Hallo Schrauber,
man kann's nicht oft genug sagen: Danke! ESET hat echt ewig gedauert und ich habe das dann auch nach Deinen Anweisungen deinstalliert. Wann werden die ganzen anderen bisherigen Installationen aufgeräumt und deinstalliert? Zu den Problemen kann ich noch nicht soooo viel sagen: Auf alle Fälle funktioniert www.yahoo.com (aber auch Anderes, z.B. das Einloggen bei web.de, ixquick.com etc.) immer noch nicht: "Die Webseite kann nicht angezeigt werden.". Ob der PC jetzt wirklich schneller ist, kann ich erst später tatsächlich testen. Außerdem konnte ich schon vorher Windows nicht mehr updaten (Fehlermeldung), ob das immer noch so ist, muss ich auch erst nachvollziehen und sende Dir das beim nächsten mal mit. Ist denn nun alles i.O. aus Deiner Sicht? Irgendwie beruhigen mich die logfiles nicht wirklich. Hier erst einmal die letzten Logs.
Danke
ochnee
ESET: Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=aea121016e64964e969a27827a30607e
# engine=21602
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-12-17 11:52:48
# local_time=2014-12-18 12:52:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7600 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 23955 2042968 0 0
# compatibility_mode_1='McAfee VirusScan'
# compatibility_mode=5121 16776637 100 82 157515379 176801768 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 176680 170490218 0 0
# scanned=267638
# found=4
# cleaned=0
# scan_time=6321
sh=359D977D432E4F90FE627B2717144AE873990AC4 ft=1 fh=63c7b0ee3e7f229d vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\DVDVideoSoftTB.exe.vir"
sh=052529D1B57123707DE6304CA2A2E8832E80A1F1 ft=1 fh=487ceb503c81f5f9 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"
sh=7A5B168BB2B8C06B2A9134B656BBF195830D21C2 ft=1 fh=55d4f387d8566cf4 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\AppData\LocalLow\DVDVideoSoftTB\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.1.1\bin\PriceGongIE.dll"
sh=8DEBB647F63141CBC43DCEC0CDA504942114A755 ft=1 fh=ef32f70322e85a53 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Hase\Music\Download\SoftonicDownloader61459.exe"
SecurityCheck: Code:
Results of screen317's Security Check version 0.99.91
Windows 7 x64 (UAC is enabled)
Out of date service pack!!
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
McAfee VirusScan
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
McAfee SiteAdvisor
Adobe Flash Player 12.0.0.70 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of Date!
Google Chrome (39.0.2171.71)
Google Chrome (39.0.2171.95)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
McAfee VIRUSS~1 mcshield.exe
Online Games Manager ogmservice.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2014
Ran by Hase (administrator) on HASE-PC on 18-12-2014 01:05:45
Running from C:\Users\Hase\Desktop
Loaded Profile: Hase (Available profiles: Hase)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan\Mcshield.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSK\msksrver.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\QuickTime\qttask.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-11] (Egis Technology Inc.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-18] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-09-30] (Acer Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-24] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-02] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-06] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-05] (Acer Corp.)
HKLM-x32\...\Run: [mcagent_exe] => C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [645328 2009-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [77824 2009-12-23] (Apple Computer, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247144 2010-08-24] (TomTom)
HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473464 2014-03-17] (TomTom)
Startup: C:\Users\Hase\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_7736&r=27361209a906l03h8z1m5t58k1y58r
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.myheritage.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_7736&r=27361209a906l03h8z1m5t58k1y58r
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 -> {BE28C22E-F666-424d-B5FD-125C4AFEE34E} URL = hxxp://search.myheritage.com?orig=ds&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 -> DefaultScope {16CD48C0-8A49-4F97-876A-0DAF2C1A18AE} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141006&p={SearchTerms}
SearchScopes: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 -> {16CD48C0-8A49-4F97-876A-0DAF2C1A18AE} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141006&p={SearchTerms}
SearchScopes: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE368
BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> C:\Program Files (x86)\McAfee\MSK\mskapbho64.dll ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> C:\Program Files (x86)\McAfee\MSK\MskAPBho.dll ()
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Windows\SysWow64\Msdxm6.ocx (Microsoft Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-2090039527-2538385464-2127981158-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: HKLM-x32 {28B66320-9687-4B13-8757-36F901887AB5} hxxp://photoservice.fujicolor.eu/ips-opdata/objects/canvasx.cab
DPF: HKLM-x32 {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://photoservice.fujicolor.eu/ips-opdata/objects/jordan.cab
DPF: HKLM-x32 {935F9B04-0C7B-4454-A391-348C54AD7ADD} hxxp://games.bigfishgames.com/de_big-city-adventure-san-francisco/online/JBGamePlayer.cab
DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Windows\SysWow64\Msdxm6.ocx (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @zylom.com/ZylomGamesPlayer -> C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-10-28]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-16]
CHR Extension: (Avira SafeSearch) - C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2014-11-26]
CHR Extension: (SiteAdvisor) - C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2012-03-08]
CHR Extension: (Avira Browserschutz) - C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-26]
CHR Extension: (Google Wallet) - C:\Users\Hase\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-14]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-11-22]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [156904 2014-11-13] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe [865832 2009-07-23] (McAfee, Inc.)
