| Speedonte | 31.01.2015 15:40 |
Gefunden !!!
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-01-2015
Ran by Christian (administrator) on CHRISTIAN-PC on 30-01-2015 21:49:05
Running from C:\Users\Christian\Desktop
Loaded Profiles: Christian (Available profiles: Christian & Gast)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mindspark) C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\userinit.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
() C:\Users\Christian\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\Christian\AppData\Roaming\uTorrent\uTorrent.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
(Mindspark) C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\APPINTEGRATOR.EXE
(Mindspark) C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\AppIntegrator64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191528 2014-06-04] (Geek Software GmbH)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Allin1Convert EPM Support] => C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hmedint.exe [12872 2015-01-14] (Mindspark)
HKLM-x32\...\Run: [Allin1Convert AppIntegrator 32-bit] => C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\AppIntegrator.exe [225864 2015-01-14] (Mindspark)
HKLM-x32\...\Run: [Allin1Convert AppIntegrator 64-bit] => C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\AppIntegrator64.exe [258632 2015-01-14] (Mindspark)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Run: [Amazon Music] => C:\Users\Christian\AppData\Local\Amazon Music\Amazon Music Helper.exe [6281024 2014-10-15] ()
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Run: [uTorrent] => C:\Users\Christian\AppData\Roaming\uTorrent\uTorrent.exe [1677904 2015-01-21] (BitTorrent Inc.)
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\RunOnce: [Uninstall C:\Users\Christian\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christian\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Policies\Explorer\DisallowRun: [1] firefox.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {2192f39d-66ea-11e4-a979-10bf48441736} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {5a6f76ca-075e-11e4-8948-9cb70dc354bf} - E:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {5a6f76ce-075e-11e4-8948-9cb70dc354bf} - E:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {67af52f7-4ad4-11e3-a10f-10bf48441736} - F:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {67af5304-4ad4-11e3-a10f-10bf48441736} - G:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {74f3f967-bc20-11e3-b118-10bf48441736} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {b1804e90-0bef-11e3-9079-806e6f6e6963} - E:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {b1804ec2-0bef-11e3-9079-9cb70dc354bf} - H:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {c5626cc7-4cf9-11e3-a6e8-582c80139263} - H:\AutoRun.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {db1b0afb-8641-11e4-b32c-10bf48441736} - F:\SETUP.EXE
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {db1b0b05-8641-11e4-b32c-10bf48441736} - F:\SETUP.EXE
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {dfb0b7a4-3ed6-11e4-873a-10bf48441736} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\MountPoints2: {f57fb99d-b5c5-11e3-8dbd-9cb70dc354bf} - F:\AutoRun.exe
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [S-1-5-21-1565434329-3150599115-1159552200-1000] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1565434329-3150599115-1159552200-1000] => http=127.0.0.1:8800;https=127.0.0.1:8800
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 - (No Name) - {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hSrcAs.dll (Mindspark)
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 -> DefaultScope {A950FDD7-7E14-4B19-A823-E2EDE1293DEE} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_mdaffybrant&cd=2XzuyEtN2Y1L1Qzuzy0C0ByBtD0D0CtAyDyE0B0FtA0D0C0BtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2SyCtA0E0C0E0CtDzztGzz0BtAzytG0B0DtB0AtG0CyE0BtAtGtC0DtB0A0B0EyEyCzz0CyDyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0AyEzyyDtCtC0CtG0F0DyDzztGyE0FtAyBtGzy0D0B0EtGtDtAyDyC0DyDyCyCyCyCtC0B2Q&cr=69798146&ir=
SearchScopes: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://www.better-search.net/?i=53&st=29&src=58&q={searchTerms}&did=11439&ppd=1434,148123,20IJ8p48VCqH9tkB1gH2uT1y4iIa000.,,,,spgc,,,player.all4search.net&barid=1523567074616523792&terminator=1_sp_ie
SearchScopes: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1332&systemid=406&v=n13653-444&apn_uid=3075604798824056&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1565434329-3150599115-1159552200-1000 -> {A950FDD7-7E14-4B19-A823-E2EDE1293DEE} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Recorder Toolbar -> {120A8821-2BEE-4C29-BCDA-62C577781992} -> C:\Program Files (x86)\MedienTeam66\CHIP Free MP3 converter for YouTube\IEPlugin.dll (MedienTeam66)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Search Assistant BHO -> {a4c2fb10-84c3-44eb-9f9e-860fa1d9a797} -> C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hSrcAs.dll (Mindspark)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: Toolbar BHO -> {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} -> C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbar.dll (Mindspark)
Toolbar: HKLM-x32 - Recorder Toolbar - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Program Files (x86)\MedienTeam66\CHIP Free MP3 converter for YouTube\IEPlugin.dll (MedienTeam66)
Toolbar: HKLM-x32 - Allin1Convert - {cd1a63ba-a08c-431b-9a34-f240aadc728d} - C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbar.dll (Mindspark)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 4.2.2.1 4.2.2.2
FireFox:
========
FF ProfilePath: C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\swl0lr6h.default-1422397898166
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2014-12-24]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2014-12-24]
FF HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-24]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.better-search.net/?i=53&st=29&src=55&did=11439&ppd=1434,148123,20IJ8p48VCqH9tkB1gH2uT1y4iIa000.,,,,spgc,,,player.all4search.net&barid=1523567074616523792&terminator=1_sp_ch
CHR StartupUrls: Default -> "hxxp://www.better-search.net/?i=53&st=29&src=55&did=11439&ppd=1434,148123,20IJ8p48VCqH9tkB1gH2uT1y4iIa000.,,,,spgc,,,player.all4search.net&barid=1523567074616523792&terminator=1_sp_ch"
CHR Profile: C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-28]
CHR Extension: (Google Wallet) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-18]
CHR Extension: (Astromenda New Tab) - C:\Users\Christian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae [2014-09-30]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - No Path
CHR HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Chrome\Extension: [cfigonhgidedenkkhlilmefgodjpefna] - C:\Users\CHRIST~1\AppData\Local\Temp\CT3317892.crx [Not Found]
CHR HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - No Path
Opera:
=======
OPR Extension: (No Name) - C:\Users\Christian\AppData\Roaming\Opera Software\Opera Stable\Extensions\deghekbbihbapplmbffglehkdhkeibbm [2008-01-01]
OPR Extension: (Amazon for Opera) - C:\Users\Christian\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2014-12-22]
OPR Extension: (Adblock Plus) - C:\Users\Christian\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-01-12]
OPR Extension: (No Name) - C:\Users\Christian\AppData\Roaming\Opera Software\Opera Stable\Extensions\olnkgiapbjhdboldbhkagdodklkphaip [2014-07-04]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 Allin1Convert_8hService; C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe [90696 2015-01-14] (Mindspark)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-11-18] (Nero AG)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 lsdprn; C:\Windows\SysWOW64\lsdprn.exe [268600 2014-11-02] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-03-02] (Samsung Electronics Co., Ltd.)
