B35A0E58828}) (Version: 21.08.8679 - Buhl Data Service GmbH)
Wunderlist (HKLM\...\{1ca68332-4ba1-4943-9010-eaa1aa45b492}) (Version: 2.3.0.31 - 6 Wunderkinder GmbH)
Wunderlist (Version: 2.3.0.31 - 6 Wunderkinder GmbH) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

20-05-2015 01:16:11 Ende der Bereinigung
21-05-2015 03:00:26 Windows Update
26-05-2015 09:22:23 Windows Update
29-05-2015 10:36:45 Windows Update
02-06-2015 09:26:29 Windows Update
05-06-2015 10:15:21 Windows Update
06-06-2015 03:00:34 Windows Update
09-06-2015 10:09:24 Windows Update
11-06-2015 02:10:40 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-05-11 23:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0A60A988-10D9-4479-A45D-1C830101B29C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {22E8C054-5E1C-4302-8472-2DA1B4D98F27} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {59D093B0-92DA-42A3-A9BF-2B349A2CB79F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-13] (Adobe Systems Incorporated)
Task: {61F13637-483C-42D4-927C-F8099A17FB78} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {6F151318-12A0-4D00-8F09-2EC27733568C} - System32\Tasks\{422FC7C0-2347-4491-A45A-99E34858989B} => pcalua.exe -a C:\Windows\LargoWinchInst\SetupUbi.exe -c -uninstall Largo
Task: {839213CE-0388-4E22-B3FE-93D61DC022BA} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {8A6329B5-0F52-4A46-8FEF-B34930A60984} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {B4121BC4-095D-4EBC-92B2-FE318549A4C1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {B832B0CD-0A6A-4C1D-A623-75D57AFED8EC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {D0B8CBAD-B240-4E45-A1BD-7AFF085A8504} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D67732B8-E5A2-4676-A3D6-7F013BF6DAFC} - System32\Tasks\{B86A33F0-D926-4927-A51E-BF2C8D32A885} => pcalua.exe -a C:\WINDOWS\ISUN0407.EXE -c -f"c:\program files\Uninst.isu" -c"c:\program files\Uninst.dll"
Task: {FFBA1EA6-D069-4824-9A50-36AC9E863182} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2008-09-08 11:19 - 2008-09-08 11:19 - 00022723 _____ () C:\Windows\System32\cl31cl3.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-04-19 19:19 - 2011-03-02 12:40 - 00140288 _____ () C:\ProgrammeJonas\rarext.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2013-04-22 17:00 - 2013-04-22 17:00 - 01253540 _____ () C:\Program Files\ownCloud\owncloud.exe
2012-12-21 15:27 - 2012-12-21 15:27 - 00106700 _____ () C:\Program Files\ownCloud\zlib1.dll
2012-12-22 03:16 - 2012-12-22 03:16 - 00120916 _____ () C:\Program Files\ownCloud\libgcc_s_sjlj-1.dll
2012-12-22 03:16 - 2012-12-22 03:16 - 00864381 _____ () C:\Program Files\ownCloud\libstdc++-6.dll
2012-12-21 15:32 - 2012-12-21 15:32 - 00176680 _____ () C:\Program Files\ownCloud\libpng15-15.dll
2013-04-22 16:58 - 2013-04-22 16:58 - 00816147 _____ () C:\Program Files\ownCloud\libowncloudsync.dll
2013-02-21 16:59 - 2013-02-21 16:59 - 00074118 _____ () C:\Program Files\ownCloud\libqtkeychain.dll
2013-04-22 16:56 - 2013-04-22 16:56 - 00834505 _____ () C:\Program Files\ownCloud\libocsync.dll
2012-12-21 22:13 - 2012-12-21 22:13 - 00038291 _____ () C:\Program Files\ownCloud\libdl.dll
2013-02-04 23:07 - 2013-02-04 23:07 - 00044685 _____ () C:\Program Files\ownCloud\libiniparser.dll
2012-12-21 20:02 - 2012-12-21 20:02 - 00567611 _____ () C:\Program Files\ownCloud\libsqlite3-0.dll
2015-01-09 12:24 - 2015-01-09 12:24 - 01166336 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ReactiveUI\1a96a8c1c19e0195d67a9950d1f4d527\ReactiveUI.ni.dll
2015-01-09 12:24 - 2015-01-09 12:24 - 00027136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinde6f42a4a9#\bcb87239e984b283cc128a55e9bc3aaf\Wunderkinder.Wunderlist.Data.Realtime.ni.dll
2015-01-09 12:24 - 2015-01-09 12:24 - 00376320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Akavache.Portable\47d6f1dd3d6ffb3bc16647055208cdfb\Akavache.Portable.ni.dll
2015-01-09 12:24 - 2015-01-09 12:24 - 00039424 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinded9c6edae#\af819191c1a5d188230c5ce0bfb68220\Wunderkinder.Wunderlist.Presentation.ni.dll
2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2010-05-27 21:40 - 2010-05-27 21:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-10-16 03:50 - 2014-10-16 03:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll
2010-08-30 20:04 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{DC794C29-32CC-4974-9400-D80C6A3F4F00}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe
FirewallRules: [UDP Query User{1A82D905-EDDA-463E-89AB-1F7EB5A51EEA}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe
FirewallRules: [TCP Query User{ED38330D-DEB7-453D-91AA-4ADF5A6425CD}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe
FirewallRules: [UDP Query User{84894ECA-9CB8-4F76-8845-B3B5AF85FC23}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe
FirewallRules: [{FF002A04-FA73-4000-A11C-3BEE45B6CE28}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{5231EEC6-9410-4F31-9391-6AF6F00D3A25}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{C2518630-9012-4A03-8418-6D8580618524}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{55FBD93D-AB58-449B-B772-578D8BC5EBCB}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{3FDB65D5-AD0B-4628-9FDC-5CD0E939A126}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{ED88D7B2-7241-4E41-8DED-87E6BF922CE4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{E9AEA340-D6A4-4EEB-838E-C3D45E8ACEF9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{17F8A429-7A05-4077-A934-3D180CA8968C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{30FF85D6-7CE6-4ED9-8099-FC43AE8A56F6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{83DEC76E-9F83-4302-AEE7-96E03014CFE7}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{5AEA1869-BACB-4F1F-815D-4C453A802D9E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{B963AE06-7617-43F6-AAA9-9D6E092FDF78}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{F1D9C10F-7210-40A8-B8D5-AE7D4FA53A4C}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{826F9D84-EE9C-49CC-BF6D-5467E0572A2E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{DC5B8CE3-C71D-491B-9C1B-BAAD08A5FBF8}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{227EE136-2668-475D-AAFA-0E0C18E3A910}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{5ADE8544-17EB-4B32-B973-F37F7FB9292F}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{B928DD33-32A6-4558-9B6C-1E6C138C5798}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8822F8D9-2068-4F15-B96B-27337BB85C81}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CB9381BD-BA39-4C0D-9201-806A3BD36C15}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{45F8B089-9F2A-4C01-8EAE-4346F8C007DA}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{AAEE0B9D-1D90-4D0F-A441-2A5050AF960D}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{4EB951AF-E1B3-4857-A07E-EA1B78E57990}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{6C1E7793-6B0E-4208-9D2B-BBAFC15BA223}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A9F559C6-EA9A-4A99-9BBD-4FBCBC447E5B}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{2CABA8DC-F77E-4B3A-91C4-E4C3D671D6D4}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [TCP Query User{E1F4401C-95BD-402C-9DB4-9F80F23C836A}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [UDP Query User{A919A04F-22E9-4F1C-B419-581BF64F03CA}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [TCP Query User{B018C01A-B6F6-45E0-A11C-3B0811DA2F0C}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe
FirewallRules: [UDP Query User{7A80BBCD-6AE9-4145-80D3-60AF268FC900}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe
FirewallRules: [TCP Query User{BE522805-BD65-4391-A54F-89CA1E987E64}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [UDP Query User{16FD6222-9F6C-43C5-907F-58406A0F91CE}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [{E2A31A10-9C22-4670-8319-E3C537BD8719}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{C8B0BC7D-986C-40EF-8960-5DEAE2708BD1}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe
FirewallRules: [UDP Query User{D840C2DE-7340-4F8B-ADED-9D4E8A1AB6F2}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe
FirewallRules: [TCP Query User{1F81D1E8-5D16-4DD7-8E17-410EB255B372}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{EFDBDE91-E0F8-470B-AA2F-750FACF6BFFC}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{F7B0EA10-BFA6-4463-8470-1BB8348A165A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{E698263B-6891-4661-9737-D44F821CDED4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CD1C604D-2451-49A0-91A0-9E7167FB4958}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2015 10:40:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15616

Error: (06/15/2015 10:40:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15616