R2 McNASvc; c:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe [2482848 2009-04-09] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [696848 2009-06-17] (McAfee, Inc.)
R2 McProxy; c:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe [359952 2009-04-09] (McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan\Mcshield.exe [155456 2009-06-18] (McAfee, Inc.)
S4 McSysmon; C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe [606736 2009-06-17] (McAfee, Inc.)
R2 MpfService; C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe [894136 2009-07-22] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files (x86)\McAfee\MSK\MskSrver.exe [26640 2009-04-10] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-11] (Egis Technology Inc.)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [581568 2014-03-27] (RealNetworks, Inc.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 athsgt; C:\Windows\SysWOW64\DRIVERS\athsgt.sys [164992 2010-01-02] () [File not signed]
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-02-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
S2 Ca533av; C:\Windows\SysWOW64\Drivers\Ca533av.sys [515803 2002-10-21] (Digital Camera) [File not signed]
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-09-06] (Devguru Co., Ltd)
S2 limsgt; C:\Windows\SysWOW64\DRIVERS\limsgt.sys [12544 2010-01-02] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-02-10] ()
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102600 2009-06-18] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [307400 2009-06-18] (McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2009-06-18] (McAfee, Inc.)
S3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2009-06-18] (McAfee, Inc.)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2009-04-09] (McAfee, Inc.)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [95552 2004-01-26] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 USBCamera; C:\Windows\System32\Drivers\Bulk533.sys [11108 2007-04-02] (USB BULK)
S3 USBCamera; C:\Windows\SysWOW64\Drivers\Bulk533.sys [10986 2002-07-25] (USB BULK) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-18 01:03 - 2014-12-18 01:03 - 00001130 _____ () C:\Users\Hase\Desktop\checkup.txt
2014-12-18 00:58 - 2014-12-18 00:58 - 00852490 _____ () C:\Users\Hase\Desktop\SecurityCheck.exe
2014-12-17 22:56 - 2014-12-17 22:56 - 02347384 _____ (ESET) C:\Users\Hase\Desktop\esetsmartinstaller_deu.exe
2014-12-17 00:38 - 2014-12-17 00:39 - 00031503 _____ () C:\Users\Hase\Desktop\Addition.txt
2014-12-17 00:36 - 2014-12-18 01:06 - 00023191 _____ () C:\Users\Hase\Desktop\FRST.txt
2014-12-17 00:36 - 2014-12-18 01:03 - 00000000 ____D () C:\Users\Hase\Desktop\FRST-OlderVersion
2014-12-17 00:33 - 2014-12-17 00:33 - 00001488 _____ () C:\Users\Hase\Desktop\JRT.txt
2014-12-17 00:29 - 2014-12-17 00:29 - 00000000 ____D () C:\Windows\ERUNT
2014-12-17 00:26 - 2014-12-17 00:26 - 01707646 _____ (Thisisu) C:\Users\Hase\Desktop\JRT.exe
2014-12-17 00:21 - 2014-12-17 00:21 - 00003600 _____ () C:\Users\Hase\Desktop\AdwCleaner.txt
2014-12-17 00:18 - 2014-12-17 00:18 - 00000027 _____ () C:\Windows\SysWOW64\MPFServiceFailureCount.txt
2014-12-17 00:14 - 2014-12-17 00:18 - 00000000 ____D () C:\AdwCleaner
2014-12-17 00:13 - 2014-12-17 00:13 - 02166272 _____ () C:\Users\Hase\Desktop\AdwCleaner_4.105.exe
2014-12-17 00:12 - 2014-12-17 00:12 - 00001346 _____ () C:\Users\Hase\Desktop\mbam.txt
2014-12-16 23:24 - 2014-12-16 23:24 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-12-16 00:49 - 2014-12-16 00:49 - 00000000 ____D () C:\Users\Hase\AppData\Roaming\Avira
2014-12-16 00:46 - 2014-12-16 00:46 - 00002034 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-12-16 00:46 - 2014-12-16 00:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-16 00:45 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-12-16 00:45 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-12-16 00:45 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-12-16 00:35 - 2014-12-16 00:35 - 154051656 _____ () C:\Users\Hase\Downloads\avira_free_antivirus468_de.exe
2014-12-15 23:59 - 2014-12-15 23:59 - 00015203 _____ () C:\ComboFix.txt
2014-12-15 23:37 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-15 23:37 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-15 23:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-15 23:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-15 23:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-15 23:37 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-15 23:37 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-15 23:37 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-15 23:28 - 2014-12-16 00:00 - 00000000 ____D () C:\Qoobox