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
U3 DfSdkS; No ImagePath
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-30 21:49 - 2015-01-30 21:52 - 00021358 _____ () C:\Users\Christian\Desktop\FRST.txt
2015-01-30 21:19 - 2015-01-30 21:50 - 00000000 ____D () C:\FRST
2015-01-30 21:15 - 2015-01-30 21:11 - 02130432 _____ (Farbar) C:\Users\Christian\Desktop\FRST64.exe
2015-01-30 21:10 - 2015-01-30 21:10 - 02130432 _____ (Farbar) C:\Users\Gast\Downloads\FRST64.exe
2015-01-30 16:27 - 2015-01-30 16:27 - 00064408 _____ () C:\Users\Christian\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-30 14:42 - 2015-01-30 21:48 - 00000840 _____ () C:\Windows\setupact.log
2015-01-30 14:42 - 2015-01-30 14:42 - 00297120 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-30 14:42 - 2015-01-30 14:42 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-29 22:39 - 2015-01-29 22:40 - 00044414 _____ () C:\Users\Gast\Downloads\My_Contacts_for_VCard.vcf
2015-01-29 18:58 - 2015-01-29 18:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\HTC
2015-01-29 18:55 - 2015-01-29 18:55 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\WinRAR
2015-01-29 18:52 - 2015-01-29 18:52 - 00000000 ____D () C:\Users\Christian\Desktop\Unterlagen Christian
2015-01-29 18:13 - 2015-01-29 18:13 - 00074110 _____ () C:\Users\Gast\Downloads\My_Contacts_for_Outlook.csv
2015-01-29 18:13 - 2015-01-29 18:13 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\OpenOffice
2015-01-29 18:04 - 2015-01-29 18:04 - 00064408 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-29 18:04 - 2015-01-29 18:04 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Mozilla
2015-01-29 18:04 - 2015-01-29 18:04 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Avira
2015-01-29 18:00 - 2015-01-29 18:00 - 00001097 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-29 17:59 - 2015-01-29 17:59 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Allin1Convert_8h
2015-01-29 17:59 - 2015-01-29 17:59 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-29 17:58 - 2015-01-29 17:58 - 00001421 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-29 17:58 - 2015-01-29 17:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\ProductData
2015-01-29 17:58 - 2015-01-29 17:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2015-01-29 17:58 - 2015-01-29 17:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2015-01-29 17:57 - 2015-01-30 21:29 - 00000000 ____D () C:\Users\Gast\AppData\Local\HTC MediaHub
2015-01-29 17:57 - 2015-01-29 18:57 - 00000000 ____D () C:\Users\Gast\Documents\HTC
2015-01-29 17:57 - 2015-01-29 17:57 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2015-01-29 17:57 - 2015-01-29 17:57 - 00000000 ____D () C:\Users\Gast\AppData\Local\Apple Computer
2015-01-29 17:57 - 2015-01-29 17:57 - 00000000 ____D () C:\Users\Gast\.android
2015-01-29 17:56 - 2015-01-29 17:57 - 00000000 ____D () C:\Users\Gast
2015-01-29 17:56 - 2015-01-29 17:56 - 00000020 ___SH () C:\Users\Gast\ntuser.ini
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2015-01-29 17:56 - 2015-01-29 17:56 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2015-01-29 17:56 - 2013-10-14 13:08 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\TuneUp Software
2015-01-29 17:56 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-29 17:56 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-29 16:51 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-29 15:02 - 2015-01-30 21:46 - 00429105 _____ () C:\Windows\WindowsUpdate.log
2015-01-29 02:55 - 2015-01-29 02:55 - 00000696 __RSH () C:\ProgramData\ntuser.pol
2015-01-28 02:40 - 2015-01-28 02:40 - 00013040 _____ () C:\Users\Christian\Downloads\schnieders.xlsx
2015-01-27 23:37 - 2015-01-27 23:37 - 00065472 _____ () C:\Users\Christian\Downloads\FLVPlayer-Chrome.exe
2015-01-27 23:30 - 2015-01-29 15:44 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-01-27 23:29 - 2015-01-27 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-01-27 23:29 - 2015-01-27 23:29 - 00002130 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-01-27 23:29 - 2015-01-27 23:29 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2015-01-26 23:16 - 2015-01-26 23:18 - 00000000 ____D () C:\Users\Christian\Downloads\Landkreis Hannover Führerschein
2015-01-26 21:19 - 2015-01-29 00:41 - 00000000 ____D () C:\Users\Christian\Downloads\Fax Jürgen Blume
2015-01-26 21:05 - 2015-01-27 03:14 - 00000000 ____D () C:\Users\Christian\Downloads\Jobcenter
2015-01-25 21:00 - 2015-01-26 23:24 - 00000000 ____D () C:\Users\Christian\Downloads\Bilder 2
2015-01-24 01:44 - 2015-01-24 01:44 - 00683480 _____ (Opera Software) C:\Users\Christian\Downloads\Opera_NI_stable.exe
2015-01-22 16:58 - 2015-01-26 18:46 - 00000000 ____D () C:\Users\Christian\Downloads\Martin Casper NL Gruppe
2015-01-21 15:04 - 2015-01-21 15:05 - 00028152 _____ () C:\Users\Christian\Documents\Mini GmbH.odt
2015-01-20 20:20 - 2015-01-20 15:54 - 25491796 _____ () C:\Users\Christian\Documents\MVI_0214.AVI
2015-01-20 19:57 - 2015-01-20 15:55 - 00519230 _____ () C:\Users\Christian\Documents\MVI_0215.AVI
2015-01-20 14:09 - 2015-01-20 14:09 - 00018678 _____ () C:\Users\Christian\Documents\Post 2.odt
2015-01-19 21:15 - 2015-01-19 21:15 - 00070127 _____ () C:\Users\Christian\Documents\Gericht Osnabrück Zurückzahlung.odt
2015-01-17 20:53 - 2015-01-17 20:53 - 00009845 _____ () C:\Users\Christian\Documents\A Marc aufschreiben wie es war wo ich wohnte.odt
2015-01-17 14:35 - 2015-01-27 02:33 - 00000000 ____D () C:\Users\Christian\Downloads\Stadtsparkasse Wunstorf
2015-01-17 14:31 - 2015-01-27 22:33 - 00000000 ____D () C:\Users\Christian\Downloads\Zahlungen an den Zoll Arbeitsamt
2015-01-16 14:10 - 2015-01-28 02:50 - 00000000 ____D () C:\Users\Christian\Downloads\Privat
