|
Plagegeister aller Art und deren Bekämpfung: Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.07.2015, 18:59 | #1 |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Hallo Trojaner-Board Team, seit 2 Tagen bekomme ich diese Fehlermeldung. Könnt Ihr mir helfen, dies zu beseitigen ? LG aus Düsseldorf ------------------------------------------------------------------------- Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-07-2015 Ran by Veli (administrator) on VELI-PC on 12-07-2015 19:55:27 Running from C:\Users\Veli\Downloads Loaded Profiles: Veli (Available Profiles: Veli) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\psxss.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE (AMD) C:\Windows\System32\atieclxx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Arcai.com) C:\Program Files (x86)\netcut\services\aips.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Users\Veli\AppData\Local\Viber\Viber.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe (Creative Technology Ltd.) C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.) C:\Program Files (x86)\Creative\ShareDLL\CADI\NotiMan.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (NCH Software) C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Opera Software) C:\Program Files (x86)\Opera\30.0.1835.88\opera.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft) C:\SmartTürk Web TV\SmartTurkWebTV\smartturkwebtv.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2780912 2013-09-20] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor) HKLM\...\Run: [NUSB3MON] => c:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe [97280 2012-04-11] (Advanced Micro Devices, Inc.) HKLM\...\Run: [Creative SB Monitoring Utility] => RunDll32 sbavmon.dll,SBAVMonitor HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation) HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-20] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe [241757 2010-12-08] (Creative Technology Ltd) HKLM-x32\...\Run: [Module Loader] => C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [57344 2007-07-23] (Creative Technology Ltd.) HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.) HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\Run: [Viber] => C:\Users\Veli\AppData\Local\Viber\Viber.exe [80035536 2015-06-10] () HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\NFSAQU~1.SCR CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled ProxyServer: [.DEFAULT] => http=127.0.0.1:51512;https=127.0.0.1:51512; HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-30] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-30] (Oracle Corporation) DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Handler: WSIEChrome - No CLSID Value Handler: WSWSVCUchrome - No CLSID Value Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{4813817F-D24A-41A7-83FF-10203872C5FD}: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Veli\AppData\Roaming\Mozilla\Firefox\Profiles\rvpbyvxo.default-1431283104865 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_191.dll [2015-07-09] () FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-30] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-30] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll [2015-07-09] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @speakychat.ch/SpeakyChatLB -> C:\Users\Veli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SpeakyChatLB\NPspeakychatlb.dll No File FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\Veli\AppData\Roaming\Mozilla\Firefox\Profiles\rvpbyvxo.default-1431283104865\user.js [2015-07-02] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPspeakychatlb.dll [2014-02-12] (SpeakyChat LB) FF Plugin ProgramFiles/Appdata: C:\Users\Veli\AppData\Roaming\mozilla\plugins\npspeakychat.dll [2014-08-20] (avidoNET GmbH) FF Extension: bestadblocker - C:\Users\Veli\AppData\Roaming\Mozilla\Firefox\Profiles\rvpbyvxo.default-1431283104865\Extensions\5Kax6@q.com [2015-05-30] FF Extension: PriCeMionus - C:\Users\Veli\AppData\Roaming\Mozilla\Firefox\Profiles\rvpbyvxo.default-1431283104865\Extensions\D4jPjW@F.org [2015-05-30] FF Extension: PriaceLess - C:\Users\Veli\AppData\Roaming\Mozilla\Firefox\Profiles\rvpbyvxo.default-1431283104865\Extensions\h@Eq2A.edu [2015-05-30] FF HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-22] Opera: ======= OPR Extension: (YouTube Unblocker) - C:\Users\Veli\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2015-07-12] OPR Extension: (Adblock Plus) - C:\Users\Veli\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-03-09] OPR Extension: (CinemaPlus-3.2cV27.05) - C:\Users\Veli\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-05-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AIPS; C:\Program Files (x86)\netcut\services\AIPS.exe [262144 2011-07-28] (Arcai.com) [File not signed] R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-19] (Advanced Micro Devices, Inc.) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568 2013-10-29] (Windows (R) Win 7 DDK provider) [File not signed] R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1579880 2013-12-27] (IVT Corporation) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-12-16] (IVT Corporation) R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-10-16] (Realtek Semiconductor) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-10-29] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation) R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-10-29] (Qualcomm Atheros) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Ralink Corporation) R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx64.sys [34512 2015-06-09] () U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [246224 2009-12-07] (Huawei Technologies Co., Ltd.) R3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1588480 2013-04-08] (Creative Technology Ltd.) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation) R3 PsxDrv; C:\Windows\System32\drivers\psxdrv.sys [10240 2009-07-14] (Microsoft Corporation) R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [290520 2013-08-26] (Realtek Semiconductor Corp.) S3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider) S3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.) U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-12 19:55 - 2015-07-12 19:55 - 00016583 _____ C:\Users\Veli\Downloads\FRST.txt 2015-07-12 19:54 - 2015-07-12 19:54 - 02130944 _____ (Farbar) C:\Users\Veli\Downloads\FRST64.exe 2015-07-12 19:42 - 2015-07-12 19:42 - 00001851 _____ C:\Users\Public\Desktop\smartturkwebtv.exe.lnk 2015-07-12 19:42 - 2015-07-12 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartTurkWebTV 2015-07-12 15:50 - 2015-07-12 16:00 - 00000000 ____D C:\Program Files\SpaceSoundPro 2015-07-12 15:50 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Local\gmsd_de_005010028 2015-07-12 15:50 - 2015-07-12 15:59 - 00000000 ____D C:\Program Files (x86)\SpaceSondPro_v53.994 2015-07-12 15:50 - 2015-07-12 15:59 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010028 2015-07-12 15:48 - 2015-07-12 15:59 - 00000000 ____D C:\Program Files (x86)\WordSurfer_1.10.0.19 2015-07-12 15:06 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Roaming\B63B2108-1436706401-9A6A-E4D5-40A8F0025779 2015-07-12 15:06 - 2015-07-12 15:59 - 00000000 ____D C:\Program Files (x86)\WInterEnhancer 2015-07-12 15:06 - 2015-07-12 15:06 - 00000000 ____D C:\Users\Veli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage 2015-07-12 15:05 - 2015-07-12 16:00 - 00000000 ____D C:\Program Files (x86)\Super Optimizer 2015-07-12 15:04 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Roaming\PDFConvert 2015-07-12 15:04 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Roaming\Convertor 2015-07-12 15:04 - 2015-07-12 15:59 - 00000000 ____D C:\ProgramData\{ed87d309-c361-37fa-ed87-7d309c364c27} 2015-07-12 15:04 - 2015-07-12 15:04 - 00000000 ____D C:\Users\Veli\AppData\Roaming\Winsta 2015-07-12 14:59 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Local\B63B2108-1436713195-9A6A-E4D5-40A8F0025779 2015-07-12 14:58 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Roaming\B63B2108-1436705905-9A6A-E4D5-40A8F0025779 2015-07-12 14:58 - 2015-07-12 14:59 - 00000000 ____D C:\Users\Veli\Documents\ProPCCleaner 2015-07-11 18:08 - 2015-07-11 18:08 - 00000000 ____D C:\Users\Veli\AppData\Local\Geckofx 2015-07-11 18:02 - 2015-07-11 18:02 - 00000000 ____D C:\SmartTürk Web TV 2015-07-11 18:00 - 2015-07-12 15:59 - 00000000 ____D C:\Users\Veli\AppData\Roaming\SmartTürk Web TV 2015-07-11 18:00 - 2015-07-11 18:00 - 18766186 _____ (SmartTürk Web TV) C:\Users\Veli\Downloads\smartturk-web-tv-tamindir.exe 2015-07-09 23:37 - 2015-07-12 16:03 - 00000000 ____D C:\Users\Veli\AppData\Roaming\ViberPC 2015-07-09 23:37 - 2015-07-09 23:37 - 00000998 _____ C:\Users\Veli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber.lnk 2015-07-09 23:37 - 2015-07-09 23:37 - 00000000 ____D C:\Users\Veli\AppData\Local\Viber 2015-07-09 23:36 - 2015-07-09 23:37 - 64298248 _____ (Viber Media Inc) C:\Users\Veli\Downloads\ViberSetup.exe 2015-07-09 09:33 - 2015-07-09 09:59 - 1476647588 _____ C:\Users\Veli\Documents\clip0117.avi 2015-07-09 05:35 - 2015-07-09 06:31 - 3348484614 _____ C:\Users\Veli\Documents\clip0116.avi 