| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Avira Antivir 2015 macht keine updates mehrWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
26.06.2015, 20:49
| #1 |
 |  Avira Antivir 2015 macht keine updates mehr Hallo liebe Community, ich habe seit einigen Tagen (in etwa seit dem 20.06.15) ein Problem mit Avira Antivr 2015. Das tägliche automatische update wird nicht mehr ausgeführt. Ich habe mehrfach versucht das update manuell zu starten aber ich bekam immer die Meldung "Keine Verbindung zum Internet möglich". Das Internet hat aber funktioniert da ich während des upadte-Versuchs im Internet war. Ich habe danach im Internet nach Lösungen gesucht und zuerst die Firewall (Zonealarm) abgeschaltet aber auch dann hat das upadte nicht funktioniert. Daraufhin habe ich Antivir komplett entfernt (nach Anweisung dieses Videos von helpster: hxxp://hxxp://www.helpster.de/bei-antivir-ist-kein-update-moeglich-hilfreiche-hinweise_83261, Download durchgeführt und neu installiert. Danach hat Avira das upadte ohne Probleme durchgeführt. Am nächsten Tag hat das update aber schon wieder nicht funktioniert! Ich bin ein user mit geringem Computer knowhow und hoffe ihr könnt mir helfen. Gruß wamiba Hier ist das Logfile: Exportierte Ereignisse: 26.06.2015 21:18 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 26.06.2015 21:18 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 26.06.2015 20:47 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 26.06.2015 20:46 [Planer] Auftrag gestartet Auftrag "Automatisches Update Free" wurde erfolgreich gestartet. 26.06.2015 20:46 [Planer] Auftrag gestartet Auftrag "update" wurde erfolgreich gestartet. 26.06.2015 20:38 [FireWall] Dienst deaktiviert Der Dienst ist deaktiviert. 26.06.2015 20:38 [Echtzeit-Scanner] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.572 Engine Version: VDF Version: 26.06.2015 20:38 [Hilfsdienst] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.550 Engine Version: 8.3.32.0 VDF Version: 8.11.242.104 26.06.2015 20:36 [FireWall] Dienst aktiviert Der Dienst ist aktiviert. 26.06.2015 20:36 [Planer] Dienst gestartet Der Dienst wurde gestartet. Dienst Version 15.0.11.572 25.06.2015 17:42 [Echtzeit-Scanner] Dienst gestoppt Der Dienst wurde gestoppt. 25.06.2015 17:42 [Planer] Dienst gestoppt Der Dienst wurde gestoppt. 25.06.2015 17:37 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:36 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:35 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:35 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:27 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:27 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:26 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:26 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:22 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:22 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:21 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:21 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:19 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:19 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:16 [Updater] Update nicht ausgeführt Das Update von Computer UWE-HP (192.168.178.45) von "'unbekannt'" ist fehlgeschlagen. Keine Internetverbindung. Es wurden keine neuen Dateien geladen. 25.06.2015 17:16 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 25.06.2015 17:16 [Planer] Auftrag gestartet Auftrag "Automatisches Update Free" wurde erfolgreich gestartet. 25.06.2015 17:16 [Planer] Auftrag gestartet Auftrag "update" wurde erfolgreich gestartet. 25.06.2015 17:06 [Echtzeit-Scanner] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.572 Engine Version: VDF Version: 25.06.2015 17:06 [Hilfsdienst] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.550 Engine Version: 8.3.32.0 VDF Version: 8.11.242.104 25.06.2015 17:05 [Planer] Dienst gestartet Der Dienst wurde gestartet. Dienst Version 15.0.11.572 23.06.2015 15:03 [Planer] Dienst gestoppt Der Dienst wurde gestoppt. 23.06.2015 15:03 [Echtzeit-Scanner] Dienst gestoppt Der Dienst wurde gestoppt. 23.06.2015 14:48 [Updater] Update erfolgreich durchgeführt Update von Avira Free Antivirus auf Computer UWE-HP (192.168.178.45) erfolgreich durchgeführt. Folgende Dateien wurden von "hxxp://personal.avira-update.com/update" aktualisiert: aecore.dll 8.3.7.2 aeheur.dll 8.1.4.1746 aeoffice.dll 8.3.1.38 aescript.dll 8.2.2.74 aeset.dat 8.3.32.0 aedroid.dll 8.4.3.238 aemobile.dll 8.1.7.4 aevdf.dat 8.11.242.104 xbv00020.vdf 8.11.237.30 xbv00042.vdf 8.11.237.62 xbv00043.vdf 8.11.237.64 xbv00044.vdf 8.11.237.96 xbv00045.vdf 8.11.237.128 xbv00046.vdf 8.11.237.130 xbv00047.vdf 8.11.237.132 xbv00048.vdf 8.11.237.134 xbv00049.vdf 8.11.237.136 xbv00050.vdf 8.11.237.138 xbv00051.vdf 8.11.237.160 xbv00052.vdf 8.11.237.182 xbv00053.vdf 8.11.237.204 xbv00054.vdf 8.11.237.224 xbv00055.vdf 8.11.237.226 xbv00056.vdf 8.11.237.228 xbv00057.vdf 8.11.237.230 xbv00058.vdf 8.11.237.234 xbv00059.vdf 8.11.237.236 xbv00060.vdf 8.11.237.238 xbv00061.vdf 8.11.237.240 xbv00062.vdf 8.11.237.242 xbv00063.vdf 8.11.237.244 xbv00064.vdf 8.11.237.246 xbv00065.vdf 8.11.237.248 xbv00066.vdf 8.11.237.250 xbv00067.vdf 8.11.237.252 xbv00068.vdf 8.11.237.254 xbv00069.vdf 8.11.238.0 xbv00070.vdf 8.11.238.4 xbv00071.vdf 8.11.238.6 xbv00072.vdf 8.11.238.8 xbv00073.vdf 8.11.238.10 xbv00074.vdf 8.11.238.12 xbv00075.vdf 8.11.238.32 xbv00076.vdf 8.11.238.52 xbv00077.vdf 8.11.238.72 xbv00078.vdf 8.11.238.94 xbv00079.vdf 8.11.238.96 xbv00080.vdf 8.11.238.98 xbv00081.vdf 8.11.238.102 xbv00082.vdf 8.11.238.122 xbv00083.vdf 8.11.238.140 xbv00084.vdf 8.11.238.178 xbv00085.vdf 8.11.238.196 xbv00086.vdf 8.11.238.214 xbv00087.vdf 8.11.238.232 xbv00088.vdf 8.11.238.250 xbv00089.vdf 8.11.239.12 xbv00090.vdf 8.11.239.16 xbv00091.vdf 8.11.239.18 xbv00092.vdf 8.11.239.20 xbv00093.vdf 8.11.239.22 xbv00094.vdf 8.11.239.24 xbv00095.vdf 8.11.239.42 xbv00096.vdf 8.11.239.44 xbv00097.vdf 8.11.239.60 xbv00098.vdf 8.11.239.76 xbv00099.vdf 8.11.239.92 xbv00100.vdf 8.11.239.124 xbv00101.vdf 8.11.239.140 xbv00102.vdf 8.11.239.142 xbv00103.vdf 8.11.239.144 xbv00104.vdf 8.11.239.160 xbv00105.vdf 8.11.239.176 xbv00106.vdf 8.11.239.192 xbv00107.vdf 8.11.239.208 xbv00108.vdf 8.11.239.210 xbv00109.vdf 8.11.239.212 xbv00110.vdf 8.11.239.216 xbv00111.vdf 8.11.239.218 xbv00112.vdf 8.11.239.220 xbv00113.vdf 8.11.239.222 xbv00114.vdf 8.11.239.224 xbv00115.vdf 8.11.239.240 xbv00116.vdf 8.11.239.254 xbv00117.vdf 8.11.240.14 xbv00118.vdf 8.11.240.28 xbv00119.vdf 8.11.240.30 xbv00120.vdf 8.11.240.32 xbv00121.vdf 8.11.240.34 xbv00122.vdf 8.11.240.40 xbv00123.vdf 8.11.240.42 xbv00124.vdf 8.11.240.44 xbv00125.vdf 8.11.240.46 xbv00126.vdf 8.11.240.50 xbv00127.vdf 8.11.240.52 xbv00128.vdf 8.11.240.54 xbv00129.vdf 8.11.240.56 xbv00130.vdf 8.11.240.58 xbv00131.vdf 8.11.240.60 xbv00132.vdf 8.11.240.64 xbv00133.vdf 8.11.240.66 xbv00134.vdf 8.11.240.84 xbv00135.vdf 8.11.240.98 xbv00136.vdf 8.11.240.112 xbv00137.vdf 8.11.240.126 xbv00138.vdf 8.11.240.140 xbv00139.vdf 8.11.240.142 xbv00140.vdf 8.11.240.144 xbv00141.vdf 8.11.240.158 xbv00142.vdf 8.11.240.170 xbv00143.vdf 8.11.240.182 xbv00144.vdf 8.11.240.194 xbv00145.vdf 8.11.240.196 xbv00146.vdf 8.11.240.198 xbv00147.vdf 8.11.240.200 xbv00148.vdf 8.11.240.202 xbv00149.vdf 8.11.240.204 xbv00150.vdf 8.11.240.206 xbv00151.vdf 8.11.240.218 xbv00152.vdf 8.11.240.234 xbv00153.vdf 8.11.240.246 xbv00154.vdf 8.11.241.2 xbv00155.vdf 8.11.241.14 xbv00156.vdf 8.11.241.16 xbv00157.vdf 8.11.241.18 xbv00158.vdf 8.11.241.20 xbv00159.vdf 8.11.241.22 xbv00160.vdf 8.11.241.24 xbv00161.vdf 8.11.241.26 xbv00162.vdf 8.11.241.28 xbv00163.vdf 8.11.241.30 xbv00164.vdf 8.11.241.32 xbv00165.vdf 8.11.241.34 xbv00166.vdf 8.11.241.36 xbv00167.vdf 8.11.241.40 xbv00168.vdf 8.11.241.42 xbv00169.vdf 8.11.241.54 xbv00170.vdf 8.11.241.64 xbv00171.vdf 8.11.241.74 xbv00172.vdf 8.11.241.84 xbv00173.vdf 8.11.241.94 xbv00174.vdf 8.11.241.98 xbv00175.vdf 8.11.241.100 xbv00176.vdf 8.11.241.102 xbv00177.vdf 8.11.241.104 xbv00178.vdf 8.11.241.106 xbv00179.vdf 8.11.241.108 xbv00180.vdf 8.11.241.116 xbv00181.vdf 8.11.241.118 xbv00182.vdf 8.11.241.128 xbv00183.vdf 8.11.241.140 xbv00184.vdf 8.11.241.150 xbv00185.vdf 8.11.241.160 xbv00186.vdf 8.11.241.162 xbv00187.vdf 8.11.241.164 xbv00188.vdf 8.11.241.166 xbv00189.vdf 8.11.241.174 xbv00190.vdf 8.11.241.176 xbv00191.vdf 8.11.241.188 xbv00192.vdf 8.11.241.196 xbv00193.vdf 8.11.241.204 xbv00194.vdf 8.11.241.212 xbv00195.vdf 8.11.241.220 xbv00196.vdf 8.11.241.232 xbv00197.vdf 8.11.241.234 xbv00198.vdf 8.11.241.238 xbv00199.vdf 8.11.241.240 xbv00200.vdf 8.11.241.242 xbv00201.vdf 8.11.241.246 xbv00202.vdf 8.11.241.254 xbv00203.vdf 8.11.242.6 xbv00204.vdf 8.11.242.14 xbv00205.vdf 8.11.242.30 xbv00206.vdf 8.11.242.40 xbv00207.vdf 8.11.242.50 xbv00208.vdf 8.11.242.60 xbv00209.vdf 8.11.242.70 xbv00210.vdf 8.11.242.72 xbv00211.vdf 8.11.242.74 xbv00212.vdf 8.11.242.76 xbv00213.vdf 8.11.242.78 xbv00214.vdf 8.11.242.80 xbv00215.vdf 8.11.242.82 xbv00216.vdf 8.11.242.84 xbv00217.vdf 8.11.242.86 xbv00218.vdf 8.11.242.90 xbv00219.vdf 8.11.242.92 xbv00220.vdf 8.11.242.94 xbv00221.vdf 8.11.242.98 xbv00222.vdf 8.11.242.100 xbv00223.vdf 8.11.242.102 xbv00224.vdf 8.11.242.104 xbv00225.vdf 8.11.237.30 xbv00226.vdf 8.11.237.30 xbv00227.vdf 8.11.237.30 xbv00228.vdf 8.11.237.30 xbv00229.vdf 8.11.237.30 xbv00230.vdf 8.11.237.30 xbv00231.vdf 8.11.237.30 xbv00232.vdf 8.11.237.30 xbv00233.vdf 8.11.237.30 xbv00234.vdf 8.11.237.30 xbv00235.vdf 8.11.237.30 xbv00236.vdf 8.11.237.30 xbv00237.vdf 8.11.237.30 xbv00238.vdf 8.11.237.30 xbv00239.vdf 8.11.237.30 xbv00240.vdf 8.11.237.30 xbv00241.vdf 8.11.237.30 xbv00242.vdf 8.11.237.30 xbv00243.vdf 8.11.237.30 xbv00244.vdf 8.11.237.30 xbv00245.vdf 8.11.237.30 xbv00246.vdf 8.11.237.30 xbv00247.vdf 8.11.237.30 xbv00248.vdf 8.11.237.30 xbv00249.vdf 8.11.237.30 xbv00250.vdf 8.11.237.30 xbv00251.vdf 8.11.237.30 xbv00252.vdf 8.11.237.30 xbv00253.vdf 8.11.237.30 xbv00254.vdf 8.11.237.30 xbv00255.vdf 8.11.237.30 local000.vdf webcat0.dat webcat1.dat webcat2.dat webcat3.dat webcat4.dat repair.rdf 1.0.8.54 avweb.yml 14.0.5.22 23.06.2015 14:44 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 23.06.2015 14:28 [FireWall] Dienst deaktiviert Der Dienst ist deaktiviert. 23.06.2015 14:27 [Echtzeit-Scanner] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.572 Engine Version: VDF Version: 23.06.2015 14:27 [Hilfsdienst] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.550 Engine Version: 8.3.30.38 VDF Version: 8.11.235.96 23.06.2015 14:26 [FireWall] Dienst aktiviert Der Dienst ist aktiviert. 23.06.2015 14:26 [Planer] Dienst gestartet Der Dienst wurde gestartet. Dienst Version 15.0.11.572 23.06.2015 14:24 [Echtzeit-Scanner] Dienst gestoppt Der Dienst wurde gestoppt. 23.06.2015 14:24 [Planer] Dienst gestoppt Der Dienst wurde gestoppt. 23.06.2015 14:24 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 23.06.2015 14:22 [Planer] Auftrag gestartet Auftrag "AVImmediateUpdateJobEx" wurde erfolgreich gestartet. 23.06.2015 14:21 [FireWall] Dienst deaktiviert Der Dienst ist deaktiviert. 23.06.2015 14:20 [Planer] Auftrag gestartet Auftrag "update_after_installation" wurde erfolgreich gestartet. 23.06.2015 14:19 [Planer] Auftrag gestartet Auftrag "AVRunFact" wurde erfolgreich gestartet. 23.06.2015 14:19 [Planer] Auftrag gestartet Auftrag "AVRunFact" wurde erfolgreich gestartet. 23.06.2015 14:19 [Planer] Dienst gestartet Der Dienst wurde gestartet. Dienst Version 15.0.11.572 23.06.2015 14:19 [Echtzeit-Scanner] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.572 Engine Version: VDF Version: 23.06.2015 14:19 [Hilfsdienst] Dienst gestartet Der Dienst wurde gestartet. Dienst Version: 15.0.11.550 Engine Version: 8.3.30.38 VDF Version: 8.11.235.96 Hier ist das Logfile des update-Berichts: Avira Free Antivirus Updater Vollständiges Produktupdate Erstellungszeitpunkt: Freitag, 26. Juni 2015 21:18:07 Betriebssystem: Windows 7 Home Premium (Service Pack 1) [6.1.7601] 64 bit Produktinformationen: Produktversion: 15.0.11.574 Updater: C:\Program Files (x86)\Avira\Antivirus\update.exe 15.0.11.572 Updaterresource: C:\Program Files (x86)\Avira\Antivirus\updaterc.dll 15.0.11.478 Bibliothek: C:\Program Files (x86)\Avira\Antivirus\update.dll 15.0.11.574 GUI: C:\Program Files (x86)\Avira\Antivirus\updgui.dll 15.0.11.574 Temporäres Verzeichnis: C:\ProgramData\Avira\Antivirus\TEMP\UPDATE\ Backupverzeichnis: C:\ProgramData\Avira\Antivirus\BACKUP\ Installationsverzeichnis: C:\Program Files (x86)\Avira\Antivirus\ Updaterverzeichnis: C:\Program Files (x86)\Avira\Antivirus\ AppData Verzeichnis: C:\ProgramData\Avira\Antivirus\ Verbindungseinstellungen: - Verbindungsart: Webserver - Übertragungstyp: Vorhandene Verbindung - Proxyeinstellungen: Verwende Systemeinstellungen 21:18:07 [UPD] [INFO] Get product file 21:18:08 [UPD] [ERROR] Verbindung zu Avira Update-Bridge fehlgeschlagen: WinHTTP: Failed to open internet (ErrorCode: 12175). Überprüfen Sie Ihre Internetverbindung oder die Einstellungen Ihres Proxy-Servers. 21:18:10 [UPD] [INFO] Get product file 21:18:10 [UPD] [ERROR] Verbindung zu Avira Update-Bridge fehlgeschlagen: WinHTTP: Failed to open internet (ErrorCode: 12175). Überprüfen Sie Ihre Internetverbindung oder die Einstellungen Ihres Proxy-Servers. 21:18:14 [UPD] [INFO] Get product file 21:18:14 [UPD] [ERROR] Verbindung zu Avira Update-Bridge fehlgeschlagen: WinHTTP: Failed to open internet (ErrorCode: 12175). Überprüfen Sie Ihre Internetverbindung oder die Einstellungen Ihres Proxy-Servers. 21:18:20 [UPD] [INFO] Get product file 21:18:20 [UPD] [ERROR] Verbindung zu Avira Update-Bridge fehlgeschlagen: WinHTTP: Failed to open internet (ErrorCode: 12175). Überprüfen Sie Ihre Internetverbindung oder die Einstellungen Ihres Proxy-Servers. 21:18:20 [UPD] [ERROR] Fehlende Einstellungen von Updater-Bridge: Server '' Datei '' Zusammenfassung: **************** 0 Dateien heruntergeladen 0 Dateien installiert Freitag, 26. Juni 2015 21:18:20 Das Update ist fehlgeschlagen! |