Error: (06/15/2015 02:42:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/14/2015 11:32:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 38.0.5.5623, Zeitstempel: 0x5563c49a
Name des fehlerhaften Moduls: mozalloc.dll, Version: 38.0.5.5623, Zeitstempel: 0x5563b229
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1a38
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9830653

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9830653

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10312

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10312

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (06/15/2015 00:18:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (06/14/2015 01:49:43 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (06/13/2015 11:55:08 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0x8626e510, 0x913415e6, 0x00000000, 0x00000002)C:\Windows\MEMORY.DMP061315-22245-01

Error: (06/13/2015 11:54:56 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎13.‎06.‎2015 um 23:53:40 unerwartet heruntergefahren.

Error: (06/12/2015 11:47:28 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (06/12/2015 09:13:43 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0x85963510, 0x915225e6, 0x00000000, 0x00000002)C:\Windows\MEMORY.DMP061215-20061-01

Error: (06/12/2015 09:13:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎12.‎06.‎2015 um 21:11:45 unerwartet heruntergefahren.

Error: (06/12/2015 09:06:56 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎12.‎06.‎2015 um 21:01:22 unerwartet heruntergefahren.

Error: (06/11/2015 10:19:46 AM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (06/11/2015 01:48:53 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.


Microsoft Office:
=========================
Error: (06/15/2015 10:40:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15616

Error: (06/15/2015 10:40:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15616

Error: (06/15/2015 02:42:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/14/2015 11:32:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe38.0.5.56235563c49amozalloc.dll38.0.5.56235563b2298000000300001aa11a3801d0a6e2a16d117dC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dlld27d9ee8-12dc-11e5-b8aa-6c626d8fb072

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9830653

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9830653

Error: (06/14/2015 05:43:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10312

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10312

Error: (06/14/2015 02:59:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz
Percentage of memory in use: 44%
Total physical RAM: 3063.11 MB
Available physical RAM: 1710.19 MB
Total Pagefile: 6124.54 MB
Available Pagefile: 4135.96 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.16 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:1098.57 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:20.99 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1397.3 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1356.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End of log ============================
         
--- --- ---

--- --- ---



Code:
ATTFilter
GMER Logfile:
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-06-15 13:40:42
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD15 rev.51.0 1397,27GB
Running: Gmer-19357.exe; Driver: C:\Users\JONASR~1\AppData\Local\Temp\pwldypog.sys


---- System - GMER 2.1 ----

SSDT   92653E5E                                                                                                                                         ZwCreateSection
SSDT   92653E36                                                                                                                                         ZwCreateSymbolicLinkObject
SSDT   92653E3B                                                                                                                                         ZwLoadDriver
SSDT   92653E31                                                                                                                                         ZwOpenSection
SSDT   92653E68                                                                                                                                         ZwRequestWaitReplyPort
SSDT   92653E63                                                                                                                                         ZwSetContextThread
SSDT   92653E6D                                                                                                                                         ZwSetSecurityObject
SSDT   92653E40                                                                                                                                         ZwSetSystemInformation
SSDT   92653E72                                                                                                                                         ZwSystemDebugControl
SSDT   92653DFF                                                                                                                                         ZwTerminateProcess
SSDT   92653DFA                                                                                                                                         ZwWriteVirtualMemory

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRequestPort + 14AD                                                                                                                82E5ABB5 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                                           82E94B92 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                                                                              82E9C0BC 4 Bytes  [5E, 3E, 65, 92] {POP ESI; XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11FF                                                                                                              82E9C0C4 4 Bytes  [36, 3E, 65, 92] {XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1313                                                                                                              82E9C1D8 4 Bytes  [3B, 3E, 65, 92] {CMP EDI, [ESI]; XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 13AF                                                                                                              82E9C274 4 Bytes  [31, 3E, 65, 92] {XOR [ESI], EDI; XCHG EDX, EAX}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1553                                                                                                              82E9C418 4 Bytes  [68, 3E, 65, 92]
.text  ...                                                                                                                                              
.text  C:\Windows\system32\DRIVERS\atikmdag.sys                                                                                                         section is writeable [0x91C31000, 0x2FBAB4, 0xE8000020]

---- Registry - GMER 2.1 ----

Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active                                                               
Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@46C54BC5                                                      833
Reg    HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Jonas R\xf7hm\Desktop\ComboFix.exe   1
Reg    HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Jonas R\xf7hm\Desktop\uninstall.exe  1