2015-01-16 14:10 - 2015-01-26 22:41 - 00000000 ____D () C:\Users\Christian\Downloads\Bredtheuer
2015-01-15 21:47 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-15 21:47 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-15 21:47 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-15 21:47 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-15 21:47 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-15 21:47 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-15 21:47 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-15 21:47 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-15 21:47 - 2014-12-11 18:47 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-15 21:47 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-15 21:47 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-15 21:47 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-15 15:52 - 2015-01-15 15:52 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Allin1Convert_8h
2015-01-15 01:05 - 2015-01-15 01:05 - 00027508 _____ () C:\Users\Christian\Documents\Bredthauer.odt
2015-01-15 01:03 - 2015-01-15 01:03 - 00027505 _____ () C:\Users\Christian\Documents\AAA Bredthauer.odt
2015-01-14 14:43 - 2015-01-14 14:43 - 00000000 ____D () C:\Program Files (x86)\Allin1Convert_8h
2015-01-14 14:32 - 2015-01-23 00:42 - 00000000 ____D () C:\Users\Christian\Downloads\INFO`s
2015-01-14 14:31 - 2015-01-27 03:13 - 00000000 ____D () C:\Users\Christian\Downloads\Handy Einstellungen
2015-01-12 23:59 - 2015-01-13 00:31 - 00018700 _____ () C:\Users\Christian\Documents\Marc 2.odt
2015-01-11 19:42 - 2015-01-11 19:42 - 00000000 ____D () C:\Users\Christian\.android
2015-01-11 16:11 - 2015-01-27 03:13 - 00000000 ____D () C:\Users\Christian\Downloads\Bilder
2015-01-11 14:59 - 2015-01-11 14:59 - 00000130 ____H () C:\Users\Christian\Documents\.~lock.Cordy.odt#
2015-01-11 02:25 - 2015-01-11 19:37 - 00011756 _____ () C:\Users\Christian\Documents\Unser Unternehmen.odt
2015-01-10 02:03 - 2015-01-29 02:32 - 00001559 _____ () C:\ProgramData\tempimage.bmp
2015-01-06 21:58 - 2015-01-22 14:29 - 00000000 ____D () C:\Users\Christian\Downloads\Rückfahrt
2015-01-06 21:53 - 2015-01-26 16:33 - 00000000 ____D () C:\Users\Christian\Downloads\Witzige fotos usw
2015-01-02 03:16 - 2015-01-02 03:16 - 00141769 _____ () C:\Users\Christian\Documents\Usnet.nl kündigung.odt
2015-01-02 01:26 - 2015-01-02 01:26 - 00003524 _____ () C:\Windows\System32\Tasks\BBQLeads
2015-01-01 20:08 - 2015-01-29 21:32 - 00000000 ____D () C:\Users\Christian\Downloads\Nicole
2015-01-01 20:07 - 2015-01-28 23:58 - 00000000 ____D () C:\Users\Christian\Downloads\Bank
2014-12-31 18:42 - 2014-12-31 18:42 - 00011209 _____ () C:\Users\Christian\Documents\Postbank überweisung.odt
2014-12-31 01:36 - 2014-12-31 01:36 - 00019796 _____ () C:\Users\Christian\Documents\Post 1.odt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-30 21:50 - 2013-08-24 20:33 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Skype
2015-01-30 21:49 - 2014-07-22 19:32 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-30 21:49 - 2014-07-22 19:32 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-30 21:48 - 2014-06-27 12:29 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\uTorrent
2015-01-30 21:48 - 2014-04-27 17:50 - 00000000 ____D () C:\Users\Christian\AppData\Local\HTC MediaHub
2015-01-30 21:48 - 2013-12-29 09:35 - 00000314 _____ () C:\Windows\Tasks\Rqplocbatf.job
2015-01-30 21:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-30 21:38 - 2009-07-14 05:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-30 21:38 - 2009-07-14 05:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-30 21:23 - 2011-04-12 08:43 - 00699696 _____ () C:\Windows\system32\perfh007.dat
2015-01-30 21:23 - 2011-04-12 08:43 - 00149804 _____ () C:\Windows\system32\perfc007.dat
2015-01-30 21:23 - 2009-07-14 06:13 - 01620740 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 21:22 - 2013-11-23 13:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-30 19:14 - 2014-12-24 19:14 - 00000322 _____ () C:\Windows\Tasks\MT66 Software Update.job
2015-01-30 16:37 - 2014-05-30 09:12 - 03819520 ___SH () C:\Users\Christian\Downloads\Thumbs.db
2015-01-30 02:36 - 2014-06-08 18:52 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{BF25D8F4-F0B7-47EC-A5B8-23077EF6C62C}
2015-01-30 01:03 - 2013-08-24 20:35 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\vlc
2015-01-29 20:42 - 2013-11-07 12:40 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Usenet.nl
2015-01-29 18:00 - 2014-07-13 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-29 18:00 - 2014-07-06 06:57 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-29 18:00 - 2013-08-21 17:33 - 00000000 ____D () C:\ProgramData\Avira
2015-01-29 17:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-29 17:03 - 2013-08-21 19:03 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-29 16:52 - 2013-08-21 19:03 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-29 15:51 - 2013-08-18 11:05 - 00000000 ___RD () C:\Users\Christian
2015-01-29 15:44 - 2014-12-21 20:41 - 00000000 ____D () C:\Users\Christian\Downloads\Musik
2015-01-29 15:44 - 2014-06-24 13:23 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\ProductData
2015-01-29 15:44 - 2013-09-09 16:34 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\IrfanView
2015-01-29 15:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-29 15:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-01-29 06:28 - 2014-08-23 15:37 - 00003584 _____ () C:\Users\Christian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-29 05:52 - 2014-12-19 15:17 - 00000000 ___RD () C:\Users\Christian\HTC ordner
2015-01-29 02:11 - 2014-06-24 13:22 - 00000000 ____D () C:\ProgramData\ProductData