|
26.06.2015, 22:44
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Avira Antivir 2015 macht keine updates mehr Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
28.06.2015, 11:07
| #3 |
| | Avira Antivir 2015 macht keine updates mehr Hallo Cosinus,
__________________erst einmal Danke für deine Hilfe! Ich habe noch Malwarebytes und Spyware Spyware Terminator 2012 (beides die Free-Version) auf dem Rechner. Ich habe bei Malwarebytes die Logs und Suchläufe vom 16.-28.06.15 einetragen da ich nicht weiss wie lange zurück du die Logs brauchst. Solltest du noch ältere brauchen schreibe mir einfach. Malwarebytes Anti-Malware www.malwarebytes.org Error, 16.06.2015 10:54, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 16.06.2015 10:54, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 16.06.2015 10:54, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Error, 16.06.2015 11:25, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 16.06.2015 11:25, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 16.06.2015 11:25, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 16.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, Remediation Database, 2015.5.13.1, 2015.6.15.1, Update, 16.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, IP Database, 0.0.0.0, 2015.6.12.1, Update, 16.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, Domain Database, 0.0.0.0, 2015.6.12.1, Update, 16.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, Rootkit Database, 2015.6.2.1, 2015.6.15.1, Update, 16.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.12.6, 2015.6.16.3, Error, 16.06.2015 13:44, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 16.06.2015 13:44, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 16.06.2015 13:44, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Error, 16.06.2015 17:58, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 16.06.2015 17:58, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 16.06.2015 17:58, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 18.06.2015 17:21, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 18.06.2015 17:21, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 18.06.2015 17:21, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Error, 18.06.2015 17:48, SYSTEM, UWE-HP, Scheduler, 0, Update, 18.06.2015 17:48, SYSTEM, UWE-HP, Scheduler, Malware Database, Failed, Unable to access update server, 2015.6.16.3, 2015.6.18.4, Update, 18.06.2015 18:47, SYSTEM, UWE-HP, Scheduler, Failed, Unable to access update server, Update, 18.06.2015 19:10, SYSTEM, UWE-HP, Manual, Malware Database, 2015.6.16.3, 2015.6.18.4, Scan, 18.06.2015 19:14, SYSTEM, UWE-HP, Manual, Start: 18.06.2015 19:10, Dauer: 3 Min. 51 Sek., Benutzerdefinierter Suchlauf, Abgebrochen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen, Update, 18.06.2015 20:44, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.18.4, 2015.6.18.5, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 18.06.2015 Suchlaufzeit: 19:10 Protokolldatei: Suchlauf_18.06.2015.txt Administrator: Ja Version: 2.01.6.1022 Malware-Datenbank: v2015.06.18.04 Rootkit-Datenbank: v2015.06.15.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: uwe Suchlauftyp: Benutzerdefinierter Suchlauf Ergebnis: Abgebrochen Durchsuchte Objekte: 0 (keine bösartigen Elemente erkannt) Abgelaufene Zeit: 3 Min., 51 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 19.06.2015 18:56, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 19.06.2015 18:56, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 19.06.2015 18:56, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 19.06.2015 19:46, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.18.5, 2015.6.19.4, Error, 19.06.2015 19:53, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 19.06.2015 19:53, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 19.06.2015 19:53, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 21.06.2015 11:19, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 21.06.2015 11:19, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 21.06.2015 11:19, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 21.06.2015 11:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.19.4, 2015.6.21.1, Update, 21.06.2015 14:56, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.21.1, 2015.6.21.2, Update, 21.06.2015 18:54, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.21.2, 2015.6.21.3, Scan, 21.06.2015 19:45, SYSTEM, UWE-HP, Manual, Start: 21.06.2015 12:39, Dauer: 6 Std. 45 Min. 16 Sek., Benutzerdefinierter Suchlauf, Abgeschlossen, 0 Malware-Erkennung, 49 Nicht-Malware-Erkennungen, Error, 21.06.2015 19:48, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 21.06.2015 19:48, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 21.06.2015 19:48, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 21.06.2015 20:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.21.3, 2015.6.21.4, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 21.06.2015 Suchlaufzeit: 12:39 Protokolldatei: Suchlauf_21.06.2015.txt Administrator: Ja Version: 2.01.6.1022 Malware-Datenbank: v2015.06.21.01 Rootkit-Datenbank: v2015.06.15.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: uwe Suchlauftyp: Benutzerdefinierter Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 608925 Abgelaufene Zeit: 6 Std., 45 Min., 16 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 39 PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\c, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\c, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\c, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\checkpoint.zonealarmHlpr.1, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\checkpoint.zonealarmHlpr, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\checkpoint.zonealarmHlpr, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\checkpoint.zonealarmHlpr, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\checkpoint.zonealarmHlpr.1, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\checkpoint.zonealarmHlpr.1, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKU\S-1-5-21-699821289-2601908818-4222059780-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKU\S-1-5-21-699821289-2601908818-4222059780-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKU\S-1-5-21-699821289-2601908818-4222059780-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKU\S-1-5-21-699821289-2601908818-4222059780-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6DBF5819-8634-464E-92F4-1F29C1EFF773}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.Montera.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6DBF5819-8634-464E-92F4-1F29C1EFF773}, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111611150}, In Quarantäne, [a7ae912c0c7e63d30829b9d67a8bcc34], PUP.Optional.Widdit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [6aebe1dcbdcd3006255c2b64c93cd52b], PUP.Optional.Complitly.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SuggestMeYes.SuggestMeYesBHO, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SuggestMeYes.SuggestMeYesBHO.1, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, In Quarantäne, [ea6b3e7fa3e7b086deea67e848be0bf5], Registrierungswerte: 2 PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111611150}|AppName, DKB-Cashback-bg.exe, In Quarantäne, [a7ae912c0c7e63d30829b9d67a8bcc34] PUP.Optional.Widdit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|SuggestionsURL_JSON, hxxp://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=10195&gid=1&dbCode=1&command={searchTerms}, In Quarantäne, [6aebe1dcbdcd3006255c2b64c93cd52b] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 8 PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmApp.dll, In Quarantäne, [1a3ba01d4f3b81b5bc6a1f8ac83914ec], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmEng.dll, In Quarantäne, [c88d407d8cfe270f39ed8c1d0ef36a96], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmTlbr.dll, In Quarantäne, [72e3e3da99f1bb7b7caa36736998738d], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\bh\zonealarm.dll, In Quarantäne, [2d289429266459ddfe281891da274fb1], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.3.16\zonealarmApp.dll, In Quarantäne, [490c5f5edeacf93d180ee5c49b6654ac], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.3.16\zonealarmEng.dll, In Quarantäne, [c3922796d2b83006fb2b555439c828d8], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.3.16\zonealarmTlbr.dll, In Quarantäne, [6ce9c0fdd2b841f5dc4ae8c117ea2fd1], PUP.Optional.Montera.A, C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.3.16\bh\zonealarm.dll, In Quarantäne, [381d08b5f793d75fba6c2a7f9b662ad6], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 23.06.2015 12:53, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 23.06.2015 12:53, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 23.06.2015 12:53, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 23.06.2015 13:45, SYSTEM, UWE-HP, Scheduler, Rootkit Database, 2015.6.15.1, 2015.6.22.1, Update, 23.06.2015 13:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.21.4, 2015.6.23.3, Error, 23.06.2015 13:47, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 23.06.2015 13:47, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 23.06.2015 13:47, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Error, 23.06.2015 14:00, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 23.06.2015 14:00, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 23.06.2015 14:00, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Error, 23.06.2015 14:26, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 23.06.2015 14:26, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 23.06.2015 14:26, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 23.06.2015 14:57, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.23.3, 2015.6.23.4, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 25.06.2015 17:06, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 25.06.2015 17:06, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 25.06.2015 17:06, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 26.06.2015 20:36, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 26.06.2015 20:36, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 26.06.2015 20:36, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 26.06.2015 20:45, SYSTEM, UWE-HP, Scheduler, Rootkit Database, 2015.6.22.1, 2015.6.26.1, Update, 26.06.2015 20:45, SYSTEM, UWE-HP, Scheduler, Remediation Database, 2015.6.15.1, 2015.6.26.1, Update, 26.06.2015 20:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.23.4, 2015.6.26.6, (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Error, 28.06.2015 10:13, SYSTEM, UWE-HP, Protection, IsLicensed, 13, Protection, 28.06.2015 10:13, SYSTEM, UWE-HP, Protection, Malware Protection, Stopping, Protection, 28.06.2015 10:13, SYSTEM, UWE-HP, Protection, Malware Protection, Stopped, Update, 28.06.2015 10:45, SYSTEM, UWE-HP, Scheduler, Malware Database, 2015.6.26.6, 