2014-12-15 23:27 - 2014-12-15 23:58 - 00000000 ____D () C:\Windows\erdnt
2014-12-15 23:18 - 2014-12-15 23:18 - 05601641 ____R (Swearware) C:\Users\Hase\Desktop\ComboFix.exe
2014-12-14 18:50 - 2014-12-14 18:50 - 00000000 _____ () C:\Users\Hase\defogger_reenable
2014-12-14 18:49 - 2014-12-14 18:49 - 00050477 _____ () C:\Users\Hase\Desktop\Defogger.exe
2014-12-14 18:18 - 2014-12-18 01:05 - 00000000 ____D () C:\FRST
2014-12-14 18:15 - 2014-12-18 01:03 - 02121216 _____ (Farbar) C:\Users\Hase\Desktop\FRST64.exe
2014-12-14 14:55 - 2014-12-14 14:55 - 00001232 _____ () C:\Users\Hase\Desktop\Revo Uninstaller.lnk
2014-12-14 14:55 - 2014-12-14 14:55 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-14 14:52 - 2014-12-14 14:52 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Hase\Downloads\revosetup95.exe
2014-12-14 11:05 - 2014-12-14 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daedalic Entertainment
2014-11-29 13:57 - 2014-12-14 13:03 - 00000000 ____D () C:\ProgramData\JuyboCasan
2014-11-29 13:57 - 2014-12-10 14:50 - 00000000 ____D () C:\ProgramData\YihaRade
2014-11-29 13:57 - 2014-11-29 13:57 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-11-26 06:31 - 2014-12-16 00:45 - 00000000 ____D () C:\ProgramData\Avira
2014-11-26 06:31 - 2014-12-16 00:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-26 06:30 - 2014-11-26 06:30 - 04583464 _____ (Avira Operations GmbH & Co. KG) C:\Users\Hase\Downloads\avira_de_av___ws (1).exe
2014-11-26 06:29 - 2014-11-26 06:29 - 04583464 _____ (Avira Operations GmbH & Co. KG) C:\Users\Hase\Downloads\avira_de_av___ws.exe
2014-11-21 15:02 - 2014-11-21 15:02 - 00000000 ____H () C:\Users\Hase\AppData\Local\BIT4182.tmp
2014-11-21 15:02 - 2014-11-21 15:02 - 00000000 _____ () C:\Users\Hase\AppData\Local\{5C4CC5EA-8745-4E20-A7EC-5E39F698FFF1}
2014-11-21 10:22 - 2014-11-22 16:39 - 367136026 _____ () C:\Users\Hase\blanca.cpr
2014-11-20 16:46 - 2014-11-20 20:18 - 00000000 ____D () C:\Users\Hase\Desktop\Blanca
2014-11-20 15:27 - 2014-11-20 15:27 - 00003376 _____ () C:\Users\Hase\Downloads\Tobias Reuther.vcf
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-18 00:18 - 2010-02-25 20:18 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-17 23:23 - 2009-11-14 20:27 - 02057819 _____ () C:\Windows\WindowsUpdate.log
2014-12-17 22:55 - 2009-07-14 05:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-17 22:55 - 2009-07-14 05:45 - 00017600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-17 22:54 - 2009-10-28 18:34 - 00015503 _____ () C:\Windows\system32\Config.MPF
2014-12-17 22:48 - 2009-12-23 00:27 - 00054156 ____H () C:\Windows\QTFont.qfn
2014-12-17 22:47 - 2010-02-25 20:18 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-17 22:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-17 22:47 - 2009-07-14 05:51 - 00218965 _____ () C:\Windows\setupact.log
2014-12-17 19:10 - 2011-01-14 17:31 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5DFFC5B1-F168-4B5A-BBE5-DE5F31D6C5D8}
2014-12-17 00:19 - 2009-10-29 06:42 - 01250170 _____ () C:\Windows\PFRO.log
2014-12-17 00:08 - 2014-07-18 09:45 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-16 23:28 - 2014-07-18 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-16 23:28 - 2014-07-18 09:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-16 23:28 - 2013-01-16 17:11 - 00001070 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-16 00:46 - 2009-12-23 00:27 - 00001409 _____ () C:\Windows\QTFont.for
2014-12-16 00:40 - 2014-03-08 21:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-15 23:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-12-15 23:51 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-15 23:49 - 2009-07-14 03:34 - 73662464 _____ () C:\Windows\system32\config\software.bak
2014-12-15 23:49 - 2009-07-14 03:34 - 42991616 _____ () C:\Windows\system32\config\system.bak
2014-12-15 23:49 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2014-12-15 23:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-12-15 23:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-12-14 18:50 - 2009-12-20 17:49 - 00000000 ____D () C:\Users\Hase
2014-12-14 13:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-12-14 12:49 - 2010-04-17 13:48 - 00000000 ____D () C:\Users\Hase\AppData\Local\Zylom Games
2014-12-14 12:39 - 2010-01-12 20:57 - 00000000 ____D () C:\Program Files (x86)\DEUTSCHLAND SPIELT