---- Disk sectors - GMER 2.1 ----

Disk   \Device\Harddisk0\DR0                                                                                                                            unknown MBR code

---- EOF - GMER 2.1 ----
         
--- --- ---

Code:
ATTFilter
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/15/2015 at 02:40 AM

Application Version : 6.0.1194
Database Version : 11919

Scan type       : Complete Scan
Total Scan Time : 01:03:40

Operating System Information
Windows 7 Home Premium 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 1087
Memory threats detected   : 0
Registry items scanned    : 39231
Registry threats detected : 0
File items scanned        : 22693
File threats detected     : 103

Adware.Tracking Cookie
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\IQSTT75S.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\IQSTT75S.txt [ /revsci.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\JTIAI31V.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\JTIAI31V.txt [ /doubleclick.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\UYQ0L4AX.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\UYQ0L4AX.txt [ /splash.trackmania.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\S4IF6ICF.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\S4IF6ICF.txt [ /explore.trackmania.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\KCSJ9DK3.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\KCSJ9DK3.txt [ /maniahome.trackmania.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@webmasterplan[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@webmasterplan[2].txt [ /webmasterplan.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad3.adfarm1.adition[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad3.adfarm1.adition[2].txt [ /ad3.adfarm1.adition.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@wlw.122.2o7[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@wlw.122.2o7[1].txt [ /wlw.122.2o7.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.mlsat02[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.mlsat02[1].txt [ /tracking.mlsat02.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@zanox-affiliate[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@zanox-affiliate[2].txt [ /zanox-affiliate.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@imrworldwide[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@imrworldwide[2].txt [ /imrworldwide.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@mediaplex[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@mediaplex[1].txt [ /mediaplex.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.adform[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.adform[2].txt [ /track.adform.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\6LZLU2V1.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\6LZLU2V1.txt [ /atdmt.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@www.etracker[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@www.etracker[1].txt [ /www.etracker.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ads.quartermedia[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ads.quartermedia[1].txt [ /ads.quartermedia.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@bs.serving-sys[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@bs.serving-sys[1].txt [ /bs.serving-sys.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@traffictrack[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@traffictrack[1].txt [ /traffictrack.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\SFD6UGAG.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\SFD6UGAG.txt [ /ad.yieldmanager.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.webtrekk[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.webtrekk[1].txt [ /track.webtrekk.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad2.adfarm1.adition[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad2.adfarm1.adition[2].txt [ /ad2.adfarm1.adition.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@doubleclick[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@doubleclick[1].txt [ /doubleclick.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@xiti[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@xiti[1].txt [ /xiti.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad1.adfarm1.adition[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad1.adfarm1.adition[2].txt [ /ad1.adfarm1.adition.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@adtech[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@adtech[1].txt [ /adtech.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tradedoubler[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tradedoubler[1].txt [ /tradedoubler.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad.zanox[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad.zanox[1].txt [ /ad.zanox.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\CNI1FTO3.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\CNI1FTO3.txt [ /apmebf.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@de.sitestat[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@de.sitestat[1].txt [ /de.sitestat.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\2EESAJQD.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\2EESAJQD.txt [ /ads.creative-serving.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\3RRX6BTB.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\3RRX6BTB.txt [ /fl01.ct2.comclick.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@im.banner.t-online[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@im.banner.t-online[2].txt [ /im.banner.t-online.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad.adc-serv[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@ad.adc-serv[1].txt [ /ad.adc-serv.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@postadserver.anschlusstor[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@postadserver.anschlusstor[2].txt [ /postadserver.anschlusstor.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.quisma[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.quisma[2].txt [ /tracking.quisma.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\4QLYB6UA.txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\4QLYB6UA.txt [ /adfarm1.adition.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.mindshare[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@tracking.mindshare[1].txt [ /tracking.mindshare.de ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@serving-sys[1].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@serving-sys[1].txt [ /serving-sys.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.webtrekk[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@track.webtrekk[2].txt [ /track.webtrekk.net ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@zanox[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@zanox[2].txt [ /zanox.com ]
	C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@de.sitestat[2].txtC:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Cookies\Low\jonas_*****@de.sitestat[2].txt [ /de.sitestat.com ]
	C:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@AS1.FALKAG[1].TXTC:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@AS1.FALKAG[1].TXT [ /AS1.FALKAG ]
	C:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@ATDMT[2].TXTC:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@ATDMT[2].TXT [ /ATDMT ]
	C:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@KOMTRACK[2].TXTC:\DATENSICHERUNG WALTER MAI 2014\DATENSICHERUNG VOM DESKTOP (FLACH, NT)\WINDOWS\COOKIES\KINDER@KOMTRACK[2].TXT [ /KOMTRACK ]
	.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.xiti.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.atdmt.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.atdmt.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.webtrekk.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.22find.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.atdmt.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.atdmt.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.doubleclick.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	server.adformdsp.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adformdsp.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	de.sitestat.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adtech.de [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.serving-sys.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.serving-sys.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.imrworldwide.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.eyeviewads.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	de.sitestat.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	de.sitestat.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.advertising.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	server.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.advertising.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	server.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	c1.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad4.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.premiumtv.122.2o7.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.mediaplex.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.mediaplex.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.mediaplex.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad1.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.doubleclick.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	dmp.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.serving-sys.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.serving-sys.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adaptv.advertising.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.ru4.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	de.sitestat.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad3.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad2.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adform.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\JONAS *****\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