2015.6.27.7, Update, 28.06.2015 10:46, SYSTEM, UWE-HP, Scheduler, program, 2.1.6.1022, 2.1.8.0, Update, 28.06.2015 10:59, SYSTEM, UWE-HP, Manual, program, 2.1.6.1022, 2.1.8.0, Error, 28.06.2015 11:03, SYSTEM, UWE-HP, Update, Bad md5 or size: akadomains, 11, Error, 28.06.2015 11:03, SYSTEM, UWE-HP, Update, Bad md5 or size: akaips, 11, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, Domain Database, 0.0.0.0, 2015.6.12.1, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, Remediation Database, 2015.5.13.1, 2015.6.26.1, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, IP Database, 0.0.0.0, 2015.6.12.1, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, Rootkit Database, 2015.6.2.1, 2015.6.26.1, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, AKA IP Database, 0.0.0.0, 2015.6.12.1, Update, 28.06.2015 11:03, SYSTEM, UWE-HP, Manual, AKA Domain Database, 0.0.0.0, 2015.6.12.1, Update, 28.06.2015 11:04, SYSTEM, UWE-HP, Manual, Malware Database, 2015.6.3.3, 2015.6.27.7, (end) FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015 Ran by uwe (administrator) on UWE-HP on 28-06-2015 10:31:38 Running from C:\Users\uwe\DOWNLOADS Loaded Profiles: uwe (Available Profiles: uwe & Mupfel) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com) HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2795248 2013-10-01] (Synaptics Incorporated) HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73392 2012-08-29] (Check Point Software Technologies LTD) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-05-27] (Avira Operations GmbH & Co. KG) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\system: [DisableChangePassword] 0 HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\MountPoints2: {0b18471f-43b8-11e2-8422-b4b52f2f9590} - H:\LaunchU3.exe -a IFEO\AcroRd32.exe: [Debugger] "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE" ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchcompletion.com?si=10195&home=true HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.searchcompletion.com?si=10195&bs=true&q= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.searchcompletion.com?si=10195&bs=true&q= HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4 HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.searchcompletion.com?si=10195&bs=true&q= HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://www.searchcompletion.com?si=10195&home=true HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.searchcompletion.com?si=10195&bs=true&q= HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.searchcompletion.com?si=10195&bs=true&q= SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} SearchScopes: HKLM -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} SearchScopes: HKLM-x32 -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CPNTDF SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://isearch.avg.com/search?cid={9783B2AE-93DC-4D11-B076-1FF6EC94E405}&mid=ff9e36d73aa447d0a2a465fc69cb7c63-5ef64d7e4053a64bb653adb4e76a2c6950152650&lang=de&ds=tt014&pr=sa&d=2012-09-22 12:40:21&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {BC4919A6-17CD-494D-9BC6-75AF391D9F79} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=de&q={searchTerms}&gu=880866a951054238838edd0bee1cf508&tu=10GX0006O1B000s&sku=&tstsId=&ver=&&r=338 SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKLM-x32 - No Name - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - No File Toolbar: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File Toolbar: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-10-17] (EasyBits Software Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\uwe\AppData\Roaming\Mozilla\Firefox\Profiles\xaqe3kha.default-1434880456707 FF Homepage: https://ixquick.de/deu/ FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @checkpoint.com/FFApi -> C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2015-05-16] FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker FF HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\uwe\AppData\Roaming\Mozilla\Firefox\Profiles\4gt5adr3.default\extensions\cliqz@cliqz.com Chrome: ======= CHR Profile: C:\Users\uwe\AppData\Local\Google\Chrome\User Data\Default CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed] S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827184 2015-05-27] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [450808 2015-05-27] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [450808 2015-05-27] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1188360 2015-05-27] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG) R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [522288 2015-01-21] (REINER SCT) R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed] R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-28] (Realsil Microelectronics Inc.) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com) R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH) R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) R2 TuneUp.UtilitiesSvc; C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUNEUPUTILITIESSERVICE64.EXE [2144056 2013-12-11] (TuneUp Software) R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445880 2012-08-29] (Check Point Software Technologies LTD) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-05-27] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-05-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-05-27] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-05-27] (Avira Operations GmbH & Co. KG) S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [35232 2012-08-29] (REINER SCT) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2012-01-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2012-01-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [485680 2012-01-09] (Kaspersky Lab) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-28] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-05-17] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TuneUpUtilitiesDriver64.sys [11856 2012-02-09] (TuneUp Software) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [File not signed] R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [454232 2011-05-07] (Check Point Software Technologies LTD) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-28 10:31 - 2015-06-28 10:33 - 00021573 _____ C:\Users\uwe\Downloads\FRST.txt 2015-06-28 10:31 - 2015-06-28 10:31 - 00000000 ____D C:\FRST 2015-06-28 10:30 - 2015-06-28 10:30 - 02112512 _____ (Farbar) C:\Users\uwe\Downloads\FRST64.exe 2015-06-26 21:34 - 2015-06-26 21:34 - 00030206 _____ C:\Users\uwe\Desktop\Ereignisse.txt 2015-06-23 14:21 - 2015-06-23 14:21 - 00003432 _____ C:\Windows\System32\Tasks\Avira Browser Safety Updater Task 2015-06-23 14:19 - 2015-06-23 14:19 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Avira 2015-06-23 14:14 - 2015-05-27 13:11 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-06-23 14:14 - 2015-05-27 13:11 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-06-23 14:14 - 2015-05-27 13:11 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-06-23 14:14 - 2015-05-27 13:11 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-06-23 14:06 - 2015-06-23 14:06 - 00001152 _____ C:\Users\Public\Desktop\Avira.lnk 2015-06-23 14:05 - 2015-06-23 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-06-23 14:04 - 2015-06-23 14:21 - 00000000 ____D C:\Program Files (x86)\Avira 2015-06-23 14:03 - 2015-06-23 14:03 - 04718584 _____ (Avira Operations GmbH & Co. KG) C:\Users\uwe\Downloads\avira_de_av_558000748a4ca__ws.exe 2015-06-23 13:49 - 2015-06-23 13:55 - 223935400 _____ C:\Users\uwe\Downloads\avira_antivirus1511_de-de.exe 2015-06-21 19:46 - 2015-06-21 19:46 - 00009036 _____ C:\Users\uwe\Desktop\Malwarebyte_removed.txt 2015-06-21 11:54 - 2015-06-21 11:54 - 00000000 ____D C:\Users\uwe\Desktop\Alte Firefox-Daten 2015-06-19 19:42 - 2015-05-09 05:27 - 03147776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 02589184 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-06-19 19:42 - 2015-05-09 05:27 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-06-19 19:42 - 2015-05-09 05:26 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-06-19 19:42 - 2015-05-09 05:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-06-19 19:42 - 2015-05-09 05:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-06-19 19:42 - 2015-05-09 05:26 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-06-19 19:42 - 2015-05-09 05:14 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-06-19 19:42 - 2015-05-09 05:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-06-19 19:42 - 2015-05-09 05:14 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-06-19 19:42 - 2015-05-09 05:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-06-19 19:42 - 2015-05-09 05:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-06-19 19:41 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-06-19 19:41 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-06-19 19:41 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-06-19 19:41 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-06-19 19:41 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-06-19 19:41 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-06-19 19:41 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-06-19 19:41 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2015-06-19 19:35 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-06-18 18:03 - 2015-06-25 17:18 - 00003848 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1434643414 2015-06-18 18:03 - 2015-06-18 18:03 - 00001095 _____ C:\Users\Public\Desktop\Opera.lnk 2015-06-18 18:03 - 2015-06-18 18:03 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-06-16 13:43 - 2015-06-23 14:25 - 00342764 _____ C:\Windows\PFRO.log 2015-06-16 10:53 - 2015-06-28 10:11 - 00000896 _____ C:\Windows\setupact.log 2015-06-16 10:53 - 2015-06-16 10:53 - 00000000 _____ C:\Windows\setuperr.log 2015-06-12 20:07 - 2015-06-12 20:07 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Cliqz 2015-06-12 20:07 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2015-06-12 20:07 - 2011-03-25 20:42 - 00338432 _____ C:\Windows\SysWOW64\sqlite36_engine.dll 2015-06-11 20:00 - 2015-06-25 17:18 - 00000000 ____D C:\Program Files (x86)\Opera 2015-06-11 20:00 - 2015-06-18 18:03 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Opera Software 2015-06-11 20:00 - 2015-06-18 18:03 - 00000000 ____D C:\Users\uwe\AppData\Local\Opera Software 2015-06-11 19:17 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-06-11 19:17 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-06-11 19:17 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-06-11 19:17 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-06-11 19:17 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-06-11 19:17 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-06-11 19:17 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-06-11 19:17 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-06-11 19:17 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-06-11 19:17 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-06-11 19:17 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-06-11 19:17 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-06-11 19:17 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-06-11 19:17 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-06-11 19:17 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-06-11 19:17 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-06-11 19:17 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-06-11 19:17 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-06-11 19:17 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-06-11 19:17 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-06-11 19:17 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-06-11 19:17 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-06-11 19:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-06-11 19:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-06-11 19:17 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-06-11 19:17 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2015-06-11 19:17 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2015-06-11 19:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2015-06-11 19:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2015-06-11 19:17 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2015-06-11 19:16 