2015-01-29 02:09 - 2014-11-12 20:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-28 13:40 - 2014-11-12 20:22 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-28 13:40 - 2014-11-12 20:22 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-28 13:40 - 2014-09-19 08:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-27 23:30 - 2014-08-27 07:52 - 00000000 ____D () C:\Users\Christian\AppData\Local\Adobe
2015-01-27 22:34 - 2014-12-19 14:59 - 00000000 ____D () C:\Users\Christian\Downloads\Anwälte
2015-01-27 04:02 - 2014-12-26 00:33 - 00000000 ____D () C:\Users\Christian\Downloads\Vertrage
2015-01-27 01:54 - 2014-07-22 19:43 - 00002135 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-01-27 00:49 - 2014-12-17 23:53 - 00000000 ____D () C:\Users\Christian\Downloads\Vodafone
2015-01-26 22:39 - 2014-12-19 17:17 - 00000000 ____D () C:\Users\Christian\Downloads\Gebührenfrei
2015-01-25 03:23 - 2013-11-23 13:56 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 03:22 - 2013-11-23 13:56 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-25 03:22 - 2013-11-23 13:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-24 01:33 - 2014-06-23 16:31 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-24 01:19 - 2013-12-15 05:35 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-24 01:19 - 2013-11-12 15:45 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\Apple Computer
2015-01-22 15:07 - 2014-12-30 21:59 - 00046592 ___SH () C:\Users\Christian\Desktop\Thumbs.db
2015-01-22 14:28 - 2014-12-21 20:43 - 00000000 ____D () C:\Users\Christian\Downloads\Video
2015-01-22 02:47 - 2014-12-19 12:53 - 00000000 ____D () C:\Users\Christian\Documents\Vertrage
2015-01-21 18:59 - 2014-06-27 12:30 - 00000859 _____ () C:\Users\Christian\Desktop\µTorrent.lnk
2015-01-21 18:59 - 2014-06-27 12:30 - 00000839 _____ () C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-01-20 00:42 - 2014-10-25 21:31 - 00000000 ____D () C:\Users\Christian\Downloads\Kreuzfahrt NCL JADE 11-24.01.2013 - Marc´s Fotos
2015-01-17 22:28 - 2013-11-06 13:16 - 00000000 ____D () C:\Users\Christian\AppData\Local\Windows Live
2015-01-16 17:14 - 2013-12-15 05:38 - 00000000 ____D () C:\Users\Christian\AppData\Local\Apple
2015-01-13 21:17 - 2014-08-17 12:15 - 00137216 ___SH () C:\Users\Christian\Thumbs.db
2015-01-10 01:36 - 2014-12-26 13:52 - 00000000 ____D () C:\Program Files (x86)\Driver Support
2015-01-07 05:59 - 2014-07-03 12:48 - 00000000 ____D () C:\Users\Christian\AppData\Local\Microsoft Games
2015-01-07 01:16 - 2014-04-04 16:50 - 00000000 ____D () C:\Users\Christian\AppData\Roaming\DVDVideoSoft
2015-01-02 01:44 - 2014-12-27 17:06 - 00000000 ____D () C:\Users\Christian\Downloads\alt.binaries.b4e.erotica
2015-01-02 01:23 - 2014-08-19 15:49 - 00004030 _____ () C:\Windows\System32\Tasks\LaunchSignup
==================== Files in the root of some directories =======
2013-09-22 15:38 - 2014-04-02 18:56 - 0000252 _____ () C:\Users\Christian\AppData\Roaming\WB.CFG
2013-09-22 15:38 - 2013-09-26 08:43 - 0000005 _____ () C:\Users\Christian\AppData\Roaming\WBPU-TTL.DAT
2014-08-23 15:37 - 2015-01-29 06:28 - 0003584 _____ () C:\Users\Christian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-10 02:03 - 2015-01-29 02:32 - 0001559 _____ () C:\ProgramData\tempimage.bmp
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1400.dll
Some content of TEMP:
====================
C:\Users\Christian\AppData\Local\Temp\avgnt.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-24 22:58
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
:crazy:
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-01-2015
Ran by Christian at 2015-01-30 21:54:10
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Allin1Convert Internet Explorer Toolbar (HKLM-x32\...\Allin1Convert_8hbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION
Amazon Music (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Amazon Amazon Music) (Version: 3.6.0.671 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{4241d738-563d-4685-803c-e58b90a2e5e8}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CHIP Free MP3 converter for YouTube 3.0 Professional-E (HKLM-x32\...\{2ED4869A-6D7B-4a8f-8261-B842DA4852FA}_is1) (Version: - )
clicup (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\clicup) (Version: 1.0 - Ad Businness Crown Solutions)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Download Protect (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\{132401a7-2006-4342-b43c-ccf5f02c2b01}) (Version: - Download Protect)
DriverTurbo (HKLM-x32\...\DriverTurbo) (Version: 3.2.0 - DeskToolsSoft)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Hide IP (HKLM-x32\...\FreeHideIP) (Version: 3.9.3.6 - )
Free YouTube to MP3 Converter version 3.12.52.1215 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.52.1215 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.14.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.37.2 - HTC)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Word Viewer Packages (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Microsoft Office Word Viewer Packages) (Version: - ) <==== ATTENTION
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.14.00.03 - Huawei Technologies Co.,Ltd)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
MP3jam 1.1.1.9 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.9 - MP3jam)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MT66 Software Update (HKLM-x32\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 9.2 - Qualcomm Atheros)
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
Search Protection (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Search Protection) (Version: 10.8.0.1 - Spigot, Inc.) <==== ATTENTION
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
29-01-2015 02:32:44 Removed Google Earth.