2015-07-09 05:11 - 2015-07-09 05:34 - 1812440246 _____ C:\Users\Veli\Documents\clip0115.avi 2015-07-09 05:11 - 2015-07-09 05:11 - 00010260 _____ C:\Users\Veli\Documents\clip0114.avi 2015-07-09 03:00 - 2015-07-09 05:11 - 3357072922 _____ C:\Users\Veli\Documents\clip0113.avi 2015-07-09 03:00 - 2015-07-09 03:00 - 02413868 _____ C:\Users\Veli\Documents\clip0112.avi 2015-07-08 23:11 - 2015-07-09 00:23 - 4054701282 _____ C:\Users\Veli\Documents\clip0111.avi 2015-07-08 23:11 - 2015-07-08 23:11 - 02284438 _____ C:\Users\Veli\Documents\clip0110.avi 2015-07-08 23:03 - 2015-07-08 23:06 - 300852234 _____ C:\Users\Veli\Documents\clip0109.avi 2015-07-08 11:12 - 2015-07-08 11:12 - 00037288 _____ C:\Users\Veli\Desktop\Kim bir Müslümanın kusurunu örterse Allah da kıyamet günün de onun kusurunu örter.avi.A.index 2015-07-08 11:12 - 2015-07-08 11:12 - 00029216 _____ C:\Users\Veli\Desktop\Kim bir Müslümanın kusurunu örterse Allah da kıyamet günün de onun kusurunu örter.avi.index 2015-07-06 23:13 - 2015-07-06 23:13 - 00000000 _____ C:\Users\Veli\Desktop\Neues Textdokument.txt 2015-07-06 22:18 - 2015-07-06 22:25 - 518639338 _____ C:\Users\Veli\Documents\clip0108.avi 2015-07-05 19:00 - 2010-03-09 21:10 - 02951247 _____ C:\Windows\SysWOW64\nfsAquaBulb01.scr 2015-07-05 02:42 - 2015-07-05 03:05 - 1838190172 _____ C:\Users\Veli\Documents\clip0107.avi 2015-07-03 16:36 - 2015-07-03 16:36 - 00001206 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn Disc Burning Software.lnk 2015-07-03 16:36 - 2015-07-03 16:36 - 00001194 _____ C:\Users\Public\Desktop\Express Burn Disc Burning Software.lnk 2015-07-02 16:46 - 2015-07-03 16:24 - 00000000 ____D C:\Users\Veli\Desktop\Cubase 2015-07-02 13:11 - 2015-07-06 15:42 - 00002640 _____ C:\Windows\PFRO.log 2015-07-02 13:09 - 2015-07-02 13:16 - 00000000 ____D C:\Users\Veli\Documents\Freemake 2015-07-02 13:09 - 2015-07-02 13:09 - 00000000 ____D C:\Users\Veli\AppData\Roaming\RPEng 2015-07-02 13:07 - 2015-07-02 13:07 - 13973344 _____ (Ellora Assets Corporation ) C:\Users\Veli\Downloads\Freemake746VideoDownloaderFull.exe 2015-07-01 01:05 - 2015-07-01 01:52 - 195235408 _____ C:\Users\Veli\Documents\clip0106.avi 2015-06-28 22:58 - 2015-06-28 23:24 - 1685226586 _____ C:\Users\Veli\Documents\clip0105.avi 2015-06-28 21:54 - 2015-06-28 22:03 - 450411688 _____ C:\Users\Veli\Documents\clip0104.avi 2015-06-23 19:57 - 2015-07-12 16:00 - 00002324 _____ C:\Windows\setupact.log 2015-06-23 19:57 - 2015-06-23 19:57 - 00000000 _____ C:\Windows\setuperr.log 2015-06-19 07:13 - 2015-06-19 07:13 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-06-19 07:13 - 2015-06-19 07:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-06-16 02:53 - 2015-06-16 03:11 - 1090234560 _____ C:\Users\Veli\Documents\clip0103.avi 2015-06-16 02:04 - 2015-06-16 02:52 - 4197351214 _____ C:\Users\Veli\Documents\clip0102.avi 2015-06-16 00:49 - 2015-06-16 00:58 - 1011977248 _____ C:\Users\Veli\Documents\clip0101.avi 2015-06-15 22:41 - 2015-06-15 22:41 - 07022618 _____ C:\Users\Veli\Documents\clip0100.avi 2015-06-15 22:26 - 2015-06-15 22:41 - 1021805468 _____ C:\Users\Veli\Documents\clip0099.avi ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-12 19:55 - 2015-02-23 23:53 - 00000000 ____D C:\FRST 2015-07-12 19:52 - 2014-09-26 17:48 - 00000000 ____D C:\Users\Veli\AppData\Roaming\Skype 2015-07-12 19:42 - 2014-11-12 19:29 - 28632064 ___SH C:\Users\Veli\Desktop\Thumbs.db 2015-07-12 19:31 - 2014-09-26 17:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-07-12 18:46 - 2014-10-15 06:47 - 00000000 ____D C:\Users\Veli\AppData\Roaming\PhotoScape 2015-07-12 18:45 - 2014-09-26 14:20 - 01184854 _____ C:\Windows\WindowsUpdate.log 2015-07-12 16:08 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-12 16:08 - 2009-07-14 06:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-12 16:05 - 2009-07-14 19:58 - 00699342 _____ C:\Windows\system32\perfh007.dat 2015-07-12 16:05 - 2009-07-14 19:58 - 00149450 _____ C:\Windows\system32\perfc007.dat 2015-07-12 16:05 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-12 16:00 - 2014-09-26 14:23 - 00000000 ____D C:\Users\Veli 2015-07-12 16:00 - 2013-12-27 18:06 - 00001042 _____ C:\Windows\SysWOW64\bscs.ini 2015-07-12 16:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-12 15:59 - 2015-04-04 20:11 - 00000000 ___SD C:\Windows\system32\GWX 2015-07-12 15:59 - 2014-09-30 00:46 - 00000000 ____D C:\Users\Veli\AppData\Roaming\TeamViewer 2015-07-12 15:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-07-12 15:54 - 2014-09-28 13:24 - 00000000 ____D C:\Users\Veli\AppData\Local\CrashDumps 2015-07-12 15:50 - 2015-05-28 10:35 - 00000008 _____ C:\END 2015-07-10 10:47 - 2014-09-26 18:38 - 00000000 ___RD C:\Users\Veli\Desktop\* 2015-07-09 20:47 - 2014-09-26 17:04 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-09 20:47 - 2014-09-26 17:04 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-09 20:47 - 2014-09-26 17:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-09 20:47 - 2014-09-26 17:04 - 00000000 ____D C:\Users\Veli\AppData\Local\Adobe 2015-07-09 10:38 - 2015-01-16 02:57 - 00000000 ____D C:\Users\Veli\AppData\Roaming\vlc 2015-07-09 10:29 - 2014-09-30 01:42 - 01211392 ___SH C:\Users\Veli\Documents\Thumbs.db 2015-07-09 03:17 - 2014-09-30 00:38 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2015-07-08 11:13 - 2014-10-20 19:26 - 00079872 _____ C:\Users\Veli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-07-08 11:10 - 2015-03-30 08:14 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2015-07-06 14:05 - 2014-09-26 17:48 - 00000000 ____D C:\ProgramData\Skype 2015-07-05 20:44 - 2015-04-29 18:36 - 00000000 ____D C:\Users\Veli\Desktop\Resim 2015-07-05 18:54 - 2015-05-29 16:26 - 00000000 ____D C:\Users\Veli\Desktop\Askim 2015-07-05 12:08 - 2014-09-26 17:30 - 00300704 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-07-05 05:22 - 2015-01-24 00:10 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-07-04 08:27 - 2014-09-26 15:36 - 00065536 _____ C:\Windows\system32\spu_storage.bin 2015-07-03 16:37 - 2014-09-26 20:37 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2015-07-03 16:36 - 2015-01-07 05:43 - 00000000 ____D C:\ProgramData\NCH Software 2015-07-03 16:36 - 2014-11-28 15:34 - 00000000 ____D C:\Program Files (x86)\NCH Software 2015-07-02 13:18 - 2014-10-09 22:21 - 00000000 ____D C:\ProgramData\Freemake 2015-07-02 13:18 - 2014-10-09 22:20 - 00000000 ____D C:\Program Files (x86)\Freemake 2015-07-01 00:29 - 2014-09-26 17:30 - 00000000 ____D C:\ProgramData\SpeakyChat 2015-06-30 19:46 - 2014-10-13 14:39 - 00000000 ____D C:\Users\Veli\AppData\Local\WMTools Downloaded Files 2015-06-26 18:02 - 2015-03-08 02:36 - 00003840 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1425774963 2015-06-26 18:02 - 2014-09-26 16:59 - 00000000 ____D C:\Program Files (x86)\Opera 2015-06-25 04:12 - 2015-01-20 21:26 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-06-23 19:57 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-06-21 16:59 - 2014-11-12 14:09 - 00000000 __SHD C:\Users\Veli\AppData\Local\EmieBrowserModeList 2015-06-21 16:59 - 2014-10-04 01:42 - 00000000 __SHD C:\Users\Veli\AppData\Local\EmieUserList 2015-06-21 16:59 - 2014-10-04 01:42 - 00000000 __SHD C:\Users\Veli\AppData\Local\EmieSiteList 2015-06-13 06:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-06-12 03:17 - 2009-07-14 06:45 - 00287016 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-12 03:15 - 2015-04-15 10:55 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-06-12 03:15 - 2015-04-15 10:55 - 00000000 ____D C:\Windows\system32\appraiser 2015-06-12 03:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions ==================== Files in the root of some directories ======= 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Veli\AppData\Roaming\8hQhRZP 2015-01-31 20:29 - 2015-06-09 15:15 - 0001181 _____ () C:\Users\Veli\AppData\Roaming\trace_FilterInstaller.1.txt 2015-01-31 20:29 - 2015-01-31 20:29 - 0001181 _____ () C:\Users\Veli\AppData\Roaming\trace_FilterInstaller.2.txt 2015-01-31 20:29 - 2015-06-09 15:16 - 0001181 _____ () C:\Users\Veli\AppData\Roaming\trace_FilterInstaller.txt 2015-01-31 20:29 - 2015-06-09 15:16 - 0000000 _____ () C:\Users\Veli\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt 2014-10-20 19:26 - 2015-07-08 11:13 - 0079872 _____ () C:\Users\Veli\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-03-31 14:24 - 2015-03-31 14:24 - 0007656 _____ () C:\Users\Veli\AppData\Local\Resmon.ResmonCfg 2014-09-26 17:17 - 2010-06-29 15:04 - 0001772 _____ () C:\ProgramData\cfSB1095.ini 2014-09-26 17:17 - 2013-04-03 12:50 - 0001772 _____ () C:\ProgramData\cfSB1095A.ini 2014-10-27 17:02 - 2014-10-27 17:02 - 0031848 _____ () C:\ProgramData\energy-report.html ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-07 09:12 ==================== End of log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version:11-07-2015 Ran by Veli at 2015-07-12 19:57:14 Running from C:\Users\Veli\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2447634249-3870620914-2731681305-500 - Administrator - Disabled) Gast (S-1-5-21-2447634249-3870620914-2731681305-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2447634249-3870620914-2731681305-1003 - Limited - Enabled) Veli (S-1-5-21-2447634249-3870620914-2731681305-1000 - Administrator - Enabled) => C:\Users\Veli ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.191 - Adobe Systems Incorporated) Adobe Flash Player 18 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 18.0.0.203 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{37ED2328-4288-6720-9D34-ECD5709B4F21}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform) Creative ASIO (USB) (HKLM-x32\...