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-06-11 19:16 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-06-11 19:16 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-06-11 19:16 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-06-11 19:16 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-06-11 19:16 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-06-11 19:16 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-06-11 19:16 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-06-11 19:16 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-06-11 19:16 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-06-11 19:16 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-06-11 19:16 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-06-11 19:16 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-06-11 19:16 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-06-11 19:16 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-06-11 19:16 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-06-11 19:16 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-06-11 19:16 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-06-11 19:16 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-06-11 19:16 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-06-11 19:16 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-06-11 19:16 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-06-11 19:16 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-06-11 19:16 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-06-11 19:16 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-06-11 19:16 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-06-11 19:16 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-06-11 19:16 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-06-11 19:16 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-06-11 19:16 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-06-11 19:16 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-06-11 19:16 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-06-11 19:16 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-06-11 19:16 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-06-11 19:16 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-06-11 19:16 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-11 19:16 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-06-11 19:16 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-11 19:16 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-06-11 19:16 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-06-11 19:16 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-06-11 19:16 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-06-11 19:16 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-06-11 19:16 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-06-11 19:16 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-06-11 19:16 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-06-11 19:16 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-06-11 19:16 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-06-11 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-06-11 19:13 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-06-11 19:13 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-06-11 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-06-11 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-06-11 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-06-11 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-06-11 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-06-11 19:13 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-06-11 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-06-11 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-06-11 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-06-11 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-06-11 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-06-11 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-06-11 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-06-11 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-06-11 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-06-11 19:13 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-06-11 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-06-11 19:12 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-06-11 19:12 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-06-11 19:12 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-06-11 19:12 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-06-11 19:12 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-06-11 19:12 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-06-11 19:12 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-06-11 19:10 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-06-11 19:10 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-06-11 19:10 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2015-06-11 19:10 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2015-06-04 09:46 - 2015-06-04 12:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-28 10:29 - 2012-09-22 11:09 - 00000000 ____D C:\Users\uwe\AppData\Local\CrashDumps 2015-06-28 10:21 - 2012-06-26 05:21 - 01976240 _____ C:\Windows\WindowsUpdate.log 2015-06-28 10:21 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-06-28 10:21 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-06-28 10:16 - 2012-09-21 18:05 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1275C2EA-4122-4C2F-B669-A039FAA017E3} 2015-06-28 10:14 - 2014-07-29 18:57 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-28 10:12 - 2013-05-17 14:09 - 00000000 ____D C:\ProgramData\Spyware Terminator 2015-06-28 10:12 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-26 21:52 - 2013-06-11 14:00 - 00000000 ____D C:\Users\uwe\VR-Haushaltsbuch 2015-06-26 21:36 - 2012-09-21 19:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-06-25 17:37 - 2012-09-21 19:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-06-25 17:36 - 2012-09-21 19:22 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-06-25 17:36 - 2011-10-17 11:26 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-06-25 17:06 - 2014-01-30 10:55 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 2015-06-23 14:14 - 2012-11-03 19:55 - 00000000 ____D C:\ProgramData\Avira 2015-06-23 14:04 - 2014-06-14 16:18 - 00000000 ____D C:\ProgramData\Package Cache 2015-06-23 12:57 - 2014-12-25 19:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-06-21 19:47 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker 2015-06-21 12:05 - 2011-10-17 20:23 - 00699682 _____ C:\Windows\system32\perfh007.dat 2015-06-21 12:05 - 2011-10-17 20:23 - 00149790 _____ C:\Windows\system32\perfc007.dat 2015-06-21 12:05 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-21 11:57 - 2014-12-24 17:19 - 00000324 _____ C:\Windows\Tasks\HPCeeScheduleForuwe.job 2015-06-21 11:57 - 2014-06-04 10:47 - 00003174 _____ C:\Windows\System32\Tasks\HPCeeScheduleForuwe 2015-06-19 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-06-18 18:06 - 2013-12-12 11:42 - 00000000 ___RD C:\Users\uwe\Desktop\WISO 2015-06-18 17:51 - 2012-09-21 18:05 - 00001421 _____ C:\Users\uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-06-12 19:47 - 2015-01-23 20:11 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieBrowserModeList 2015-06-12 19:47 - 2014-08-18 11:49 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieUserList 2015-06-12 19:47 - 2014-08-18 11:49 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieSiteList 2015-06-12 19:23 - 2012-09-22 14:19 - 00000000 ____D C:\Users\uwe\AppData\Local\Adobe 2015-06-12 19:07 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-06-12 14:04 - 2009-07-14 06:45 - 00346840 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-12 14:01 - 2014-12-15 20:15 - 00000000 ____D C:\Windows\system32\appraiser 2015-06-12 14:01 - 2014-05-03 13:31 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-06-11 21:01 - 2012-09-22 13:03 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-06-11 20:48 - 2013-08-16 10:33 - 00000000 ____D C:\Windows\system32\MRT 2015-06-11 20:46 - 2012-09-25 16:40 - 00000000 ____D C:\Users\Mupfel 2015-06-11 20:31 - 2012-09-22 10:19 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-06-06 15:51 - 2014-03-10 16:25 - 00000000 ____D C:\Users\Mupfel\Documents\Geschichten 2015-06-05 11:33 - 2012-09-25 16:43 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BA11817E-E4E8-45FB-A8BD-514371A49CF9} 2015-06-05 11:32 - 2012-09-25 17:59 - 00088592 _____ C:\Users\Mupfel\AppData\Local\GDIPFONTCACHEV1.DAT 2015-06-04 12:55 - 2012-11-14 15:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-05-29 17:20 - 2012-09-21 18:08 - 00088592 _____ C:\Users\uwe\AppData\Local\GDIPFONTCACHEV1.DAT 2015-05-29 16:47 - 2012-09-22 13:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2015-05-29 16:35 - 2012-09-22 13:04 - 00000000 ____D C:\Windows\SHELLNEW ==================== Files in the root of some directories ======= 2013-06-28 11:56 - 2014-06-22 14:10 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml 2012-12-07 12:23 - 2012-12-07 12:23 - 0000085 ___SH () C:\ProgramData\.zreglib Some files in TEMP: ==================== C:\Users\Mupfel\AppData\Local\Temp\avgnt.exe C:\Users\Mupfel\AppData\Local\Temp\SkypeSetup.exe C:\Users\uwe\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-25 13:12 ==================== End of log ============================ [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by uwe at 2015-06-28 10:35:37
Running from C:\Users\uwe\DOWNLOADS
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-699821289-2601908818-4222059780-500 - Administrator - Disabled)
Gast (S-1-5-21-699821289-2601908818-4222059780-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-699821289-2601908818-4222059780-1003 - Limited - Enabled)
Mupfel (S-1-5-21-699821289-2601908818-4222059780-1005 - Limited - Enabled) => C:\Users\Mupfel
uwe (S-1-5-21-699821289-2601908818-4222059780-1001 - Administrator - Enabled) => C:\Users\uwe
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: ZoneAlarm Antivirus (Enabled - Up to date) {DE038A5B-9EDD-18A9-2361-FF7D98D43730}
AS: Avira Antivirus (Enabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ZoneAlarm Anti-Spyware (Enabled - Up to date) {65626BBF-B8E7-1727-19D1-C40FE3537D8D}
FW: ZoneAlarm Firewall (Enabled) {E6380B7E-D4B2-19F1-083E-56486607704B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adressenverwaltung (HKLM-x32\...\{B5FA47E7-6034-41C2-89A5-3D1EACE7F0B9}) (Version: 7.70.22 - VR-Software)
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Compaq Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 7.1.0 - REINER SCT)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.0.4606 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Druckerdeinstallation für EPSON SX410 Series (HKLM\...\EPSON SX410 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard)
Haushaltsbuch DEMO (HKLM-x32\...\{8B3D750F-908E-467C-808C-9E8F5DCC139E}) (Version: 8.9.110 - Reiners-Software)
Haushaltsbuch8 (HKLM-x32\...\{807CD31C-D14D-4521-9D1B-6BE72465C6F4}) (Version: 8.9.253 - Reiners-Software)
Hausratverwaltung (HKLM-x32\...\{ED7553B9-29BF-4E76-961A-37D7DA885D26}) (Version: 7.3.00 - VR-Software)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\...\{39FCC6B7-FFF5-4075-A5E8-B5CEBD54C331}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Launch Box (HKLM\...\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}) (Version: 1.0.12 - Hewlett-Packard Company)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (HKLM-x32\...\{E44578C7-4667-4124-8BC2-1161BCA54978}) (Version: 1.4.4 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP QuickWeb (HKLM-x32\...\{41298BF3-DF6B-449C-BFB7-83663ECB5108}) (Version: 3.1.1.10184 - Hewlett-Packard Company)
HP Security Assistant (HKLM\...\{562608FE-2051-4488-BF22-8CE4C03046AC}) (Version: 1.0.12 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15076.3891 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{D2462056-BA75-4B2C-8267-DFEA2B6AC4AE}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PrintKey2000 (HKLM-x32\...\PrintKey2000) (Version: - )
Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.02.03.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.42.304.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6461 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.)