2014-12-14 11:40 - 2010-07-10 12:04 - 00000000 ____D () C:\Users\Hase\Desktop\Spiele
2014-12-14 11:35 - 2009-11-14 20:33 - 00460006 _____ () C:\Windows\DirectX.log
2014-12-14 11:32 - 2011-09-02 20:57 - 00000000 ____D () C:\Program Files (x86)\Daedalic Entertainment
2014-12-13 22:26 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-13 11:43 - 2009-11-15 05:15 - 00654400 _____ () C:\Windows\system32\perfh007.dat
2014-12-13 11:43 - 2009-11-15 05:15 - 00130240 _____ () C:\Windows\system32\perfc007.dat
2014-12-13 11:43 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-29 13:27 - 2009-10-28 18:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-29 13:25 - 2009-12-22 16:17 - 00000000 ____D () C:\Users\Hase\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-11-29 13:23 - 2009-12-20 18:04 - 00000000 ____D () C:\Users\Hase\AppData\Local\Microsoft Games
2014-11-29 13:21 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-29 13:06 - 2010-02-20 17:36 - 00000000 ____D () C:\Program Files (x86)\Wimmel
2014-11-29 13:04 - 2009-12-30 21:11 - 00000000 ____D () C:\Program Files (x86)\Rondomedia
2014-11-29 13:03 - 2009-12-23 15:16 - 00000000 ____D () C:\Program Files\Baphomets Fluch II
2014-11-29 12:59 - 2009-12-25 16:35 - 00000000 ____D () C:\Program Files (x86)\GoldMahjongg
2014-11-29 12:59 - 2009-12-23 00:42 - 00000000 ____D () C:\Phenomedia AG
2014-11-29 12:50 - 2010-08-07 20:05 - 00000000 ____D () C:\ProgramData\Awem
2014-11-29 12:50 - 2010-03-31 18:33 - 00000000 ____D () C:\Program Files (x86)\Cooking Academy
2014-11-29 12:48 - 2010-08-04 20:39 - 00000000 ____D () C:\Program Files (x86)\Alawar
2014-11-29 12:46 - 2009-12-30 23:12 - 00000000 ____D () C:\Program Files (x86)\Deep Silver
2014-11-29 12:42 - 2012-02-26 17:44 - 00000000 ____D () C:\Program Files (x86)\dtp
2014-11-29 12:41 - 2013-05-09 19:15 - 00000000 ____D () C:\Users\Hase\AppData\Local\Daedalic Entertainment
2014-11-29 12:38 - 2010-01-02 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\City Interactive
2014-11-29 12:38 - 2010-01-02 22:08 - 00000000 ____D () C:\Program Files (x86)\City Interactive
2014-11-29 12:27 - 2012-04-10 23:25 - 00000000 ____D () C:\Users\Hase\Documents\Cateia Games
2014-11-29 12:18 - 2010-11-26 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CRIMSON COW
2014-11-29 12:18 - 2010-11-26 21:03 - 00000000 ____D () C:\Program Files (x86)\CRIMSON COW
2014-11-29 12:17 - 2009-12-24 23:42 - 00000000 ____D () C:\Program Files (x86)\Pendulo Studios
2014-11-29 12:15 - 2011-11-16 14:38 - 00000000 ____D () C:\Program Files (x86)\ANACONDA
2014-11-29 12:13 - 2009-12-22 16:06 - 00000000 ____D () C:\Program Files (x86)\Microids
2014-11-29 12:12 - 2009-12-22 16:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microids
2014-11-26 06:31 - 2010-03-27 21:48 - 00000000 ____D () C:\Users\Hase\AppData\Roaming\Mozilla
2014-11-26 06:26 - 2009-10-28 18:21 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-11-22 15:24 - 2009-12-20 18:04 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-11-22 15:24 - 2009-11-14 20:28 - 00000000 ____D () C:\ProgramData\Temp
2014-11-22 00:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-11-21 06:14 - 2014-07-18 09:45 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-07-18 09:45 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2013-01-16 17:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
Files to move or delete:
====================
C:\ProgramData\7tvtad8z.fee
C:\ProgramData\ha2tvlf.fee
C:\Users\Hase\wlsetup-web.exe
Some content of TEMP:
====================
C:\Users\Hase\AppData\Local\Temp\avgnt.exe
C:\Users\Hase\AppData\Local\Temp\Quarantine.exe
C:\Users\Hase\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-28 21:32
==================== End Of Log ============================
--- --- ---
Additional: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-12-2014
Ran by Hase at 2014-12-18 01:06:32
Running from C:\Users\Hase\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: McAfee VirusScan (Disabled - Out of date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Disabled - Out of date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Personal Firewall (Disabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.0.7006 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.0.7006 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.29 - NewTech Infosystems)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3004 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.)
Acer GridVista (HKLM-x32\...\GridVista) (Version: 3.01.0730 - Acer Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.7.0715 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3017 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Activision(R) (x32 Version: 1.00.0000 - Activision) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media)
Alter Ego DE (HKLM-x32\...\Alter Ego DE_is1) (Version: - Future Games)
Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version: - Oberon Media)
AudioCon (HKLM-x32\...\AudioCon) (Version: 1.0 - Basement Softworks)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Backup Manager Basic (x32 Version: 2.0.0.29 - NewTech Infosystems) Hidden
Big Fish Games: Game Manager (HKLM-x32\...\BFGC) (Version: 1.5.1.0 - )
Broadcom Gigabit NetLink Controller (HKLM\...\{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}) (Version: 12.26.02 - Broadcom Corporation)
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media)
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media)
Der Stein der Weisen (HKLM-x32\...\Der Stein der Weisen) (Version: - )
DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 1.0.0.45 - INTENIUM GmbH)
Die Abenteuer von Robinson Crusoe (HKLM-x32\...\Die Abenteuer von Robinson Crusoe) (Version: - )
Die ersten 10 Jahre (HKLM-x32\...\{1C12B0B2-91FB-439A-A64D-1A239F0B7FAB}) (Version: 1.00.0000 - )
Die Kunst des Mordens: Der Marionettenspieler (HKLM-x32\...\Art of Murder 2/DE-German_is1) (Version: - City Interactive)
Die Kunst des Mordens: Karten des Schicksals (HKLM-x32\...\Art of Murder 3/DE-German_is1) (Version: - City Interactive)
Die Wiege Olympias 3 (HKLM-x32\...\Die Wiege Olympias 3) (Version: 1.0.0.0 - INTENIUM GmbH)
Digital Camera (HKLM-x32\...\{C1205500-2179-11D7-B0B9-0000E24D4B29}) (Version: - )
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version: - Oberon Media)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Face Noir (HKLM-x32\...\Face Noir) (Version: 1.0 - Daedalic Entertainment)
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version: - Oberon Media)
ffdshow [rev 497] [2006-11-04] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
First Class Flurry (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115208410}) (Version: - Oberon Media)
Frankenstein (HKLM-x32\...\{610B773E-3183-43D5-B01D-862EFF276B81}) (Version: 1.00.0000 - Ihr Firmenname)
Free Studio version 4.8 (HKLM-x32\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.)
Gomo (HKLM-x32\...\Gomo_is1) (Version: 1.1 - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version: - Oberon Media)
Gray Matter (HKLM-x32\...\Gray Matter_is1) (Version: - dtp)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version: - Oberon Media)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Holly im Wunderland (HKLM-x32\...\Holly im Wunderland) (Version: - )
Icatch(IV) (HKLM-x32\...\{F83390D5-EA4D-4C7B-A216-789CF1E751AA}) (Version: 6.0.0000.0000 - sunplus)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated)
In 80 Tagen um die Welt (HKLM-x32\...\{DAB93AAF-0FCC-4023-AE84-F20C16DCC171}) (Version: 1.00.0000 - Frogwares)
Inpaint 2.3 (HKLM-x32\...\{30283233-3BE6-473D-A47C-ED964A2F78B4}_is1) (Version: - Teorex)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
Jack the Ripper (HKLM-x32\...\{EAABC101-66C3-4708-A793-3EC0025EF348}) (Version: - )
Java(TM) 7 Update 2 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417002FF}) (Version: 7.0.20 - Oracle)
Joan Jade und die Tore von Xibalba (HKLM-x32\...\Joan Jade und die Tore von Xibalba) (Version: 1.0.0.0 - INTENIUM GmbH)
Journey of a Roach (HKLM-x32\...\JoaR_is1) (Version: 1.3 - Daedalic Entertainment)
Kochmeister Pfanne XXL (HKLM-x32\...\Kochmeister Pfanne XXL_is1) (Version: - )
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.05 - Acer Inc.)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Madagascar 2(TM) (HKLM-x32\...\InstallShield_{F8C02517-4AC3-4026-8292-ACF23E98A7D7}) (Version: 1.00.0000 - Activision)
Magic Encyclopedia (HKLM-x32\...\Magic Encyclopedia) (Version: - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: - McAfee, Inc.)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.154 - McAfee, Inc.)