29-01-2015 15:03:27 Wiederherstellungsvorgang
29-01-2015 16:51:10 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {035311E3-9644-4D71-AABF-F3B8EE8890AB} - System32\Tasks\{0BDA5E4D-8D53-4760-8CC9-B5C402609C0A} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {0C98B7FF-8F0F-43C8-84B0-36F598331AD8} - System32\Tasks\Opera scheduled Autoupdate 1415364889 => C:\Program Files (x86)\Opera\launcher.exe
Task: {0E2FC9B0-04F5-45A9-B877-3FC09AA31B78} - System32\Tasks\Opera scheduled Autoupdate 1403537501 => C:\Program Files (x86)\Opera\launcher.exe
Task: {11866C59-C7E6-4C9F-ACB0-582999109295} - \f1f8bcf3-4b77-4124-b662-827cb295954e-7 No Task File <==== ATTENTION
Task: {12D49D06-1D36-4F71-A3F4-731AEB1BE407} - \f1f8bcf3-4b77-4124-b662-827cb295954e-3 No Task File <==== ATTENTION
Task: {1BBBB141-367E-4F13-B0B6-B610DF06CF50} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {20C76556-9BAC-42A5-8862-E4AA0212F8B6} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1565434329-3150599115-1159552200-1000
Task: {218F72C3-0F13-44B5-B5BD-F3F169EA58F2} - \5bad9989-600a-482d-aacc-1668aefccc0e-3 No Task File <==== ATTENTION
Task: {340BFE69-2242-4E25-97A6-2E404A4EB3F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: {34DC096B-21FE-40AF-B47F-1AF4CE80ACEB} - System32\Tasks\{8F4BF084-68FB-4E4E-A668-A7BD659A8DA1} => pcalua.exe -a "C:\Users\Christian\Downloads\wlsetup-all_16.4.3508.0205 (1).exe" -d C:\Users\Christian\Downloads
Task: {36BD0A3E-35BC-467E-ADCA-47B5401FC8CB} - \FoxTab No Task File <==== ATTENTION
Task: {39ED62B8-710C-4760-9176-99A114862556} - System32\Tasks\{DDB245DA-4BB5-46E7-95C8-CC936F1EA351} => pcalua.exe -a C:\Users\Christian\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
Task: {3B20840A-D0C5-49EB-9AA1-1177F7AA0A4E} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {3C64507E-141F-403B-BAC1-6B18F5044549} - \5bad9989-600a-482d-aacc-1668aefccc0e-9 No Task File <==== ATTENTION
Task: {423A4257-4606-4578-9C8E-84AB2C5CBBE1} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {42ABAFE2-B74E-4E5C-8886-1E1080D67BBB} - System32\Tasks\{211C15F3-2FAA-484F-9CC3-AE92D450DF6E} => pcalua.exe -a C:\Windows\SysWOW64\DivXControlPanelApplet.cpl -c DivX Control Panel
Task: {465E447F-BA6F-4848-A3AD-5577548246EE} - \f1f8bcf3-4b77-4124-b662-827cb295954e-5 No Task File <==== ATTENTION
Task: {5606C5D7-A0DF-444B-B506-8E55A964F9CD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: {6289D9E4-3CB5-467A-B378-210D801F8457} - \SpeedUpMyPC Startup No Task File <==== ATTENTION
Task: {6A0FA0F0-49FD-4B94-87DB-72839746D532} - \67015f56-b09c-4fd6-9aae-73a829c2d391-4 No Task File <==== ATTENTION
Task: {6EE73A2C-9A67-4AEE-BDBA-28DA8C353747} - \5bad9989-600a-482d-aacc-1668aefccc0e-5 No Task File <==== ATTENTION
Task: {7C4E270C-AA36-4AF0-970C-F5CECF96B661} - \5bad9989-600a-482d-aacc-1668aefccc0e-7 No Task File <==== ATTENTION
Task: {83B6FF03-2BF4-4270-AA9A-FA3CDAC2EBCB} - System32\Tasks\Driver Booster SkipUAC (Christian) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {8B7826F1-BE49-4EF2-ACFA-45F99644CAA3} - \f1f8bcf3-4b77-4124-b662-827cb295954e-9 No Task File <==== ATTENTION
Task: {92DA8C06-6C1C-4FDE-83B8-663B065275A1} - \5bad9989-600a-482d-aacc-1668aefccc0e-1 No Task File <==== ATTENTION
Task: {93991580-14DC-40DF-BF24-F3350C7414EE} - \SpeedUpMyPC Maintenance No Task File <==== ATTENTION
Task: {952B6096-8E27-4127-9083-17E060A5F5FC} - \5bad9989-600a-482d-aacc-1668aefccc0e-10 No Task File <==== ATTENTION
Task: {96EC27C9-2AB3-4807-9956-67FB41B4F2EF} - \f1f8bcf3-4b77-4124-b662-827cb295954e-6 No Task File <==== ATTENTION
Task: {9AA79DB8-A3C2-463E-B9DA-2A533C342044} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {9EEFCCE3-9E9E-4AFF-B2F6-B4369294946D} - \5bad9989-600a-482d-aacc-1668aefccc0e-6 No Task File <==== ATTENTION
Task: {A29AD18A-3F7D-493D-9000-35EFCA24F130} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated)
Task: {A2E4DEB9-ECD9-4F4D-B449-5B1393246D9E} - System32\Tasks\{2C343825-ACC1-4B33-9918-97C409F16F5B} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/de/abandoninstall?page=tsMain
Task: {A3143A85-7BAE-409D-B96C-5FF1C9782B43} - System32\Tasks\{31C72231-42DC-447E-A1DD-A30E71DBF588} => pcalua.exe -a C:\Users\Christian\Documents\epson374978eu.exe -d "C:\Program Files (x86)\Skype\Phone"
Task: {ABA56552-62D6-4559-9094-DD675F7861B2} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {B6DA3CC7-68D9-4C07-8E34-FCE5B32168BB} - \5bad9989-600a-482d-aacc-1668aefccc0e-4 No Task File <==== ATTENTION
Task: {C352BBE2-30F0-4030-8CC3-0679604DC9A1} - System32\Tasks\ASC7_SkipUac_Christian => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-05-29] (IObit)
Task: {CD02F1A5-305F-4FA6-92B1-CEDF419B5967} - System32\Tasks\{AD4556BB-2C2D-4113-8560-1A24A56A389F} => pcalua.exe -a "C:\Users\Christian\Downloads\wlsetup-all_16.4.3508.0205 (1).exe" -d C:\Users\Christian\Downloads
Task: {CD7A5D63-E598-4B62-A400-8F1CB53BFBB5} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {D174770F-536B-4D46-823E-1A3E17AA7351} - \5bad9989-600a-482d-aacc-1668aefccc0e-2 No Task File <==== ATTENTION
Task: {D4845229-7EE8-4821-8A17-AAD44AFC272C} - \5bad9989-600a-482d-aacc-1668aefccc0e-11 No Task File <==== ATTENTION
Task: {D4984863-2B0B-482F-90B3-711AE05AC4E1} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {DD47D16B-2304-4D8A-922B-00496A4D942A} - \f1f8bcf3-4b77-4124-b662-827cb295954e-10 No Task File <==== ATTENTION
Task: {DD969D13-43AE-48DB-AACE-4F53435A3675} - System32\Tasks\MT66 Software Update => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {DF05DDF4-AB5D-494B-AE0A-63120EA69717} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {E495387E-774E-4B1C-A5EE-CEE9EC990AFF} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {E5C6122D-5463-4E27-BD8D-43853F2CDD73} - System32\Tasks\{C45B692F-D2E9-4EAA-92A9-9A387D4F3BFC} => pcalua.exe -a G:\Verschiedenes\Azureus_2.5.0.4_Win32.setup.exe -d G:\Verschiedenes
Task: {E5EF6F7D-4E23-439F-90F7-01DDEB6AAE89} - System32\Tasks\BBQLeads => C:\Program Files (x86)\bbqleads\ScheduledTask.exe
Task: {EA20475C-EC1B-4D8F-A605-A160ABD6AD8A} - \f1f8bcf3-4b77-4124-b662-827cb295954e-4 No Task File <==== ATTENTION
Task: {ED31ADA1-B9CB-49E3-81CC-D4EF83952755} - \f1f8bcf3-4b77-4124-b662-827cb295954e-1 No Task File <==== ATTENTION
Task: {EF548486-5871-411C-9C5B-2C87214D2A1B} - System32\Tasks\{42C46500-1BF9-49AA-A3DD-A2543C1E51AE} => pcalua.exe -a C:\Users\Christian\Downloads\proggi_softer\ms403upd\ms403upd.exe -d C:\Users\Christian\Downloads\proggi_softer\ms403upd
Task: {F0428517-4636-4116-A29C-9F776AC1B387} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2014-05-06] (IObit)