Schnell Schreiben 4.0.3 (HKLM-x32\...\Schnell Schreiben_is1) (Version: 4.0.3 - AB-Tools.com)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com)
StarMoney (x32 Version: 3.0.3.19 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.2.38 - StarFinanz) Hidden
StarMoney 8.0 (HKLM-x32\...\{17BFDFD5-80E0-4CB8-860D-82D7538D3187}) (Version: 8.0 - Star Finanz GmbH)
StarMoney 9.0 (HKLM-x32\...\{0F71F7DB-9D84-48C9-88D3-6EC1F0580EBE}) (Version: 9.0 - Star Finanz GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.16.1 - Synaptics Incorporated)
Tinypic 3.18 (HKLM-x32\...\{E3723A04-A894-4036-A78E-282E18F43C0A}_is1) (Version: Tinypic 3.18 - E. Fiedler)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.3600.193 - TuneUp Software)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.193 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.193 - TuneUp Software) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{2CA8FE2D-F3DB-4627-9FED-75A0FE223BE2}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{35CEFAF5-3867-4E55-B00B-E3DADAB22055}) (Version: 22.00.8811 - Buhl Data Service GmbH)
ZoneAlarm Antivirus (x32 Version: 10.2.078.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Firewall (x32 Version: 10.2.078.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Security (x32 Version: 10.2.078.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Security Toolbar (HKLM-x32\...\ZoneAlarm Security Toolbar) (Version: - Check Point Software Technologies LTD)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
29-05-2015 16:31:31 Configured Microsoft Office Home and Student 2010
04-06-2015 09:14:08 Windows-Sicherung
11-06-2015 18:30:57 Windows-Sicherung
11-06-2015 20:25:25 Windows Update
16-06-2015 11:35:46 Windows-Sicherung
19-06-2015 19:42:43 Windows Update
21-06-2015 19:00:42 Windows-Sicherung
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FB72FD-FD17-46CA-8266-62502C1DFB53} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG)
Task: {08367107-0CC5-4D36-8184-B2EF8F289A88} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {084B39E2-DEE1-4DCD-8C5A-4F4A8EF2004D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\OneClick.exe [2013-12-11] (TuneUp Software)
Task: {0F335993-D055-4A76-96F5-76EE73978925} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {1717CCE1-3EDE-4872-BD3E-44706EFDB94F} - System32\Tasks\HPCeeScheduleForuwe => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {17D6B13A-17CD-45B8-93CD-810390FC8651} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-10-06] (CyberLink)
Task: {1905E4F0-A9A5-4DE5-AD98-EE0ECA18FC34} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_backup => C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK\RESOURCES\HPWARRANTYCHECK\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {1D942AEA-BB75-4424-8BB2-A98D399492AE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {2D7C6A1B-F2FD-4B0A-95A1-9FD75962F084} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {2EA8E540-1839-415F-A8E0-354CCAE8CD24} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {4F7D44A5-7F84-4DAA-B23A-C08C18251E61} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {508FCB63-DEAB-4147-9B5A-6ED23EAE2141} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {5E659415-47BC-4F64-8EB4-D0960850D8E4} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {648BE6CB-0517-434D-AF45-1B9235701240} - System32\Tasks\CCleanerSkipUAC => C:\PROGRAM FILES\CCLEANER\CCLEANER.EXE [2015-04-23] (Piriform Ltd)
Task: {788D1997-B4D3-4C47-8084-6082F0252CD4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {A684AC5B-61D7-4E73-A27C-296A85E7F29E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {B6ED48A3-53B3-4343-A24B-B5CAC2953C0A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-25] (Adobe Systems Incorporated)
Task: {C3660C36-44AE-4FCB-88F8-CC55B854848B} - System32\Tasks\Opera scheduled Autoupdate 1434643414 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software)
Task: {C70F68B3-8C28-46C8-ACD9-2228B2A1B0B2} - System32\Tasks\{E4EAB62D-7EF6-4689-BC30-06896CDF9E9A} => pcalua.exe -a F:\.\windows\setup.exe -d C:\Users\uwe\Desktop -c .\windows
Task: {C90CEB58-E9A9-48E0-8315-12F1EBF2B79A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F7BC9EDF-2858-4D0B-A9EF-1FFDF0C7A424} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForuwe.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (Whitelisted) ==============
2014-04-17 22:29 - 2014-04-17 22:29 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2013-06-10 16:21 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 8.0\ouservice\PATCHW32.dll
2014-08-04 11:08 - 2011-01-13 12:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0\ouservice\PATCHW32.dll
2015-05-21 13:44 - 2015-05-21 13:44 - 03350640 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2015-05-21 13:44 - 2015-05-21 13:44 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-05-21 13:44 - 2015-05-21 13:44 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\dkb.de -> hxxps://dkb.de
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\meineschufa.de -> hxxps://meineschufa.de
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\paypal.com -> hxxps://paypal.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\uwe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0A72D042-EC5F-4BD5-B73E-EEAD2A82C39D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{C5AA5BD9-F3B2-41FB-AD04-16FC5D83DA9E}] => (Allow) LPort=2869
FirewallRules: [{4D0EE5EE-2FC0-4643-8D1C-BE896E516B1D}] => (Allow) LPort=1900
FirewallRules: [{A4E81317-E2F9-4625-AA8A-7F1316E7508B}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{D6C13F5B-E3A6-4D66-84CF-3ACDF98424CF}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe
FirewallRules: [{B6CF0138-3E57-470F-9116-20F91D4A8252}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe
FirewallRules: [{5FB5AE9C-18B3-49EA-8737-1E3425AA1F4C}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{B4BD85F8-AE35-4B1E-AC05-AC834CCC2A88}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{02F21511-1B5B-43BA-B029-DC5AD7D74F66}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{0FF5964D-1C1D-4273-92BD-BBA957587250}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{BA00B5D6-666F-4454-AB37-4BA9DA402BDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6F4F4722-0AE3-4726-898B-86BFD36815F9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{52B51BAD-1E8A-4E77-986F-EF72E1506801}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FA950FFF-1140-4B25-ABF6-6CAE759AB175}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EF0F1A1B-F16D-40BC-984E-4B7B2DB5F318}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{7E4914A9-6D6F-4ED9-A0D7-49680BE3415C}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{ACA181C5-CFF0-4519-8AC7-36A7A26B0D14}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{731AD6A3-7F51-4221-8BB3-D0E1304D659A}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{BDC2B9B2-0786-468B-8B11-26BC624DEF4C}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{7F3AB37C-231D-4D52-87D0-686474467F6B}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{F19BB33A-773A-4DAC-8B01-C6A573C06EAC}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\app\StarMoney.exe
FirewallRules: [{CC805602-7B01-416F-BFFB-EE81BCBD83D1}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\app\StarMoney.exe
FirewallRules: [{12A010B5-4A5A-4241-B27B-B2801AFAF4DB}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{8ED7FE7B-C7EA-47A8-9F3D-1D6A3F9BF982}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{3E9D7C8C-A788-4BA5-BE90-8E8DEBEA8E7C}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{B8156E4B-04D3-4017-84E2-849E6036CED6}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{6148CF6B-7DFD-4A0B-AD07-9ECA57F14A0C}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{47854D6D-8CB5-46D0-B03B-402EADEE296E}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{3CD5E87E-F5A3-492C-AFB1-FAB41DA932DD}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{11931160-72AB-4EC2-92C9-EFEB35D793A9}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{3ED46AA1-AAF8-4AC9-882D-E9AE1006C426}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{784C6FC8-D4A7-4AE1-A279-59A047C3C5E5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3C66873A-D48F-44C0-867C-BDECA22F64A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CBEB568B-11D4-4D38-8E99-6E6B026E81F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/28/2015 10:29:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EXPLORER.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366f2
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000bfc22
ID des fehlerhaften Prozesses: 0x710
Startzeit der fehlerhaften Anwendung: 0xEXPLORER.EXE0
Pfad der fehlerhaften Anwendung: EXPLORER.EXE1
Pfad des fehlerhaften Moduls: EXPLORER.EXE2
Berichtskennung: EXPLORER.EXE3
Error: (06/28/2015 10:13:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 09:53:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: POWERPNT.EXE, Version: 14.0.7138.5000, Zeitstempel: 0x544d6cf3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000cea5f
ID des fehlerhaften Prozesses: 0x45c
Startzeit der fehlerhaften Anwendung: 0xPOWERPNT.EXE0
Pfad der fehlerhaften Anwendung: POWERPNT.EXE1
Pfad des fehlerhaften Moduls: POWERPNT.EXE2
Berichtskennung: POWERPNT.EXE3
Error: (06/26/2015 08:37:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/25/2015 05:07:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/23/2015 03:02:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: opera.exe, Version: 30.0.1835.59, Zeitstempel: 0x55780050
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000cea5f
ID des fehlerhaften Prozesses: 0x175c
Startzeit der fehlerhaften Anwendung: 0xopera.exe0
Pfad der fehlerhaften Anwendung: opera.exe1
Pfad des fehlerhaften Moduls: opera.exe2
Berichtskennung: opera.exe3
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 131836
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 131836
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/23/2015 02:53:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 130807
System errors:
=============
Error: (06/26/2015 09:53:24 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/26/2015 08:39:00 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005
Error: (06/25/2015 05:41:54 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/23/2015 03:03:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/23/2015 02:28:36 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005
Error: (06/23/2015 02:24:28 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/23/2015 01:58:51 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/23/2015 01:45:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/21/2015 09:17:12 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (06/21/2015 07:46:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Microsoft Office:
=========================
Error: (06/28/2015 10:29:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: EXPLORER.EXE6.1.7601.175674d672ee4ntdll.dll6.1.7601.18869556366f2c000037400000000000bfc2271001d0b17a1eeb8115C:\WINDOWS\EXPLORER.EXEC:\Windows\SYSTEM32\ntdll.dllc3d1fa55-1d6f-11e5-9474-b4b52f2f9590
Error: (06/28/2015 10:13:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 09:53:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: POWERPNT.EXE14.0.7138.5000544d6cf3ntdll.dll6.1.7601.1886955636317c0000374000cea5f45c01d0b049b28c49b5C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXEC:\Windows\SysWOW64\ntdll.dllf94994b9-1c3c-11e5-8091-b4b52f2f9590
Error: (06/26/2015 08:37:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/25/2015 05:07:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/23/2015 03:02:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: opera.exe30.0.1835.5955780050ntdll.dll6.1.7601.1886955636317c0000374000cea5f175c01d0adb4a6d7b4d1C:\Program Files (x86)\Opera\30.0.1835.59_2\opera.exeC:\Windows\SysWOW64\ntdll.dll0fa5be56-19a8-11e5-a9ef-b4b52f2f9590
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 131836
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 131836
Error: (06/23/2015 02:53:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/23/2015 02:53:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 130807
CodeIntegrity Errors:
===================================
Date: 2013-06-29 20:34:52.186
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 20:23:56.347
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 20:00:35.298
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 14:27:28.474
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 14:20:00.026
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 13:49:21.944
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 13:34:46.886
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 18:27:25.370
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 18:05:11.272
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 17:40:42.205
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: AMD E-300 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 43%
Total physical RAM: 3690.91 MB
Available physical RAM: 2091.25 MB
Total Pagefile: 7380.02 MB
Available Pagefile: 5358.72 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:273.87 GB) (Free:201.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.05 GB) (Free:2.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:0.97 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 37818C26)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=273.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)
==================== End of log ============================
|
|
28.06.2015, 22:34
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehr Deinstalliere ZoneAlarm. Das Zeug ist absoluter Unfug, mehr als die Windows-Firewall brauchst du nicht. Gib Bescheid wenn das erledigt ist.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
29.06.2015, 18:30
| #5 | |
| | Avira Antivir 2015 macht keine updates mehrZitat:
Ich habe es auch mit der folgenden Anleitung versucht aber bei mir bleiben die Ordner bzw. Dateien im Nirvana. Ich finde nicht eine Datei davon. hxxp://www.pctipp.ch/tipps-tricks/kummerkasten/sicherheit/artikel/zonealarm-nicht-deinstallierbar-48988/ Was mache ich nun? |
|
29.06.2015, 18:34
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehr Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
__________________ --> Avira Antivir 2015 macht keine updates mehr |
|
29.06.2015, 18:44
| #7 |
| | Avira Antivir 2015 macht keine updates mehr Revo Uninstaller hat das gleiche Problem und findet nichts von ZoneAlarm |
|
29.06.2015, 19:02
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehr
__________________ Logfiles bitte immer in CODE-Tags posten |
|
30.06.2015, 13:45
| #9 |
| | Avira Antivir 2015 macht keine updates mehr Danke cosinus, mit der Software hat es funktioniert. Nach dem Neustart hat Antivir automatisch ein update durchgführt. Nun scheint alles ok zu sein. Soll ich noch etwas tun oder ist nun alles in Ordnung? |
|
30.06.2015, 13:47
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehr Adware/Junkware/Toolbars entfernen 1. Schritt: Malwarebytes Downloade Dir bitte  Malwarebytes Anti-Malware
(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 2. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
3. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
4. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
30.06.2015, 19:02
| #11 |
| | Avira Antivir 2015 macht keine updates mehr So, endlich sind alle 4 Schritte durch. Bei Malwarebytes wurde nichts gefunden und in die Quarantäne verschoben. Ich habe noch eine Frage am Rande. Ich hatte vor diesem Durchlauf die Suchmaschine Ixquick.de als Startseite auf Firefox und nun ist sie verschwunden. Gab es mit dieser Suchmaschine ein Problem? Hier die Logs Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 30.06.2015 Suchlaufzeit: 14:51 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.06.30.03 Rootkit-Datenbank: v2015.06.26.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: uwe Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 417293 Abgelaufene Zeit: 1 Std., 5 Min., 24 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.207 - Bericht erstellt 30/06/2015 um 18:12:14
# Aktualisiert 21/06/2015 von Xplode
# Datenbank : 2015-06-29.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : uwe - UWE-HP
# Gestarted von : C:\Users\uwe\Desktop\Trojaner Board\AdwCleaner_4.207.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : sp_rsdrv2
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Avg_Update_0814tb
Ordner Gelöscht : C:\Program Files (x86)\AVG Security Toolbar
Ordner Gelöscht : C:\Program Files (x86)\simplitec
Ordner Gelöscht : C:\Users\Mupfel\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Mupfel\AppData\LocalLow\Check Point Software Technologies LTD
Ordner Gelöscht : C:\Users\Mupfel\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Ordner Gelöscht : C:\Users\uwe\AppData\LocalLow\Check Point Software Technologies LTD
Ordner Gelöscht : C:\Users\uwe\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Ordner Gelöscht : C:\Users\uwe\AppData\Roaming\Mozilla\Firefox\Profiles\4gt5adr3.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F1963E76-845B-474C-8C7F-D69A96D8AA34}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220122612250}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660166616650}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660166616650}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BC4919A6-17CD-494D-9BC6-75AF391D9F79}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Schlüssel Gelöscht : HKCU\Software\Complitly
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Avg Secure Update
Schlüssel Gelöscht : HKLM\SOFTWARE\simplitec
Schlüssel Gelöscht : HKLM\SOFTWARE\SimplyGen
Schlüssel Gelöscht : HKU\.DEFAULT\Software\Avg Secure Update
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17840
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]
-\\ Mozilla Firefox v38.0.5 (x86 de)
[sms4op93.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.xpiState", "{\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285[...]