Media Player Utilities 5.20 (HKLM-x32\...\{8E79F5DD-4A0A-452B-B3F8-0651E4D24854}) (Version: 5.20 - )
Meine kleine Farm 2 (HKLM-x32\...\Meine kleine Farm 2) (Version: - )
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version: - Oberon Media)
Microsoft .NET Compact Framework 2.0 SP1 (HKLM-x32\...\{625386A4-B6B6-4911-A6E8-23189C3F2D15}) (Version: 2.0.6129 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Monkey Island™ Special Edition Collection (HKLM-x32\...\MISEC) (Version: 1.0.0.0 - LucasArts)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDriveConnect 3.3.0.1502 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1502 - TomTom)
MyFreeCodec (HKLM-x32\...\MyFreeCodec) (Version: - )
MyFreeCodec (HKU\S-1-5-21-2090039527-2538385464-2127981158-1000\...\MyFreeCodec) (Version: - )
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.76.0 - Egis Technology Inc.)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10500 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10100.1.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6623 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{1C4551A6-4743-4093-91E4-1477CD655043}) (Version: 9.09.0203 - NVIDIA Corporation)
Online Games Manager v1.30 (HKLM-x32\...\Online Games Manager) (Version: 1.30.14 - Real Networks, Inc.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OutlookAddInNet3Setup (HKLM-x32\...\{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}) (Version: 1.0.0 - Samsung)
PirateVille (HKLM-x32\...\PirateVille) (Version: - )
Post Mortem (HKLM-x32\...\{4B002131-B395-428B-8F27-8D3FCB7750B7}) (Version: - )
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime (HKLM-x32\...\QuickTime) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30093 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Ritter Arthur III (HKLM-x32\...\Ritter Arthur III) (Version: 1.0.0.0 - INTENIUM GmbH)
Rossmann Fotowelt Software 4.13 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.13 - ORWO Net)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.950.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Syberia 2 (HKLM-x32\...\{EDBE322C-5CF0-46AC-A6DE-C6713F84B68A}) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated)
The Abbey (HKLM-x32\...\The Abbey) (Version: - )
The Book of Unwritten Tales 1.0.0.0 (HKLM-x32\...\{B6A24D2D-1ADB-4553-87FD-38F3FAADC18E}_is1) (Version: - HMH Hamburger Medien Haus Vertriebs GmbH)
The Clockwork Tower: Gefangen in der Zeit (HKLM-x32\...\The Clockwork Tower: Gefangen in der Zeit) (Version: 1.0.0.0 - INTENIUM GmbH)
The Legend of Crystal Valley (HKLM-x32\...\The Legend of Crystal Valley_is1) (Version: - dtp)
The Next BIG Thing (Deutsch) (HKLM-x32\...\The Next BIG Thing (de)) (Version: 1.00 - CRIMSON COW)
The Scruffs (HKLM-x32\...\b5f7185d367a75962169750e03b3e3f1) (Version: - )
TomTom HOME 2.7.6.2056 (HKLM-x32\...\TomTom HOME) (Version: 2.7.6.2056 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - )
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Zylom Games Player Plugin (HKLM-x32\...\Zylom Games Player Plugin) (Version: - Zylom Games)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
29-11-2014 12:51:29 Entfernt Der Schatz des Pharao XXL
29-11-2014 12:56:41 Uninstall 'Der Kleine Eisbär 1'
29-11-2014 12:59:39 Entfernt Gütertrennung XXL
29-11-2014 13:04:33 Lernspaß kompakt Mathe 2 wird entfernt
29-11-2014 13:05:19 Lernspaß kompakt Mathe 3 wird entfernt
14-12-2014 11:33:21 DirectX wurde installiert
15-12-2014 23:00:34 Revo Uninstaller's restore point - Ask Toolbar
15-12-2014 23:04:55 Revo Uninstaller's restore point - Ask Toolbar
15-12-2014 23:34:21 Revo Uninstaller's restore point - Avira Free Antivirus
16-12-2014 00:37:02 Revo Uninstaller's restore point - Avira
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-12-15 23:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0DA4A2C4-5A20-4A93-BDE5-B01A25550212} - System32\Tasks\{D75F42E9-BBCB-4EC8-99D3-DC4AB5146354} => C:\Program Files\Baphomets Fluch II\Sword2.exe [2009-12-23] ()
Task: {10301382-1D27-4E31-AE69-135E697B866D} - System32\Tasks\{F321CFED-6533-47F0-8C25-CC81E9329924} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {14526CE9-FEE8-4986-A3EB-B1023AE85847} - System32\Tasks\{90183E62-AD71-4F05-8FBB-007B4F2DB681} => pcalua.exe -a D:\Setup.now.exe -d D:\
Task: {1FDC93DF-8E8E-4820-8B40-8F81EE18BF10} - System32\Tasks\{AFA7C390-2DB1-4F7B-8687-0FC0431CCAC7} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {252747BB-E669-42ED-A258-293931CA54A7} - System32\Tasks\{B7A69CD0-5CE5-456A-A92F-3E90B0E3A684} => C:\Program Files\Baphomets Fluch II\Sword2.exe [2009-12-23] ()
Task: {5D716C61-798A-43B7-9BB0-7613752D7472} - System32\Tasks\{8B9DEFE5-7FF3-4320-9C4C-697140A3451B} => C:\Program Files\Baphomets Fluch II\Sword2.exe [2009-12-23] ()
Task: {6E80950E-264A-4504-B424-AD524B01604B} - System32\Tasks\{19803A80-5EA6-4C02-8DFF-0026B5F2657B} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {6F8FB357-CE53-4767-9DC8-286457AC6B6C} - System32\Tasks\{D94B1B3E-B2BA-4B27-BEAB-3823384F6580} => C:\Program Files (x86)\Microids\Syberia 2\Syberia2.exe [2004-04-21] (Microids Canada)
Task: {7D982012-9A45-4426-A60D-107E3884CC25} - System32\Tasks\{D708E9AC-DAF4-43F8-A132-0C5C3E3D5F53} => pcalua.exe -a D:\setup.exe -d D:\