============================
 Unwanted Programs Detected 
============================
	MoboGenie
	Generic PUP

============
 End of Log 
============
         

 

Themen zu Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser)
antivir, antivirus, avira, bildschirm, bonjour, browser, firefox, firefox 38.0.5, flash player, geld, home, hängt, internet, mozilla, netzwerk, realtek, registry, secur, software, stick, svchost.exe, system, trojaner, usb, windows, wiso




Ähnliche Themen: Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser)


  1. Vielen Dank an das Trojaner-Board und insbesondere an Schrauber!
    Lob, Kritik und Wünsche - 15.08.2015 (3)
  2. Win 7: Updates von Anwenderprogrammen nicht möglich
    Log-Analyse und Auswertung - 30.06.2015 (28)
  3. Darstellungsprobleme von bestimmten Seiten (egal welcher browser)
    Plagegeister aller Art und deren Bekämpfung - 19.02.2015 (11)
  4. Windows 7 Malware oder Trojaner Befall-insbesondere Keyboard betroffen
    Plagegeister aller Art und deren Bekämpfung - 26.10.2014 (37)
  5. Danke an alle Trojaner, insbesondere Cosinus
    Lob, Kritik und Wünsche - 26.09.2014 (0)
  6. Windows 7 (x64): ungewohntes Browser verhalten, instabile Verbindungen (Browser und Wlan)
    Log-Analyse und Auswertung - 20.09.2014 (9)
  7. Herzlichen Dank an das Trojaner-Board und insbesondere an smeenk
    Lob, Kritik und Wünsche - 07.09.2014 (0)
  8. Superdank an trojaner-board und insbesondere an Schrauber
    Lob, Kritik und Wünsche - 25.03.2014 (1)
  9. Danke an Trojanerboard, insbesondere Schrauber !
    Lob, Kritik und Wünsche - 01.02.2014 (0)
  10. Beeindruckende Professionalität - insbesondere Dank an schrauber!
    Lob, Kritik und Wünsche - 22.06.2013 (1)
  11. Vielen Dank Trojaner-Board.de und insbesondere M-K-D-B!
    Lob, Kritik und Wünsche - 11.05.2013 (1)
  12. eigenartiges Problem mit Microsoft Office 2010 - insbesondere mit Outlook
    Plagegeister aller Art und deren Bekämpfung - 01.08.2011 (7)
  13. PC Verlangsamt insbesondere IE - Dropper.gen
    Log-Analyse und Auswertung - 11.03.2011 (2)
  14. PC friert ständig ein, insbesondere beim abspielen von Videos
    Netzwerk und Hardware - 05.04.2008 (2)
  15. Darstellungsprobleme
    Plagegeister aller Art und deren Bekämpfung - 25.08.2004 (1)
  16. Darstellungsprobleme mit dem Trojaner-Board
    Lob, Kritik und Wünsche - 15.03.2003 (25)
  17. Darstellungsprobleme bei CS 1.5
    Archiv - 12.02.2003 (6)

Zum Thema Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser) - Liebes Trojanerteam, in unregelmäßigen Abständen werden in Auswahl- und Informationsfenstern wirre Zeichen und Farbverläufe dargestellt. Darüber hinaus hängt sich der Rechner immer wieder bei Internetnutzung auf (sowohl Firefox als auch - Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser)...
Archiv
Du betrachtest: Windows 7: Darstellungsprobleme bei Anwenderprogrammen (insbesondere Browser) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.