[xaqe3kha.default-1434880456707\prefs.js] - Zeile Gelöscht : user_pref("browser.startup.homepage", "hxxps://ixquick.de/deu/");
-\\ Google Chrome v
-\\ Opera v30.0.1835.88
*************************
AdwCleaner[R0].txt - [11859 Bytes] - [30/06/2015 18:03:58]
AdwCleaner[S0].txt - [9850 Bytes] - [30/06/2015 18:12:14]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9909 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.2.3 (06.30.2015:1)
OS: Windows 7 Home Premium x64
Ran by uwe on 30.06.2015 at 18:18:57,33
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully deleted: [Service] sp_rsdrv2
Successfully deleted: [Service] tuneup.utilitiessvc
Successfully deleted: [Service] tuneuputilitiesdrv
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\TuneUp Undelete
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Disk Space Explorer Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{c3c77255-42c0-499f-b664-6e981a0b1647}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c3c77255-42c0-499f-b664-6e981a0b1647}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\tuneup software
Successfully deleted: [Folder] C:\Users\uwe\AppData\Roaming\tuneup software
~~~ FireFox
~~~ Chrome
[C:\Users\uwe\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\uwe\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\uwe\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\uwe\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.06.2015 at 18:31:27,43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by uwe (administrator) on UWE-HP on 30-06-2015 19:47:13
Running from C:\Users\uwe\Desktop
Loaded Profiles: uwe (Available Profiles: uwe & Mupfel)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2795248 2013-10-01] (Synaptics Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-05-27] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\MountPoints2: {0b18471f-43b8-11e2-8422-b4b52f2f9590} - H:\LaunchU3.exe -a
IFEO\AcroRd32.exe: [Debugger] "C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\TUAutoReactivator64.EXE"
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> {F8223396-5B5A-4DB6-BB17-A59A50845AE9} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKU\S-1-5-21-699821289-2601908818-4222059780-1001 -> No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-10-17] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{A6CBAD34-4C95-4D65-A4EA-A0A6B69F9920}: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\uwe\AppData\Roaming\Mozilla\Firefox\Profiles\xaqe3kha.default-1434880456707
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\uwe\AppData\Roaming\Mozilla\Firefox\Profiles\4gt5adr3.default\extensions\cliqz@cliqz.com
Chrome:
=======
CHR Profile: C:\Users\uwe\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827184 2015-05-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [450808 2015-05-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [450808 2015-05-27] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1188360 2015-05-27] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG)
S2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [557056 2015-06-16] (REINER SCT)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
S2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-28] (Realsil Microelectronics Inc.) [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
S2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-05-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-05-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-05-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-05-27] (Avira Operations GmbH & Co. KG)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [36112 2015-03-23] (REINER SCT)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-30 19:47 - 2015-06-30 19:48 - 00014459 _____ C:\Users\uwe\Desktop\FRST.txt
2015-06-30 19:46 - 2015-06-30 19:46 - 02112512 _____ (Farbar) C:\Users\uwe\Desktop\FRST64.exe
2015-06-30 18:31 - 2015-06-30 19:45 - 00002611 _____ C:\Users\uwe\Desktop\JRT.txt
2015-06-30 18:19 - 2015-06-30 18:19 - 00000207 _____ C:\Windows\tweaking.com-regbackup-UWE-HP-Windows-7-Home-Premium-(64-bit).dat
2015-06-30 18:19 - 2015-06-30 18:19 - 00000000 ____D C:\RegBackup
2015-06-30 18:14 - 2015-06-30 18:14 - 00010073 _____ C:\Users\uwe\Desktop\AdwCleaner[S0].txt
2015-06-30 18:03 - 2015-06-30 18:12 - 00000000 ____D C:\AdwCleaner
2015-06-30 17:56 - 2015-06-30 17:56 - 00001237 _____ C:\Users\uwe\Desktop\Suchlaufprotokoll_20150630.txt
2015-06-30 17:55 - 2015-06-30 17:55 - 00001224 _____ C:\Users\uwe\Desktop\nach_Suchlauf.txt
2015-06-29 19:39 - 2015-06-29 19:49 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-06-28 12:33 - 2015-06-28 12:34 - 00008308 _____ C:\Windows\DPINST.LOG
2015-06-28 12:32 - 2015-06-28 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REINER SCT cyberJack
2015-06-28 12:32 - 2015-06-16 19:51 - 00063206 _____ C:\Windows\SysWOW64\cjbc_de.lan
2015-06-28 12:32 - 2015-06-16 19:51 - 00058561 _____ C:\Windows\SysWOW64\cjbc_en.lan
2015-06-28 12:32 - 2015-01-23 17:08 - 00237104 _____ (Reiner Kartengeräte GmbH & Co.KG 1999-2012) C:\Windows\SysWOW64\cjeca32.dll
2015-06-28 12:32 - 2014-04-28 21:54 - 00402992 _____ (REINER SCT) C:\Windows\SysWOW64\ctrsct32.dll
2015-06-28 11:48 - 2015-06-30 18:18 - 00000000 ____D C:\Users\uwe\Desktop\Trojaner Board
2015-06-28 10:31 - 2015-06-30 19:47 - 00000000 ____D C:\FRST
2015-06-23 14:21 - 2015-06-23 14:21 - 00003432 _____ C:\Windows\System32\Tasks\Avira Browser Safety Updater Task
2015-06-23 14:19 - 2015-06-23 14:19 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Avira
2015-06-23 14:14 - 2015-05-27 13:11 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-23 14:14 - 2015-05-27 13:11 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-06-23 14:14 - 2015-05-27 13:11 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-06-23 14:14 - 2015-05-27 13:11 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-06-23 14:06 - 2015-06-23 14:06 - 00001152 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-23 14:05 - 2015-06-23 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-23 14:04 - 2015-06-23 14:21 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-23 14:03 - 2015-06-23 14:03 - 04718584 _____ (Avira Operations GmbH & Co. KG) C:\Users\uwe\Downloads\avira_de_av_558000748a4ca__ws.exe
2015-06-23 13:49 - 2015-06-23 13:55 - 223935400 _____ C:\Users\uwe\Downloads\avira_antivirus1511_de-de.exe
2015-06-21 11:54 - 2015-06-21 11:54 - 00000000 ____D C:\Users\uwe\Desktop\Alte Firefox-Daten
2015-06-19 19:42 - 2015-05-09 05:27 - 03147776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 02589184 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-06-19 19:42 - 2015-05-09 05:27 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-06-19 19:42 - 2015-05-09 05:26 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-06-19 19:42 - 2015-05-09 05:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-06-19 19:42 - 2015-05-09 05:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-06-19 19:42 - 2015-05-09 05:26 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-06-19 19:42 - 2015-05-09 05:14 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-06-19 19:42 - 2015-05-09 05:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-06-19 19:42 - 2015-05-09 05:14 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-06-19 19:42 - 2015-05-09 05:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-06-19 19:42 - 2015-05-09 05:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-06-19 19:41 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-06-19 19:41 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-06-19 19:41 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-06-19 19:41 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-06-19 19:41 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-06-19 19:41 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-06-19 19:41 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-06-19 19:41 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-06-19 19:35 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-06-18 18:03 - 2015-06-25 17:18 - 00003848 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1434643414
2015-06-18 18:03 - 2015-06-18 18:03 - 00001095 _____ C:\Users\Public\Desktop\Opera.lnk
2015-06-18 18:03 - 2015-06-18 18:03 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-16 13:43 - 2015-06-30 14:36 - 00353322 _____ C:\Windows\PFRO.log
2015-06-16 10:53 - 2015-06-30 18:13 - 00001400 _____ C:\Windows\setupact.log
2015-06-16 10:53 - 2015-06-16 10:53 - 00000000 _____ C:\Windows\setuperr.log
2015-06-12 20:07 - 2015-06-12 20:07 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Cliqz
2015-06-12 20:07 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-06-12 20:07 - 2011-03-25 20:42 - 00338432 _____ C:\Windows\SysWOW64\sqlite36_engine.dll
2015-06-11 20:00 - 2015-06-25 17:18 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-11 20:00 - 2015-06-18 18:03 - 00000000 ____D C:\Users\uwe\AppData\Roaming\Opera Software
2015-06-11 20:00 - 2015-06-18 18:03 - 00000000 ____D C:\Users\uwe\AppData\Local\Opera Software
2015-06-11 19:17 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-11 19:17 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-11 19:17 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-11 19:17 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-11 19:17 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-11 19:17 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-11 19:17 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-11 19:17 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-11 19:17 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-11 19:17 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-11 19:17 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-11 19:17 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-11 19:17 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-11 19:17 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-11 19:17 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-11 19:17 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-11 19:17 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-11 19:17 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-11 19:17 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-11 19:17 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-11 19:17 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 19:17 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 19:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 19:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 19:17 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-11 19:17 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-11 19:17 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-11 19:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-11 19:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-11 19:17 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-11 19:16 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-11 19:16 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-11 19:16 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-11 19:16 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-11 19:16 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-11 19:16 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-11 19:16 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-11 19:16 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-11 19:16 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-11 19:16 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-11 19:16 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-11 19:16 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-11 19:16 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-11 19:16 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-11 19:16 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-11 19:16 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-11 19:16 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-11 19:16 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-11 19:16 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-11 19:16 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-11 19:16 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-11 19:16 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-11 19:16 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-11 19:16 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-11 19:16 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-11 19:16 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-11 19:16 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-11 19:16 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-11 19:16 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-11 19:16 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-11 19:16 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-11 19:16 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-11 19:16 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-11 19:16 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-11 19:16 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-11 19:16 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-11 19:16 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-11 