Task: {81015DF4-3939-48B9-A380-EB23562AB71F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: {8740D2E4-FD2E-4610-8AD0-EB74B737AC01} - System32\Tasks\{4B98C019-CF84-4461-8DA3-4B7E259CA57D} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {8A5ED449-6228-45B1-B633-2D650C14346C} - System32\Tasks\{615A48EB-45DB-3C61-6024-A0225C7A205C} => C:\Users\Hase\AppData\Roaming\YzkomjrF\TbmEIbEX\xzzGGeZv\evLClDUbB.exe
Task: {9DD96C1B-F076-49F4-8B04-D3C27022505E} - System32\Tasks\{C6845ECB-EE62-4060-94DB-1F8F8D9E2B70} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {A029D4EF-31E3-42B3-8132-4BBB61DD65A3} - System32\Tasks\{3D807006-2E77-4889-820E-2CE1F6A0FF9B} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files\Baphomets Fluch II\Sword2.exe"
Task: {ABF437C4-CCCF-4B9F-8E36-24A0B0525A21} - System32\Tasks\{FE099F79-0A35-4A73-BAB6-113D043DAC11} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {AFF59C1C-EA1B-4FA7-A21A-6E928CE7E254} - System32\Tasks\{72F52382-E9B7-4470-B572-747C7782220F} => C:\Program Files (x86)\Microids\Syberia 2\Syberia2.exe [2004-04-21] (Microids Canada)
Task: {B4D09005-22A6-45DB-AC12-980D517B6B34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-23] (Adobe Systems Incorporated)
Task: {B86D8412-2251-47A0-B140-2E556DBEB7E3} - System32\Tasks\{8CCDB0F1-DA01-4A67-97AF-3C6BFDD66B88} => pcalua.exe -a C:\Users\Hase\Pictures\fiction-fixers-adventures-in-wonderland_s2_l2_gF5641T1L2_d965210889.exe -d C:\Users\Hase\Pictures
Task: {BDAB2BF3-D7A1-483B-90E0-4E479CA435C8} - System32\Tasks\{C791BDCC-9FCE-4872-A3C3-2A20D46AED24} => C:\Program Files (x86)\Microids\Syberia 2\Syberia2.exe [2004-04-21] (Microids Canada)
Task: {BF63527F-8D4C-4A76-BA81-661689A8F5FD} - System32\Tasks\{1ED6A9D9-76FD-4C27-B56D-4A7E0056E224} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: {C115A7DC-B0B0-49CC-A6B0-EEFFC86475A1} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {C39B30AF-8461-417E-9C1C-AB0C47A5E492} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: {C58EB18A-DAE8-40BE-A860-BCC96F585F61} - System32\Tasks\McDefragTask => c:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-07-04] (McAfee, Inc.)
Task: {D16B4446-1703-4585-AF3D-AAD5D8F2CAA5} - System32\Tasks\{46943FFF-F383-40A0-A1CC-E1252695B9F6} => pcalua.exe -a "C:\Users\Hase\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UYFVUL0\msjavx86[1].exe" -d C:\Users\Hase\Desktop
Task: {D99EB514-D75D-4213-8C0C-254BDB315E63} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2090039527-2538385464-2127981158-1000
Task: {EACE9DC3-15E5-4067-A0E3-8B447358E3A7} - System32\Tasks\{7268CE01-B266-4FE8-965E-021DA10A2781} => C:\Program Files\Baphomets Fluch II\Sword2.exe [2009-12-23] ()
Task: {F0D7B942-C332-4C88-B8FF-C07B76DD5EB5} - System32\Tasks\{394AFC15-1A06-4082-9CD2-F0FF0B383186} => C:\Program Files (x86)\Deep Silver\Geheimakte 2 - Puritas Cordis\AutoStarter.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\McDefragTask.job => C:\Windows\system32\defrag.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2009-02-03 01:33 - 2009-02-03 01:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 01:55 - 2008-09-29 01:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-03-17 11:59 - 2014-03-17 11:59 - 00026488 _____ () C:\Program Files (x86)\MyDrive Connect\DeviceDetection.dll
2014-03-17 11:58 - 2014-03-17 11:58 - 00082808 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterBase.dll
2014-03-17 11:58 - 2014-03-17 11:58 - 00357752 _____ () C:\Program Files (x86)\MyDrive Connect\TomTomSupporterProxy.dll
2009-10-28 18:30 - 2009-04-10 01:04 - 00246800 _____ () C:\Program Files (x86)\McAfee\MSK\MskAPBho.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Hase:zylomtest
AlternateDataStreams: C:\Users\Hase:zylomtr{0000278T-TT9K-T8DU-12ET-241L598QQVVE}
AlternateDataStreams: C:\Users\Hase:zylomtr{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVGM}
AlternateDataStreams: C:\Users\Hase:zylomtr{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVJI}
AlternateDataStreams: C:\Users\Hase:zylomtr{00009BV5-V6E6-N99D-O8SF-9VRP3OLUMVJP}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG1-1VH8-28I0EFCC2VN3}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG1-1VH8-28I0EFCC2VQJ}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG1-J24H-298CPF2SOVVG}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG1-RTNH-21IOLNPESVVD}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG2-7CIS-27D9QT4MMVVB}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG2-7CIS-27D9QT4MMVVO}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG2-J5B1-28UD62RUEVU0}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG2-LKCU-2AJQPJA4AVHS}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG2-Q64S-2675H2E5QVUG}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG3-1EMN-28M5NPU00VTK}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG3-4A90-24BL1LF8IVVA}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG3-8AT4-258NF6K78VVJ}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG3-S3LR-26AMVD9UQVVT}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG3-S3OA-2928HMLJ2VV5}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG4-5TO3-2831TOKLCVUL}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG4-B3Q1-28C117F43000}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG4-ICFS-28SORCTSAVU2}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG4-ICFS-28SORCTSAVV2}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG5-FGLT-28R1BF9D2VUD}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG5-G5S4-21U70LNBQVVO}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG5-KO19-25DIJFDG6VUO}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVJ8}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVS5}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVTF}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG6-3908-29CNF5LCOVUP}