Task: {F153DD49-F784-491C-A719-5E9B6655E811} - System32\Tasks\Rqplocbatf => Rundll32.exe "C:\Windows\SysWOW64\cscdllm.dll",bvsagia
Task: {F21729F6-8866-44D9-B452-34CC8E67AEEF} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {F3BF46CE-2F25-4D29-AE88-012F1F410579} - \DigitalSite No Task File <==== ATTENTION
Task: {FA862F6D-E447-458C-BF6C-739E58053D92} - \f1f8bcf3-4b77-4124-b662-827cb295954e-11 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\Rqplocbatf.job => C:\Windows\SysWOW64\cscdllm.dll
==================== Loaded Modules (whitelisted) =============
2014-11-11 02:12 - 2006-12-04 01:26 - 00022016 _____ () C:\Windows\System32\SUGS2l6.dll
2014-11-12 00:22 - 2014-11-02 10:35 - 00268600 _____ () C:\Windows\SysWOW64\lsdprn.exe
2014-07-09 13:34 - 2012-03-12 10:05 - 00232288 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2014-12-18 15:10 - 2014-12-18 15:10 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2014-06-13 12:43 - 2014-10-15 06:35 - 06281024 _____ () C:\Users\Christian\AppData\Local\Amazon Music\Amazon Music Helper.exe
2014-12-18 15:06 - 2014-12-18 15:06 - 00083312 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 14:05 - 2014-03-21 14:05 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-12-18 15:08 - 2014-12-18 15:08 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-03-21 14:08 - 2014-03-21 14:08 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-03-21 14:09 - 2014-03-21 14:09 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-1565434329-3150599115-1159552200-500 - Administrator - Disabled)
Christian (S-1-5-21-1565434329-3150599115-1159552200-1000 - Administrator - Enabled) => C:\Users\Christian
Gast (S-1-5-21-1565434329-3150599115-1159552200-501 - Limited - Enabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-1565434329-3150599115-1159552200-1002 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/30/2015 09:49:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:58:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:44:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:30:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:23:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 07:27:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (01/30/2015 09:49:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:49:57 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (01/30/2015 09:49:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (01/30/2015 09:48:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Error: (01/30/2015 09:48:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:48:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Advanced SystemCare Service 7 erreicht.
Error: (01/30/2015 09:29:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Error: (01/30/2015 09:29:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:29:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Advanced SystemCare Service 7 erreicht.
Error: (01/30/2015 09:17:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Microsoft Office Sessions:
=========================
Error: (01/30/2015 09:49:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:58:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:44:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:30:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:23:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 07:27:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: AMD E-450 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 63%
Total physical RAM: 1643.72 MB
Available physical RAM: 592.93 MB
Total Pagefile: 3287.44 MB
Available Pagefile: 1966.35 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:183.36 GB) NTFS
Drive e: (SPASS) (Removable) (Total:29.8 GB) (Free:26.89 GB) FAT32
Drive f: (32GBTOSHIBA) (Removable) (Total:29.07 GB) (Free:9.42 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: A5135A6B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 29.8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 29.1 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=29.1 GB) - (Type=0C)
==================== End Of Log ============================
--- --- ---
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-01-2015
Ran by Christian at 2015-01-30 21:54:10
Running from C:\Users\Christian\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Allin1Convert Internet Explorer Toolbar (HKLM-x32\...\Allin1Convert_8hbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION
Amazon Music (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Amazon Amazon Music) (Version: 3.6.0.671 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{4241d738-563d-4685-803c-e58b90a2e5e8}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CHIP Free MP3 converter for YouTube 3.0 Professional-E (HKLM-x32\...\{2ED4869A-6D7B-4a8f-8261-B842DA4852FA}_is1) (Version: - )
clicup (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\clicup) (Version: 1.0 - Ad Businness Crown Solutions)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Download Protect (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\{132401a7-2006-4342-b43c-ccf5f02c2b01}) (Version: - Download Protect)
DriverTurbo (HKLM-x32\...\DriverTurbo) (Version: 3.2.0 - DeskToolsSoft)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Hide IP (HKLM-x32\...\FreeHideIP) (Version: 3.9.3.6 - )
Free YouTube to MP3 Converter version 3.12.52.1215 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.52.1215 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.14.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.37.2 - HTC)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Word Viewer Packages (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Microsoft Office Word Viewer Packages) (Version: - ) <==== ATTENTION
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.14.00.03 - Huawei Technologies Co.,Ltd)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
MP3jam 1.1.1.9 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.9 - MP3jam)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MT66 Software Update (HKLM-x32\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF24 Creator 6.5.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 9.2 - Qualcomm Atheros)
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
Search Protection (HKU\S-1-5-21-1565434329-3150599115-1159552200-1000\...\Search Protection) (Version: 10.8.0.1 - Spigot, Inc.) <==== ATTENTION
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
29-01-2015 02:32:44 Removed Google Earth.