19:16 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-11 19:16 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-11 19:16 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-11 19:16 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-11 19:16 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-11 19:16 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-11 19:16 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-11 19:16 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-11 19:16 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-11 19:16 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-11 19:16 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-11 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-11 19:13 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-11 19:13 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-11 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-11 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-11 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-11 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-11 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-11 19:13 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-11 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-11 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-11 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-11 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-11 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-11 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-11 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-11 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-11 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-11 19:13 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-11 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-11 19:12 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-11 19:12 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-11 19:12 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 19:12 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-11 19:12 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-11 19:12 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 19:12 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-11 19:10 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 19:10 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 19:10 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-11 19:10 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-04 09:46 - 2015-06-04 12:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-30 19:36 - 2012-09-21 19:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-30 19:19 - 2012-09-21 18:05 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1275C2EA-4122-4C2F-B669-A039FAA017E3}
2015-06-30 18:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-30 18:31 - 2012-06-26 05:21 - 02047781 _____ C:\Windows\WindowsUpdate.log
2015-06-30 18:28 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-30 18:28 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-30 18:14 - 2013-05-17 14:09 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2015-06-30 18:14 - 2013-05-17 14:09 - 00000000 ____D C:\ProgramData\Spyware Terminator
2015-06-30 18:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-30 18:12 - 2012-09-25 16:40 - 00000000 ____D C:\Users\Mupfel\AppData\Roaming\CheckPoint
2015-06-30 18:12 - 2012-09-21 18:56 - 00000000 ____D C:\Users\uwe\AppData\Roaming\CheckPoint
2015-06-30 17:48 - 2014-07-29 18:57 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-30 14:49 - 2013-12-12 11:42 - 00000000 ___RD C:\Users\uwe\Desktop\WISO
2015-06-30 14:35 - 2012-09-21 18:56 - 00000000 ____D C:\Program Files\CheckPoint
2015-06-30 14:35 - 2012-09-21 18:49 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2015-06-30 14:34 - 2012-09-21 18:49 - 00000000 ____D C:\ProgramData\CheckPoint
2015-06-29 19:28 - 2012-09-22 11:09 - 00000000 ____D C:\Users\uwe\AppData\Local\CrashDumps
2015-06-29 18:45 - 2011-10-17 20:23 - 00699682 _____ C:\Windows\system32\perfh007.dat
2015-06-29 18:45 - 2011-10-17 20:23 - 00149790 _____ C:\Windows\system32\perfc007.dat
2015-06-29 18:45 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-29 18:33 - 2014-01-30 10:55 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0
2015-06-28 13:50 - 2013-06-11 14:00 - 00000000 ____D C:\Users\uwe\VR-Haushaltsbuch
2015-06-28 12:34 - 2013-06-10 16:49 - 00000394 _____ C:\Windows\hbcikrnl.ini
2015-06-28 11:57 - 2014-12-24 17:19 - 00000324 _____ C:\Windows\Tasks\HPCeeScheduleForuwe.job
2015-06-28 11:57 - 2014-06-04 10:47 - 00003174 _____ C:\Windows\System32\Tasks\HPCeeScheduleForuwe
2015-06-28 11:02 - 2014-07-29 18:56 - 00001062 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-06-28 11:02 - 2014-07-29 18:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-06-28 11:02 - 2014-07-29 18:56 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-06-25 17:37 - 2012-09-21 19:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-25 17:36 - 2012-09-21 19:22 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-25 17:36 - 2011-10-17 11:26 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-23 14:14 - 2012-11-03 19:55 - 00000000 ____D C:\ProgramData\Avira
2015-06-23 14:04 - 2014-06-14 16:18 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-23 12:57 - 2014-12-25 19:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-06-21 19:47 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2015-06-19 19:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-18 17:51 - 2012-09-21 18:05 - 00001421 _____ C:\Users\uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-18 08:41 - 2014-07-29 18:56 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-18 08:41 - 2014-07-29 18:56 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-18 08:41 - 2013-06-10 18:31 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-16 14:41 - 2013-06-10 17:41 - 00728064 _____ (REINER SCT) C:\Windows\SysWOW64\cjpcscui.exe
2015-06-16 08:45 - 2013-06-10 17:41 - 00557056 _____ (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
2015-06-12 19:47 - 2015-01-23 20:11 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieBrowserModeList
2015-06-12 19:47 - 2014-08-18 11:49 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieUserList
2015-06-12 19:47 - 2014-08-18 11:49 - 00000000 __SHD C:\Users\uwe\AppData\Local\EmieSiteList
2015-06-12 19:23 - 2012-09-22 14:19 - 00000000 ____D C:\Users\uwe\AppData\Local\Adobe
2015-06-12 19:07 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-12 14:04 - 2009-07-14 06:45 - 00346840 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 14:01 - 2014-12-15 20:15 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-12 14:01 - 2014-05-03 13:31 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-11 21:01 - 2012-09-22 13:03 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 20:48 - 2013-08-16 10:33 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 20:46 - 2012-09-25 16:40 - 00000000 ____D C:\Users\Mupfel
2015-06-11 20:31 - 2012-09-22 10:19 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-06 15:51 - 2014-03-10 16:25 - 00000000 ____D C:\Users\Mupfel\Documents\Geschichten
2015-06-05 11:33 - 2012-09-25 16:43 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BA11817E-E4E8-45FB-A8BD-514371A49CF9}
2015-06-05 11:32 - 2012-09-25 17:59 - 00088592 _____ C:\Users\Mupfel\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-04 12:55 - 2012-11-14 15:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
==================== Files in the root of some directories =======
2013-06-28 11:56 - 2014-06-22 14:10 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2012-12-07 12:23 - 2012-12-07 12:23 - 0000085 ___SH () C:\ProgramData\.zreglib
Some files in TEMP:
====================
C:\Users\Mupfel\AppData\Local\Temp\avgnt.exe
C:\Users\Mupfel\AppData\Local\Temp\SkypeSetup.exe
C:\Users\uwe\AppData\Local\Temp\avgnt.exe
C:\Users\uwe\AppData\Local\Temp\Quarantine.exe
C:\Users\uwe\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-30 18:48
==================== End of log ============================
[CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by uwe at 2015-06-30 19:49:59
Running from C:\Users\uwe\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-699821289-2601908818-4222059780-500 - Administrator - Disabled)
Gast (S-1-5-21-699821289-2601908818-4222059780-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-699821289-2601908818-4222059780-1003 - Limited - Enabled)
Mupfel (S-1-5-21-699821289-2601908818-4222059780-1005 - Limited - Enabled) => C:\Users\Mupfel
uwe (S-1-5-21-699821289-2601908818-4222059780-1001 - Administrator - Enabled) => C:\Users\uwe
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adressenverwaltung (HKLM-x32\...\{B5FA47E7-6034-41C2-89A5-3D1EACE7F0B9}) (Version: 7.70.22 - VR-Software)
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Compaq Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 7.2.0 - REINER SCT)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.0.4606 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Druckerdeinstallation für EPSON SX410 Series (HKLM\...\EPSON SX410 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard)
Haushaltsbuch DEMO (HKLM-x32\...\{8B3D750F-908E-467C-808C-9E8F5DCC139E}) (Version: 8.9.110 - Reiners-Software)
Haushaltsbuch8 (HKLM-x32\...\{807CD31C-D14D-4521-9D1B-6BE72465C6F4}) (Version: 8.9.253 - Reiners-Software)
Hausratverwaltung (HKLM-x32\...\{ED7553B9-29BF-4E76-961A-37D7DA885D26}) (Version: 7.3.00 - VR-Software)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\...\{39FCC6B7-FFF5-4075-A5E8-B5CEBD54C331}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Launch Box (HKLM\...\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}) (Version: 1.0.12 - Hewlett-Packard Company)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (HKLM-x32\...\{E44578C7-4667-4124-8BC2-1161BCA54978}) (Version: 1.4.4 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP QuickWeb (HKLM-x32\...\{41298BF3-DF6B-449C-BFB7-83663ECB5108}) (Version: 3.1.1.10184 - Hewlett-Packard Company)
HP Security Assistant (HKLM\...\{562608FE-2051-4488-BF22-8CE4C03046AC}) (Version: 1.0.12 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15076.3891 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{D2462056-BA75-4B2C-8267-DFEA2B6AC4AE}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PrintKey2000 (HKLM-x32\...\PrintKey2000) (Version: - )
Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.02.03.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.42.304.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6461 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Schnell Schreiben 4.0.3 (HKLM-x32\...\Schnell Schreiben_is1) (Version: 4.0.3 - AB-Tools.com)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com)
StarMoney (x32 Version: 3.0.3.19 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.2.38 - StarFinanz) Hidden
StarMoney 8.0 (HKLM-x32\...\{17BFDFD5-80E0-4CB8-860D-82D7538D3187}) (Version: 8.0 - Star Finanz GmbH)
StarMoney 9.0 (HKLM-x32\...\{0F71F7DB-9D84-48C9-88D3-6EC1F0580EBE}) (Version: 9.0 - Star Finanz GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.16.1 - Synaptics Incorporated)
Tinypic 3.18 (HKLM-x32\...\{E3723A04-A894-4036-A78E-282E18F43C0A}_is1) (Version: Tinypic 3.18 - E. Fiedler)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME (HKLM-x32\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.3600.193 - TuneUp Software)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.193 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.193 - TuneUp Software) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{2CA8FE2D-F3DB-4627-9FED-75A0FE223BE2}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{35CEFAF5-3867-4E55-B00B-E3DADAB22055}) (Version: 22.00.8811 - Buhl Data Service GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
04-06-2015 09:14:08 Windows-Sicherung
11-06-2015 18:30:57 Windows-Sicherung
11-06-2015 20:25:25 Windows Update
16-06-2015 11:35:46 Windows-Sicherung
19-06-2015 19:42:43 Windows Update
21-06-2015 19:00:42 Windows-Sicherung
28-06-2015 12:31:17 Installiert cyberJack Base Components
29-06-2015 18:39:40 Windows-Sicherung
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FB72FD-FD17-46CA-8266-62502C1DFB53} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG)
Task: {08367107-0CC5-4D36-8184-B2EF8F289A88} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {084B39E2-DEE1-4DCD-8C5A-4F4A8EF2004D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2012\OneClick.exe [2013-12-11] (TuneUp Software)
Task: {1717CCE1-3EDE-4872-BD3E-44706EFDB94F} - System32\Tasks\HPCeeScheduleForuwe => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {17D6B13A-17CD-45B8-93CD-810390FC8651} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-10-06] (CyberLink)
Task: {2D7C6A1B-F2FD-4B0A-95A1-9FD75962F084} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-06-08] (Hewlett-Packard)
Task: {2EA8E540-1839-415F-A8E0-354CCAE8CD24} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {648BE6CB-0517-434D-AF45-1B9235701240} - System32\Tasks\CCleanerSkipUAC => C:\PROGRAM FILES\CCLEANER\CCLEANER.EXE [2015-04-23] (Piriform Ltd)