AlternateDataStreams: C:\Users\Hase:zylomtr{000HQ7FF-AD7A-3FG7-FCUD-28A45N46SVUE}
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:1ECED34B
AlternateDataStreams: C:\ProgramData\Temp:444C53BA
AlternateDataStreams: C:\ProgramData\Temp:4CF61E54
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2
AlternateDataStreams: C:\ProgramData\Temp:5197985B
AlternateDataStreams: C:\ProgramData\Temp:538A9F02
AlternateDataStreams: C:\ProgramData\Temp:5D7E5A8F
AlternateDataStreams: C:\ProgramData\Temp:6247E766
AlternateDataStreams: C:\ProgramData\Temp:88A44CC1
AlternateDataStreams: C:\ProgramData\Temp:8B4B9596
AlternateDataStreams: C:\ProgramData\Temp:908A1B53
AlternateDataStreams: C:\ProgramData\Temp:93DE1838
AlternateDataStreams: C:\ProgramData\Temp:A02025CE
AlternateDataStreams: C:\ProgramData\Temp:A0CB43B2
AlternateDataStreams: C:\ProgramData\Temp:AB689DEA
AlternateDataStreams: C:\ProgramData\Temp:AB82C54F
AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE
AlternateDataStreams: C:\ProgramData\Temp:CA0CE093
AlternateDataStreams: C:\ProgramData\Temp:D8D58038
AlternateDataStreams: C:\ProgramData\Temp:E027789A
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D
AlternateDataStreams: C:\ProgramData\Temp:E3C56885
AlternateDataStreams: C:\ProgramData\Temp:F84B8DB5
AlternateDataStreams: C:\ProgramData\Temp:F8F070C2
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-2090039527-2538385464-2127981158-500 - Administrator - Disabled)
Gast (S-1-5-21-2090039527-2538385464-2127981158-501 - Limited - Disabled)
Hase (S-1-5-21-2090039527-2538385464-2127981158-1000 - Administrator - Enabled) => C:\Users\Hase
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/18/2014 00:53:50 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Error: (12/17/2014 11:04:56 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Error: (12/17/2014 10:56:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Error: (12/17/2014 10:56:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Error: (12/17/2014 10:56:39 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
System errors:
=============
Error: (12/17/2014 10:47:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
prodrv06
prohlp02
prosync1
sfhlp01
Error: (12/17/2014 10:47:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "limsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (12/17/2014 10:47:09 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\limsgt.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/17/2014 10:47:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Icatch(IV) Video Camera Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (12/17/2014 10:47:08 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\Ca533av.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/17/2014 10:47:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "athsgt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (12/17/2014 10:47:08 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\athsgt.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/17/2014 10:46:47 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\prodrv06.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (12/17/2014 07:07:50 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
prodrv06
prohlp02
prosync1
sfhlp01
Error: (12/17/2014 07:07:03 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\limsgt.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Microsoft Office Sessions:
=========================
Error: (12/18/2014 00:53:50 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (12/17/2014 11:04:56 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifestC:\Users\Hase\Desktop\esetsmartinstaller_deu.exe
Error: (12/17/2014 10:56:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifestC:\Users\Hase\Desktop\esetsmartinstaller_deu.exe
Error: (12/17/2014 10:56:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifestC:\Users\Hase\Desktop\esetsmartinstaller_deu.exe
Error: (12/17/2014 10:56:39 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifestC:\Users\Hase\Desktop\esetsmartinstaller_deu.exe
CodeIntegrity Errors:
===================================
Date: 2014-12-15 23:46:41.462
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-12-15 23:46:41.317
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz
Percentage of memory in use: 43%
Total physical RAM: 4090.93 MB
Available physical RAM: 2301.46 MB
Total Pagefile: 8179.99 MB
Available Pagefile: 6065.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:286.27 GB) (Free:97.71 GB) NTFS
Drive d: (AdventurePack Vo) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 05AD05AC)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=286.3 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