29-01-2015 15:03:27 Wiederherstellungsvorgang
29-01-2015 16:51:10 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {035311E3-9644-4D71-AABF-F3B8EE8890AB} - System32\Tasks\{0BDA5E4D-8D53-4760-8CC9-B5C402609C0A} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {0C98B7FF-8F0F-43C8-84B0-36F598331AD8} - System32\Tasks\Opera scheduled Autoupdate 1415364889 => C:\Program Files (x86)\Opera\launcher.exe
Task: {0E2FC9B0-04F5-45A9-B877-3FC09AA31B78} - System32\Tasks\Opera scheduled Autoupdate 1403537501 => C:\Program Files (x86)\Opera\launcher.exe
Task: {11866C59-C7E6-4C9F-ACB0-582999109295} - \f1f8bcf3-4b77-4124-b662-827cb295954e-7 No Task File <==== ATTENTION
Task: {12D49D06-1D36-4F71-A3F4-731AEB1BE407} - \f1f8bcf3-4b77-4124-b662-827cb295954e-3 No Task File <==== ATTENTION
Task: {1BBBB141-367E-4F13-B0B6-B610DF06CF50} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {20C76556-9BAC-42A5-8862-E4AA0212F8B6} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1565434329-3150599115-1159552200-1000
Task: {218F72C3-0F13-44B5-B5BD-F3F169EA58F2} - \5bad9989-600a-482d-aacc-1668aefccc0e-3 No Task File <==== ATTENTION
Task: {340BFE69-2242-4E25-97A6-2E404A4EB3F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: {34DC096B-21FE-40AF-B47F-1AF4CE80ACEB} - System32\Tasks\{8F4BF084-68FB-4E4E-A668-A7BD659A8DA1} => pcalua.exe -a "C:\Users\Christian\Downloads\wlsetup-all_16.4.3508.0205 (1).exe" -d C:\Users\Christian\Downloads
Task: {36BD0A3E-35BC-467E-ADCA-47B5401FC8CB} - \FoxTab No Task File <==== ATTENTION
Task: {39ED62B8-710C-4760-9176-99A114862556} - System32\Tasks\{DDB245DA-4BB5-46E7-95C8-CC936F1EA351} => pcalua.exe -a C:\Users\Christian\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
Task: {3B20840A-D0C5-49EB-9AA1-1177F7AA0A4E} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {3C64507E-141F-403B-BAC1-6B18F5044549} - \5bad9989-600a-482d-aacc-1668aefccc0e-9 No Task File <==== ATTENTION
Task: {423A4257-4606-4578-9C8E-84AB2C5CBBE1} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {42ABAFE2-B74E-4E5C-8886-1E1080D67BBB} - System32\Tasks\{211C15F3-2FAA-484F-9CC3-AE92D450DF6E} => pcalua.exe -a C:\Windows\SysWOW64\DivXControlPanelApplet.cpl -c DivX Control Panel
Task: {465E447F-BA6F-4848-A3AD-5577548246EE} - \f1f8bcf3-4b77-4124-b662-827cb295954e-5 No Task File <==== ATTENTION
Task: {5606C5D7-A0DF-444B-B506-8E55A964F9CD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-22] (Google Inc.)
Task: {6289D9E4-3CB5-467A-B378-210D801F8457} - \SpeedUpMyPC Startup No Task File <==== ATTENTION
Task: {6A0FA0F0-49FD-4B94-87DB-72839746D532} - \67015f56-b09c-4fd6-9aae-73a829c2d391-4 No Task File <==== ATTENTION
Task: {6EE73A2C-9A67-4AEE-BDBA-28DA8C353747} - \5bad9989-600a-482d-aacc-1668aefccc0e-5 No Task File <==== ATTENTION
Task: {7C4E270C-AA36-4AF0-970C-F5CECF96B661} - \5bad9989-600a-482d-aacc-1668aefccc0e-7 No Task File <==== ATTENTION
Task: {83B6FF03-2BF4-4270-AA9A-FA3CDAC2EBCB} - System32\Tasks\Driver Booster SkipUAC (Christian) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {8B7826F1-BE49-4EF2-ACFA-45F99644CAA3} - \f1f8bcf3-4b77-4124-b662-827cb295954e-9 No Task File <==== ATTENTION
Task: {92DA8C06-6C1C-4FDE-83B8-663B065275A1} - \5bad9989-600a-482d-aacc-1668aefccc0e-1 No Task File <==== ATTENTION
Task: {93991580-14DC-40DF-BF24-F3350C7414EE} - \SpeedUpMyPC Maintenance No Task File <==== ATTENTION
Task: {952B6096-8E27-4127-9083-17E060A5F5FC} - \5bad9989-600a-482d-aacc-1668aefccc0e-10 No Task File <==== ATTENTION
Task: {96EC27C9-2AB3-4807-9956-67FB41B4F2EF} - \f1f8bcf3-4b77-4124-b662-827cb295954e-6 No Task File <==== ATTENTION
Task: {9AA79DB8-A3C2-463E-B9DA-2A533C342044} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {9EEFCCE3-9E9E-4AFF-B2F6-B4369294946D} - \5bad9989-600a-482d-aacc-1668aefccc0e-6 No Task File <==== ATTENTION
Task: {A29AD18A-3F7D-493D-9000-35EFCA24F130} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated)
Task: {A2E4DEB9-ECD9-4F4D-B449-5B1393246D9E} - System32\Tasks\{2C343825-ACC1-4B33-9918-97C409F16F5B} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/de/abandoninstall?page=tsMain
Task: {A3143A85-7BAE-409D-B96C-5FF1C9782B43} - System32\Tasks\{31C72231-42DC-447E-A1DD-A30E71DBF588} => pcalua.exe -a C:\Users\Christian\Documents\epson374978eu.exe -d "C:\Program Files (x86)\Skype\Phone"
Task: {ABA56552-62D6-4559-9094-DD675F7861B2} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-08-29] ()
Task: {B6DA3CC7-68D9-4C07-8E34-FCE5B32168BB} - \5bad9989-600a-482d-aacc-1668aefccc0e-4 No Task File <==== ATTENTION
Task: {C352BBE2-30F0-4030-8CC3-0679604DC9A1} - System32\Tasks\ASC7_SkipUac_Christian => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-05-29] (IObit)
Task: {CD02F1A5-305F-4FA6-92B1-CEDF419B5967} - System32\Tasks\{AD4556BB-2C2D-4113-8560-1A24A56A389F} => pcalua.exe -a "C:\Users\Christian\Downloads\wlsetup-all_16.4.3508.0205 (1).exe" -d C:\Users\Christian\Downloads
Task: {CD7A5D63-E598-4B62-A400-8F1CB53BFBB5} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {D174770F-536B-4D46-823E-1A3E17AA7351} - \5bad9989-600a-482d-aacc-1668aefccc0e-2 No Task File <==== ATTENTION
Task: {D4845229-7EE8-4821-8A17-AAD44AFC272C} - \5bad9989-600a-482d-aacc-1668aefccc0e-11 No Task File <==== ATTENTION
Task: {D4984863-2B0B-482F-90B3-711AE05AC4E1} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {DD47D16B-2304-4D8A-922B-00496A4D942A} - \f1f8bcf3-4b77-4124-b662-827cb295954e-10 No Task File <==== ATTENTION