Task: {788D1997-B4D3-4C47-8084-6082F0252CD4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {A351B7EC-0AC5-4E94-8057-CC8508E7F49F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_backup => C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK\RESOURCES\HPWARRANTYCHECK\HPWarrantyChecker.exe [2015-06-08] (Hewlett-Packard)
Task: {A684AC5B-61D7-4E73-A27C-296A85E7F29E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {B6ED48A3-53B3-4343-A24B-B5CAC2953C0A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-25] (Adobe Systems Incorporated)
Task: {C3660C36-44AE-4FCB-88F8-CC55B854848B} - System32\Tasks\Opera scheduled Autoupdate 1434643414 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software)
Task: {C70F68B3-8C28-46C8-ACD9-2228B2A1B0B2} - System32\Tasks\{E4EAB62D-7EF6-4689-BC30-06896CDF9E9A} => pcalua.exe -a F:\.\windows\setup.exe -d C:\Users\uwe\Desktop -c .\windows
Task: {CF452711-860E-4E30-992B-5F0569DEE188} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {F7BC9EDF-2858-4D0B-A9EF-1FFDF0C7A424} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForuwe.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (Whitelisted) ==============
2015-05-21 13:44 - 2015-05-21 13:44 - 03350640 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2015-05-21 13:44 - 2015-05-21 13:44 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-05-21 13:44 - 2015-05-21 13:44 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\dkb.de -> hxxps://dkb.de
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\meineschufa.de -> hxxps://meineschufa.de
IE trusted site: HKU\S-1-5-21-699821289-2601908818-4222059780-1001\...\paypal.com -> hxxps://paypal.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-699821289-2601908818-4222059780-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\uwe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0A72D042-EC5F-4BD5-B73E-EEAD2A82C39D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{C5AA5BD9-F3B2-41FB-AD04-16FC5D83DA9E}] => (Allow) LPort=2869
FirewallRules: [{4D0EE5EE-2FC0-4643-8D1C-BE896E516B1D}] => (Allow) LPort=1900
FirewallRules: [{A4E81317-E2F9-4625-AA8A-7F1316E7508B}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{D6C13F5B-E3A6-4D66-84CF-3ACDF98424CF}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe
FirewallRules: [{B6CF0138-3E57-470F-9116-20F91D4A8252}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe
FirewallRules: [{5FB5AE9C-18B3-49EA-8737-1E3425AA1F4C}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{B4BD85F8-AE35-4B1E-AC05-AC834CCC2A88}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{02F21511-1B5B-43BA-B029-DC5AD7D74F66}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{0FF5964D-1C1D-4273-92BD-BBA957587250}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{BA00B5D6-666F-4454-AB37-4BA9DA402BDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6F4F4722-0AE3-4726-898B-86BFD36815F9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{52B51BAD-1E8A-4E77-986F-EF72E1506801}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FA950FFF-1140-4B25-ABF6-6CAE759AB175}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EF0F1A1B-F16D-40BC-984E-4B7B2DB5F318}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{7E4914A9-6D6F-4ED9-A0D7-49680BE3415C}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
FirewallRules: [{ACA181C5-CFF0-4519-8AC7-36A7A26B0D14}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{731AD6A3-7F51-4221-8BB3-D0E1304D659A}] => (Allow) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
FirewallRules: [{BDC2B9B2-0786-468B-8B11-26BC624DEF4C}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{7F3AB37C-231D-4D52-87D0-686474467F6B}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{F19BB33A-773A-4DAC-8B01-C6A573C06EAC}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\app\StarMoney.exe
FirewallRules: [{CC805602-7B01-416F-BFFB-EE81BCBD83D1}] => (Allow) C:\Program Files (x86)\StarMoney 8.0\app\StarMoney.exe
FirewallRules: [{12A010B5-4A5A-4241-B27B-B2801AFAF4DB}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{8ED7FE7B-C7EA-47A8-9F3D-1D6A3F9BF982}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{3E9D7C8C-A788-4BA5-BE90-8E8DEBEA8E7C}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{B8156E4B-04D3-4017-84E2-849E6036CED6}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{6148CF6B-7DFD-4A0B-AD07-9ECA57F14A0C}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{47854D6D-8CB5-46D0-B03B-402EADEE296E}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{3CD5E87E-F5A3-492C-AFB1-FAB41DA932DD}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{11931160-72AB-4EC2-92C9-EFEB35D793A9}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{3ED46AA1-AAF8-4AC9-882D-E9AE1006C426}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{784C6FC8-D4A7-4AE1-A279-59A047C3C5E5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3C66873A-D48F-44C0-867C-BDECA22F64A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CBEB568B-11D4-4D38-8E99-6E6B026E81F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/30/2015 07:28:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPWarrantyChecker.exe, Version: 5.3.0.1, Zeitstempel: 0x55756d5a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034400
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xHPWarrantyChecker.exe0
Pfad der fehlerhaften Anwendung: HPWarrantyChecker.exe1
Pfad des fehlerhaften Moduls: HPWarrantyChecker.exe2
Berichtskennung: HPWarrantyChecker.exe3
Error: (06/30/2015 06:58:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPWarrantyChecker.exe, Version: 5.3.0.1, Zeitstempel: 0x55756d5a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x55636317
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034400
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xHPWarrantyChecker.exe0
Pfad der fehlerhaften Anwendung: HPWarrantyChecker.exe1
Pfad des fehlerhaften Moduls: HPWarrantyChecker.exe2
Berichtskennung: HPWarrantyChecker.exe3
Error: (06/30/2015 06:15:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/30/2015 02:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/30/2015 02:34:51 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: uwe-HP)
Description: Die Anwendung oder der Dienst "Check Point Install Utility" konnte nicht heruntergefahren werden.
Error: (06/30/2015 02:16:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/29/2015 07:28:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSFUPDATER.EXE, Version: 7.3.0.11, Zeitstempel: 0x53711fad
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366f2
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000bfc22
ID des fehlerhaften Prozesses: 0x1288
Startzeit der fehlerhaften Anwendung: 0xHPSFUPDATER.EXE0
Pfad der fehlerhaften Anwendung: HPSFUPDATER.EXE1
Pfad des fehlerhaften Moduls: HPSFUPDATER.EXE2
Berichtskennung: HPSFUPDATER.EXE3
Error: (06/29/2015 07:28:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSF.EXE, Version: 7.4.45.4, Zeitstempel: 0x5277ff0b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366f2
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000bfc22
ID des fehlerhaften Prozesses: 0x12fc
Startzeit der fehlerhaften Anwendung: 0xHPSF.EXE0
Pfad der fehlerhaften Anwendung: HPSF.EXE1
Pfad des fehlerhaften Moduls: HPSF.EXE2
Berichtskennung: HPSF.EXE3
Error: (06/29/2015 07:18:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/29/2015 07:09:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/30/2015 06:23:08 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Modules Installer" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (06/30/2015 06:21:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Support Assistant Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:05 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/30/2015 06:21:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TuneUp Utilities Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/30/2015 06:21:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TomTomHOMEService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/30/2015 06:21:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "StarMoney 9.0 OnlineUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office:
=========================
Error: (06/30/2015 07:28:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPWarrantyChecker.exe5.3.0.155756d5antdll.dll6.1.7601.1886955636317c000000500034400
Error: (06/30/2015 06:58:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPWarrantyChecker.exe5.3.0.155756d5antdll.dll6.1.7601.1886955636317c000000500034400
Error: (06/30/2015 06:15:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/30/2015 02:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/30/2015 02:34:51 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: uwe-HP)
Description: 1C:\Users\uwe\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\Install.exeCheck Point Install Utility0111753760
Error: (06/30/2015 02:16:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/29/2015 07:28:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPSFUPDATER.EXE7.3.0.1153711fadntdll.dll6.1.7601.18869556366f2c000037400000000000bfc22128801d0b2910a329b64C:\PROGRAMDATA\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK\RESOURCES\UPDATER7\HPSFUPDATER.EXEC:\Windows\SYSTEM32\ntdll.dll4bc30e62-1e84-11e5-b684-b4b52f2f9590
Error: (06/29/2015 07:28:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPSF.EXE7.4.45.45277ff0bntdll.dll6.1.7601.18869556366f2c000037400000000000bfc2212fc01d0b290e5d943e3C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK\HPSF.EXEC:\Windows\SYSTEM32\ntdll.dll3f91631c-1e84-11e5-b684-b4b52f2f9590
Error: (06/29/2015 07:18:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/29/2015 07:09:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-06-29 20:34:52.186
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 20:23:56.347
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 20:00:35.298
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 14:27:28.474
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 14:20:00.026
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 13:49:21.944
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-29 13:34:46.886
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 18:27:25.370
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 18:05:11.272
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-28 17:40:42.205
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: AMD E-300 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 41%
Total physical RAM: 3690.91 MB
Available physical RAM: 2163.73 MB
Total Pagefile: 7380.02 MB
Available Pagefile: 5578.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:273.87 GB) (Free:203.68 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.05 GB) (Free:2.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:0.82 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 37818C26)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=273.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)
==================== End of log ============================
|
|
30.06.2015, 19:25
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehr adwCleaner hat die aks Startseite entfernt. ixquick kenn ich zu schlecht um da ein Statement abzugeben. Du kannst ja jederzeit ixquick wieder als Startseite einstellen.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.07.2015, 16:11
| #13 |
| | Avira Antivir 2015 macht keine updates mehr Hallo Cosinus, ich vermute dass ich meinen Rechner nun wieder ohne Bedenken nutzen kann oder? Nach der ganzen Arbeit die Du dir gemacht hast denke ich dass mein Rechner einigermaßen verseucht war oder irre ich mich? Ist nun alles an Viren, Trojanern etc. runter von meinem Rechner oder kann/ muss ich noch etwas tun? Kannst Du mir vielleicht auch noch Tipps geben wie ich meinen Rechner vor all dem Mist schützen kann, bzw. ob und welche Scan's ich regelmäßig durchführen kann/ muss? |
|
01.07.2015, 18:06
| #14 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira Antivir 2015 macht keine updates mehrZitat:
Hinweis: Registry CleanerIch sehe, dass du sogenannte Registry Cleaner installiert hast. In deinem Fall TuneUp Utilities 2012. Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler. Zerstörst du die Registry, zerstörst du Windows. Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich. Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über Start --> Systemsteuerung --> Software (bei Windows XP)zu deinstallieren.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
02.07.2015, 18:26
| #15 |
| | Avira Antivir 2015 macht keine updates mehr Danke für den Hinweis, Tuneup ist schon deinstalliert. Ist es möglich das wegen Tuneup mein PowerPoint nicht mehr funktioniert? Ist der CCleaner dann auch ein Problem? Kannst Du mir vielleicht einen Tipp geben wie ich Youtube wieder nutzen kann? Bei mir und allen die ich frage stürzt der Browser n#mlich ab wenn man z.B. Youtube öffnet. Ich brauche Youtube da ich dort Ausbildungsfilme anschauen muss. |
|
| Themen zu Avira Antivir 2015 macht keine updates mehr |
| antivir, antivirus, auftrag, avira, computer, dateien, download, error, failed, firewall, folge, free, home, installation, internet, keine verbindung, logfile, neu, neue, problem, probleme, starten, unbekannt, update, updates, verbindung |
dann auf 
und dann auf 
. 
Linear-Darstellung