\Creative_ASIO(USB)) (Version: 1.00 - Creative Technology Limited) Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited) Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Debut Video Capture Software (HKLM-x32\...\Debut) (Version: 2.14 - NCH Software) Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited) Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: 4.84 - NCH Software) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Free YouTube Download version 3.2.51.1215 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.51.1215 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.44.922 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.44.922 - DVDVideoSoft Ltd.) HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.29.01 - Hyperionics Technology LLC) Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MAGIX Slideshow Maker 2 (HKLM-x32\...\MAGIX_MSI_Slideshow_Maker_2) (Version: 2.0.0.8 - MAGIX AG) MAGIX Slideshow Maker 2 (x32 Version: 2.0.0.8 - MAGIX AG) Hidden Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) o.tel.o (HKLM-x32\...\o.tel.o) (Version: 16.001.06.07.35 - Huawei Technologies Co.,Ltd) Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software) Pavtube Video Converter Ver 4.2.0.4620 (HKLM-x32\...\{B4EE51E6-2C80-4B04-BDE0-ED4E87BEFECD}_is1) (Version: - ) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.308 - Qualcomm Atheros Communications) Ralink Bluetooth Stack (HKLM\...\{B346BD6C-AE56-7DD3-175C-2374C7113BCB}) (Version: 11.0.752.0 - Mediatek) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29070 - Realtek Semiconductor Corp.) Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.75.827.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.) Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) SmartTurkWebTV (HKLM-x32\...\{9A4CF00F-3E35-4FA4-B061-ED20A94A5671}) (Version: 0.9 - SmartTürk Web TV) SopCast 3.9.6 (HKLM-x32\...\SopCast) (Version: 3.9.6 - www.sopcast.com) Sound Blaster X-Fi Surround 5.1 Pro (HKLM-x32\...\{0A9DA353-D0CD-4922-A54B-2F5F4EC90986}) (Version: 1.0 - Creative Technology Limited) SpeakyChat LB version 2,0,14,1 (HKLM-x32\...\{8F46BFB2-11A5-4878-806A-87E5CA3C267A}_is1) (Version: 2,0,14,1 - SpeakyChat LB) SpeakyChat-VoiceChat (HKLM-x32\...\SpeakyChat) (Version: - avidoNET GmbH) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.15.0 - Synaptics Incorporated) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43879 - TeamViewer) Viber (HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\Viber) (Version: 5.1.2.24 - Viber Media Inc) VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.74 - NCH Software) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Live Temel Parçalar (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= 07-07-2015 15:54:31 Windows Update 11-07-2015 15:54:08 Windows Update 11-07-2015 18:01:05 Yüklü SmartTurkWebTV 12-07-2015 15:55:11 Wiederherstellungsvorgang 12-07-2015 19:41:46 Yüklü SmartTurkWebTV ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2015-02-16 14:26 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0B5D2B83-391A-428B-BB72-BADDD5509C00} - System32\Tasks\{1114AA7B-E8B6-4D18-9661-7BCA39AE115A} => pcalua.exe -a C:\ProgramData\CometArcade\uninstall.exe -c /kb=y /ic=1 Task: {19B7C023-907C-47BD-98A7-DD0C47DF10C0} - System32\Tasks\Opera scheduled Autoupdate 1425774963 => C:\Program Files (x86)\Opera\launcher.exe [2015-06-19] (Opera Software) Task: {32BA8687-B679-446D-A4FD-DB4850B6679C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {35F09F03-C117-4B8F-B830-06BDF2C0BB36} - System32\Tasks\{7679C7EE-2882-43B9-A9E9-AF42546007A4} => pcalua.exe -a C:\Users\Veli\Downloads\DOSBox0.63-win32-installer.exe -d C:\Users\Veli\Downloads Task: {83A1BB73-075F-436A-8003-A7A88EF77B91} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd) Task: {9D07AC7C-D882-4236-8813-56C7BA5A08A3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-09] (Adobe Systems Incorporated) Task: {A20332A7-6C1B-49FA-819B-214E8447A60F} - System32\Tasks\{5C4DF20F-7E3E-4DB6-8F58-CF5C29EF0EF2} => pcalua.exe -a C:\Users\Veli\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=adks <==== ATTENTION Task: {CD25856A-722F-4219-B802-A2BD963D346A} - System32\Tasks\{1D066D70-3277-4A9E-A7E1-5B949753FEF6} => pcalua.exe -a C:\ProgramData\WorldWideWebCoupon\WorldWideWebCoupon.exe -c /progname=WorldWideWebCoupon /progver=3.4.2 /progpub=WorldWideWebCoupon /proguninstallurl=asdahjka.com /deleteappfolder=0 /deletefile1="C:\Users\Veli\AppData\Roaming\appdataFr2.bin" /VERYSILENT Task: {D464FAE7-96DD-420B-A96F-184CEBE0E822} - System32\Tasks\{32AFA736-2549-4987-8156-D19F519C004B} => pcalua.exe -a C:\Users\Veli\Downloads\wlsetup-web.exe -d C:\Users\Veli\Downloads Task: {DCE5B024-5409-4E39-813D-3E2B7EBB5229} - System32\Tasks\{E6AABD82-EFE3-47C5-AA09-9D1CB2789EDD} => c:\program files (x86)\opera\launcher.exe [2015-06-19] (Opera Software) Task: {DF644431-6A52-4AC9-A730-06BF35893099} - System32\Tasks\{F35748CB-809B-4CDA-A368-6C42DEA76C97} => pcalua.exe -a C:\Users\Veli\Desktop\Setup.exe -d C:\Users\Veli\Desktop Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (Whitelisted) ============== 2013-12-16 15:46 - 2013-12-16 15:46 - 00029432 _____ () C:\Windows\system32\BsTrace.dll 2013-11-19 22:14 - 2013-11-19 22:14 - 00127488 _____ () c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2013-12-16 15:45 - 2013-12-16 15:45 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll 2014-09-26 17:18 - 2009-12-29 16:52 - 00089088 _____ () C:\Windows\SYSTEM32\CmdRtr64.DLL 2014-09-26 17:18 - 2010-07-22 16:46 - 00237056 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL 2015-07-09 23:37 - 2015-06-10 09:50 - 80035536 _____ () C:\Users\Veli\AppData\Local\Viber\Viber.exe 2013-12-16 15:44 - 2013-12-16 15:44 - 00031480 _____ () C:\Windows\SysWOW64\BsHelpCSps.dll 2015-07-09 23:37 - 2015-02-25 09:21 - 01507328 _____ () C:\Users\Veli\AppData\Local\Viber\libGLESv2.dll 2015-07-09 23:37 - 2015-06-10 09:19 - 00100864 _____ () C:\Users\Veli\AppData\Local\Viber\qfacebook.dll 2015-07-09 23:37 - 2015-06-10 09:19 - 00171008 _____ () C:\Users\Veli\AppData\Local\Viber\exif.dll 2015-07-09 23:37 - 2015-02-25 09:21 - 00063488 _____ () C:\Users\Veli\AppData\Local\Viber\libEGL.dll 2015-07-09 23:37 - 2015-02-25 09:36 - 00010240 _____ () C:\Users\Veli\AppData\Local\Viber\QtQuick.2\qtquick2plugin.dll 2014-09-26 17:18 - 2009-12-29 16:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL 2014-09-26 17:18 - 2010-07-22 16:45 - 00181760 _____ () C:\Windows\SysWOW64\APOMngr.DLL 2015-06-25 20:30 - 2015-06-25 20:08 - 01649272 _____ () C:\Program Files (x86)\Opera\30.0.1835.88\libglesv2.dll 2015-06-25 20:30 - 2015-06-25 20:08 - 00081016 _____ () C:\Program Files (x86)\Opera\30.0.1835.88\libegl.dll 2015-07-09 19:31 - 2015-07-09 20:47 - 16285360 _____ () C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_18_0_0_203.dll 2014-11-28 15:34 - 2014-07-11 11:31 - 00214016 _____ () C:\Program Files (x86)\NCH Software\Components\ffmpeg19\avutil-52.nch.dll 2014-11-28 15:34 - 2014-07-11 11:31 - 00353792 _____ () C:\Program Files (x86)\NCH Software\Components\ffmpeg19\swscale-2.nch.dll 2014-11-28 15:34 - 2014-07-11 11:31 - 05649920 _____ () C:\Program Files (x86)\NCH Software\Components\ffmpeg19\avcodec-55.nch.dll 2014-11-28 15:34 - 2014-07-11 11:31 - 00896512 _____ () C:\Program Files (x86)\NCH Software\Components\ffmpeg19\avformat-55.nch.dll 2014-11-28 15:34 - 2014-07-11 11:31 - 00090112 _____ () C:\Program Files (x86)\NCH Software\Components\ffmpeg19\swresample-0.nch.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\...\com -> hxxp://*.Wondershare.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2447634249-3870620914-2731681305-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Veli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: BtTray => "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{D2DA4147-7794-4D45-B191-487321E306EC}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe FirewallRules: [{DA9B1FA1-05FD-454F-8048-10DBE90F25EE}] => (Allow) C:\Users\Veli\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{AB865C7F-CF06-4AB9-85BA-2ECF7F53D7C3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{53702A63-1AA2-469E-A6DA-53E17045520B}] => (Allow) LPort=2869 FirewallRules: [{3026B551-D46F-40F6-9A35-1AD72AEC27CB}] => (Allow) LPort=1900 FirewallRules: [{B52D4EC6-2F27-40BB-8304-2ECEFD95BE8F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{4656AFBE-3BB7-4D43-8B2B-4F02E21DA0BA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe FirewallRules: [{02CB4DD0-E64C-417D-9509-1ABB3364AE3D}] => (Allow) C:\Users\Veli\AppData\Local\MediaGet2\mediaget.exe FirewallRules: [{F22185B2-904D-435E-AC8E-09F3808AE69B}] => (Allow) C:\Users\Veli\AppData\Local\MediaGet2\mediaget.exe FirewallRules: [{FF303AFA-D9BF-421D-8965-3D67DCB5D1B3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{61E65537-26C7-46C5-9839-AE71AD573C8B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E0D4DFF0-A7D8-40A4-B621-8A439FED7E2D}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe FirewallRules: [{0A8AD8D8-98AA-4AAD-82DB-7E1DC2A8280F}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe FirewallRules: [{02618615-CB9B-4E92-B8A5-A4B236BAF5C3}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe FirewallRules: [{7B91A914-ADC8-4126-9C9C-880FAD147F3E}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe FirewallRules: [{09BB149B-9045-46B2-8833-C9074CDAA9EC}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe FirewallRules: [{F96C8188-7972-483B-915A-95F774C864AC}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe FirewallRules: [TCP Query User{7A5EACCE-BE6C-4DCB-A6F8-D3F0CE589447}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{F67A6C50-DCF8-440D-808F-7C7B21ADDD36}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{22B6130A-E3B0-449D-ABD8-C96D1476F7D6}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [UDP Query User{C4126729-C893-4CE4-82D9-C5BDF0213DC1}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [TCP Query User{B5FE54ED-16C3-414C-A961-5363C8D6085C}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [UDP Query User{4927B5D0-8D81-49AE-A08B-ED0FF1BE8C61}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe FirewallRules: [{5DFE8283-0591-47F6-AB4C-1F54FDEF0E98}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{415B09F8-168A-4817-BD71-08CF1858F7CC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{3B62BBFF-00E0-45C9-AD9A-5A68AF24AE32}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{113139FA-D65F-4EA9-99A5-C2DE578D1AD6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{59340446-66EB-43B0-9870-3218A0037017}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Faulty Device Manager Devices ============= Name: Bluetooth Profile Interface Driver Description: Bluetooth Profile Interface Driver Class Guid: {5b0e08fd-59eb-47af-b743-965f15c0f8f1} Manufacturer: Ralink Corporation Service: BthL2caScoIfSrv Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/12/2015 07:42:52 PM) (Source: MsiInstaller) (EventID: 1013) (User: Veli-PC) Description: Ürün: SmartTurkWebTV -- Failed to launch file: C:\Users\Veli\AppData\Roaming\SmartTürk Web TV\SmartTurkWebTV\prerequisites\AdobeFlashPlayer\install_flash_player-ff.exe Error: 216 Error: (07/12/2015 03:54:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: upgmsd_de_005010028.exe, Version: 1.0.0.1, Zeitstempel: 0x55a0f9cb Name des fehlerhaften Moduls: upgmsd_de_005010028.exe, Version: 1.0.0.1, Zeitstempel: 0x55a0f9cb Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000a250 ID des fehlerhaften Prozesses: 0xd50 Startzeit der fehlerhaften Anwendung: 0xupgmsd_de_005010028.exe0 Pfad der fehlerhaften Anwendung: upgmsd_de_005010028.exe1 Pfad des fehlerhaften Moduls: upgmsd_de_005010028.exe2 Berichtskennung: upgmsd_de_005010028.exe3 Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Der Index kann nicht initialisiert werden. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Das Gatherer-Objekt kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Error: (07/12/2015 03:17:15 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800) Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) System errors: ============= Error: (07/12/2015 04:00:51 PM) (Source: Microsoft Antimalware) (EventID: 2004) (User: ) Description: Beim Laden der Signaturen wurde von %60 ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen. Versuchte Signaturen: %24 Fehlercode: 0x80070002 Fehlerbeschreibung: Das System kann die angegebene Datei nicht finden. Signaturversion: 0.0.0.0;0.0.0.0 Modulversion: %600 Error: (07/12/2015 03:17:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/12/2015 03:17:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/12/2015 03:17:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (07/12/2015 03:17:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office: ========================= Error: (07/12/2015 07:42:52 PM) (Source: MsiInstaller) (EventID: 1013) (User: Veli-PC) Description: Ürün: SmartTurkWebTV -- Failed to launch file: C:\Users\Veli\AppData\Roaming\SmartTürk Web TV\SmartTurkWebTV\prerequisites\AdobeFlashPlayer\install_flash_player-ff.exe Error: 216(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/12/2015 03:54:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: upgmsd_de_005010028.exe1.0.0.155a0f9cbupgmsd_de_005010028.exe1.0.0.155a0f9cbc00000050000a250d5001d0bcaa39cae6a4C:\Users\Veli\AppData\Local\gmsd_de_005 010028\upgmsd_de_005010028.exeC:\Users\Veli\AppData\Local\gmsd_de_005010028\upgmsd_de_005010028.exe7867ff32-289d-11e5-bc4c-28e3477da9c9 Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (07/12/2015 03:17:16 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (07/12/2015 03:17:15 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800) Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (07/12/2015 03:17:14 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) 4700 CodeIntegrity Errors: =================================== Date: 2015-02-16 13:25:32.303 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-02-16 13:25:31.891 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: AMD E2-3800 APU with Radeon(TM) HD Graphics Percentage of memory in use: 53% Total physical RAM: 7150.36 MB Available physical RAM: 3328.25 MB Total Virtual: 14298.93 MB Available Virtual: 9648.14 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:343.78 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A25F22D5) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ==================== End of log ============================
__________________ Chuck Norris kann STRG + ALT + ENTF gleichzeitig mit einem Finger drücken |
12.07.2015, 20:02 | #2 |
/// the machine /// TB-Ausbilder | Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Hi,
__________________Wann kommt das? Screenshot bitte.
__________________ |
12.07.2015, 21:14 | #3 |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Hi Schrauber,
__________________immer wenn ich das Program smartturkwebtv öffne. habe es gestern installiert gehabt, gestern gings. Seit heute morgen geht das Program nicht mehr und kommt diese Fehlermeldung. Doch, habs deinstalliert und erneut installiert, wieder gleiche Fehlermeldung.
__________________ |
13.07.2015, 15:08 | #4 | |
/// the machine /// TB-Ausbilder | Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Was ist das für ein Programm? Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.07.2015, 15:33 | #5 |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Schrauber, das ist ein Tv Sender Programm Ich habe Flashplayer deinstalliert, erneut installiert, jedoch Erfolg
__________________ Chuck Norris kann STRG + ALT + ENTF gleichzeitig mit einem Finger drücken |
13.07.2015, 15:42 | #6 |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Ich habe das Programm deinstalliert, erneut installiert Während der Installation, habe ich diese Fehlermeldung erhalten; siehe Screenshot so mal aus der Hüfte: kann das irgendwas mit - item(itemCount) - Array - itemVal Objekte zu tun sein ? Ich mein du bist der Experte, wollte dir nur mal auf die Sprünge helfen. Vielleicht liege ich ja total falsch
__________________ --> Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Geändert von We-Lee (13.07.2015 um 16:09 Uhr) |
14.07.2015, 00:44 | #7 | |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegtZitat:
__________________ Chuck Norris kann STRG + ALT + ENTF gleichzeitig mit einem Finger drücken |
14.07.2015, 16:35 | #8 | |
/// the machine /// TB-Ausbilder | Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegtZitat:
1) kenne ich die Programmierung des Programmes nicht 2) selbst wenn ich sie kennen würde, ich hab keinen Schimmer vom Programmieren Das ist ein programm-interner Fehler, da kann nur der Support des jeweiligen Programmes helfen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.07.2015, 18:19 | #9 |
| Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt was für interner fehler schrauber ??? ich habe kollegen, die das program immernoch nutzen gibt es hier im forum keinen anderen, der mir helfen kann ??? ich meine, du kannst ja nicht alles wissen : D
__________________ Chuck Norris kann STRG + ALT + ENTF gleichzeitig mit einem Finger drücken |
15.07.2015, 09:49 | #10 |
/// the machine /// TB-Ausbilder | Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt Ich glaube du verstehst nicht Das hier ist ein AntiMalware-Forum. Hast Du Probleme mit Malware, bist du hier richtig. Das hier ist kein Malwareproblem. Diese Software hat irgend einen Stress, den nur der Support des Herstellers finden kann. Die haben das Ding ja gebaut . Nur weil es bei andern läuft heisst es nicht, die Software ist fehlerfrei. Das ist Wunschdenken, so funktioniert Software nicht
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Fehlermeldung: Objektverweis wurde nicht auf eine objektinstanz festgelegt |
adware, browser, combofix, converter, defender, desktop, device driver, explorer, failed, fehlermeldung, firefox, flash player, google, install.exe, installmanager.exe, mozilla, mp3, onedrive, realtek, registry, rundll, security, services.exe, software, super, svchost.exe, system, udp, windows, wlan |