Task: {DD969D13-43AE-48DB-AACE-4F53435A3675} - System32\Tasks\MT66 Software Update => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {DF05DDF4-AB5D-494B-AE0A-63120EA69717} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {E495387E-774E-4B1C-A5EE-CEE9EC990AFF} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {E5C6122D-5463-4E27-BD8D-43853F2CDD73} - System32\Tasks\{C45B692F-D2E9-4EAA-92A9-9A387D4F3BFC} => pcalua.exe -a G:\Verschiedenes\Azureus_2.5.0.4_Win32.setup.exe -d G:\Verschiedenes
Task: {E5EF6F7D-4E23-439F-90F7-01DDEB6AAE89} - System32\Tasks\BBQLeads => C:\Program Files (x86)\bbqleads\ScheduledTask.exe
Task: {EA20475C-EC1B-4D8F-A605-A160ABD6AD8A} - \f1f8bcf3-4b77-4124-b662-827cb295954e-4 No Task File <==== ATTENTION
Task: {ED31ADA1-B9CB-49E3-81CC-D4EF83952755} - \f1f8bcf3-4b77-4124-b662-827cb295954e-1 No Task File <==== ATTENTION
Task: {EF548486-5871-411C-9C5B-2C87214D2A1B} - System32\Tasks\{42C46500-1BF9-49AA-A3DD-A2543C1E51AE} => pcalua.exe -a C:\Users\Christian\Downloads\proggi_softer\ms403upd\ms403upd.exe -d C:\Users\Christian\Downloads\proggi_softer\ms403upd
Task: {F0428517-4636-4116-A29C-9F776AC1B387} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2014-05-06] (IObit)
Task: {F153DD49-F784-491C-A719-5E9B6655E811} - System32\Tasks\Rqplocbatf => Rundll32.exe "C:\Windows\SysWOW64\cscdllm.dll",bvsagia
Task: {F21729F6-8866-44D9-B452-34CC8E67AEEF} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {F3BF46CE-2F25-4D29-AE88-012F1F410579} - \DigitalSite No Task File <==== ATTENTION
Task: {FA862F6D-E447-458C-BF6C-739E58053D92} - \f1f8bcf3-4b77-4124-b662-827cb295954e-11 No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\Rqplocbatf.job => C:\Windows\SysWOW64\cscdllm.dll
==================== Loaded Modules (whitelisted) =============
2014-11-11 02:12 - 2006-12-04 01:26 - 00022016 _____ () C:\Windows\System32\SUGS2l6.dll
2014-11-12 00:22 - 2014-11-02 10:35 - 00268600 _____ () C:\Windows\SysWOW64\lsdprn.exe
2014-07-09 13:34 - 2012-03-12 10:05 - 00232288 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2014-12-18 15:10 - 2014-12-18 15:10 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2014-06-13 12:43 - 2014-10-15 06:35 - 06281024 _____ () C:\Users\Christian\AppData\Local\Amazon Music\Amazon Music Helper.exe
2014-12-18 15:06 - 2014-12-18 15:06 - 00083312 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 14:05 - 2014-03-21 14:05 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-12-18 15:08 - 2014-12-18 15:08 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-03-21 14:06 - 2014-03-21 14:06 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-03-21 14:08 - 2014-03-21 14:08 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-03-21 14:09 - 2014-03-21 14:09 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-1565434329-3150599115-1159552200-500 - Administrator - Disabled)
Christian (S-1-5-21-1565434329-3150599115-1159552200-1000 - Administrator - Enabled) => C:\Users\Christian
Gast (S-1-5-21-1565434329-3150599115-1159552200-501 - Limited - Enabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-1565434329-3150599115-1159552200-1002 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/30/2015 09:49:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:58:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:44:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:30:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:23:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 07:27:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (01/30/2015 09:49:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:49:57 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (01/30/2015 09:49:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (01/30/2015 09:48:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Error: (01/30/2015 09:48:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:48:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Advanced SystemCare Service 7 erreicht.
Error: (01/30/2015 09:29:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Error: (01/30/2015 09:29:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/30/2015 09:29:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Advanced SystemCare Service 7 erreicht.
Error: (01/30/2015 09:17:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Microsoft Office Sessions:
=========================
Error: (01/30/2015 09:49:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:30:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 09:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:58:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:44:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:38:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:30:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:23:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 08:07:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2015 07:27:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: AMD E-450 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 63%
Total physical RAM: 1643.72 MB
Available physical RAM: 592.93 MB
Total Pagefile: 3287.44 MB
Available Pagefile: 1966.35 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:183.36 GB) NTFS
Drive e: (SPASS) (Removable) (Total:29.8 GB) (Free:26.89 GB) FAT32
Drive f: (32GBTOSHIBA) (Removable) (Total:29.07 GB) (Free:9.42 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: A5135A6B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 29.8 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 29.1 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=29.1 GB) - (Type=0C)
==================== End Of Log ============================
--- --- --- |
FRST 32-Bit | FRST 64-Bit
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: