Trojaner-Board - Avast meldet ununterbrochen Bedrohung durch win32:BrowseFox-C[PUP]

Hallo cosinus,

vorab vielen Dank für die sehr rasche Antwort!

Zunächst die FRST-Logs, bei Avast muss ich noch schauen, wie ich die finde.

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014 01

Ran by I (administrator) on PERSONAL_PC on 14-08-2014 12:59:12

Running from C:\Users\Herr\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe

() C:\Program Files (x86)\webget\updatewebget.exe

() C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe

() C:\Program Files (x86)\webget\bin\utilwebget.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-20] (IDT, Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-28] (Synaptics Incorporated)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491632 2012-09-10] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)

HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-06] (AVAST Software)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1400492964&from=cor&uid=HitachiXHTS547564A9E384_J2180053FE0TYDFE0TYDX&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1400492964&from=cor&uid=HitachiXHTS547564A9E384_J2180053FE0TYDFE0TYDX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_clickconnect_14_49_ff&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzyyEyCtN1L2XzutBtFtBtCtFtCzztFtAtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StC0DtDyE0DyBtDyDtG0EzzyEyDtG0F0CzztBtGtAzy0DtDtGtC0ByBzytCzz0B0BtAyB0FyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=140426622&ir=

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_clickconnect_14_49_ff&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzyyEyCtN1L2XzutBtFtBtCtFtCzztFtAtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StC0DtDyE0DyBtDyDtG0EzzyEyDtG0F0CzztBtGtAzy0DtDtGtC0ByBzytCzz0B0BtAyB0FyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=140426622&ir=

SearchScopes: HKLM - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS

SearchScopes: HKLM - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_dsites02_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzzyBzztN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCzzyCyBzy0FyDyCtGyDyD0C0DtG0AtD0ByCtGtBtDzztDtGyC0D0ByB0D0F0ByEtAtAtAtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=1258899257&ir=

SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM - {DE809717-BAF8-4C65-BE7E-E2DB3E9480FB} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS

SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM-x32 - {DE809717-BAF8-4C65-BE7E-E2DB3E9480FB} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKCU - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_clickconnect_14_49_ff&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzyyEyCtN1L2XzutBtFtBtCtFtCzztFtAtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StC0DtDyE0DyBtDyDtG0EzzyEyDtG0F0CzztBtGtAzy0DtDtGtC0ByBzytCzz0B0BtAyB0FyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=140426622&ir=

SearchScopes: HKCU - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS

SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_dsites02_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzzyBzztN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCzzyCyBzy0FyDyCtGyDyD0C0DtG0AtD0ByCtGtBtDzztDtGyC0D0ByB0D0F0ByEtAtAtAtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=1258899257&ir=

SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKCU - {DE809717-BAF8-4C65-BE7E-E2DB3E9480FB} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->  No File

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: No Name -> {dc264a72-fa75-4948-b881-ea8eff8e5dd2} ->  No File

BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->  No File

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default

FF SearchEngineOrder.1: Microsoft (Bing)

FF Homepage: about:home

FF Keyword.URL: hxxp://www.bing.com/search

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\Astromenda.xml

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\bing-avast.xml

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\Speedial.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-19]

FF Extension: BetterPrivacy - C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-06-01]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-19]

FF StartMenuInternet: FIREFOX.EXE - firefox.exe
 

Chrome: 

=======

CHR StartupUrls: "hxxp://www.google.com/"

CHR Extension: (Docs) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]

CHR Extension: (Google Drive) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-10]

CHR Extension: (YouTube) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-10]

CHR Extension: (Google-Suche) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-10]

CHR Extension: (Google Wallet) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-10]

CHR Extension: (Google Mail) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-10]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-10]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-10] (AVAST Software)

R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed]

R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)

R2 Update Deal Keeper; C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe [323320 2014-08-12] ()

R2 Update webget; C:\Program Files (x86)\webget\updatewebget.exe [317720 2014-05-29] ()

R2 Util Deal Keeper; C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe [323320 2014-08-12] ()

R2 Util webget; C:\Program Files (x86)\webget\bin\utilwebget.exe [317720 2014-05-28] ()

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-06-01] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-01] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-01] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-10] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-10] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-10] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-10] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-10] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-10] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-10] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-10] ()

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)

S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-01] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)

R1 {55dce8ba-9dec-4013-937e-adbf9317d990}w64; C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys [61072 2014-07-30] (StdLib)

R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys [61112 2014-05-16] (StdLib)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-14 12:59 - 2014-08-14 13:00 - 00019309 _____ () C:\Users\Herr\Desktop\FRST.txt

2014-08-14 12:59 - 2014-08-14 12:59 - 00000000 ____D () C:\FRST

2014-08-14 12:58 - 2014-08-14 12:58 - 02100224 _____ (Farbar) C:\Users\Herr\Desktop\FRST64.exe

2014-08-12 23:24 - 2014-08-12 23:24 - 00285048 _____ () C:\WINDOWS\Minidump\081214-16937-01.dmp

2014-08-12 21:19 - 2014-03-25 06:21 - 00001580 _____ () C:\Users\Herr\Desktop\BOOTEX.LOG

2014-08-12 21:18 - 2014-08-12 21:20 - 00000000 ____D () C:\Users\Herr\Desktop\Zeug vom Stick

2014-08-07 23:53 - 2014-08-12 23:24 - 466980495 _____ () C:\WINDOWS\MEMORY.DMP

2014-08-07 23:53 - 2014-08-12 23:24 - 00000000 ____D () C:\WINDOWS\Minidump

2014-08-07 23:53 - 2014-08-07 23:54 - 00757600 _____ () C:\WINDOWS\Minidump\080714-22359-01.dmp

2014-08-04 00:47 - 2014-07-30 02:24 - 00061072 _____ (StdLib) C:\WINDOWS\system32\Drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys

2014-08-03 16:26 - 2014-08-03 16:26 - 00001184 _____ () C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk

2014-08-03 16:26 - 2014-08-03 16:26 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1

2014-08-03 16:25 - 2014-08-03 16:25 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3

2014-08-03 16:24 - 2014-08-03 16:24 - 00000000 ____D () C:\Users\Herr\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files

2014-08-03 16:23 - 2014-08-03 16:23 - 135933721 _____ () C:\Users\Herr\Downloads\OpenOffice_Setup [1].exe

2014-08-03 16:18 - 2014-08-03 16:18 - 00000000 ____D () C:\Users\Herr\Documents\PC Speed Maximizer

2014-08-03 16:14 - 2014-08-14 09:15 - 00000306 _____ () C:\WINDOWS\Tasks\Astromenda.job

2014-08-03 16:14 - 2014-08-04 00:52 - 00000000 ____D () C:\Program Files (x86)\Deal Keeper

2014-08-03 16:14 - 2014-08-03 16:14 - 00002644 _____ () C:\WINDOWS\System32\Tasks\Astromenda

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____D () C:\Users\Herr\AppData\Roaming\Astromenda

2014-08-03 16:13 - 2014-08-03 16:14 - 00000000 ____D () C:\Program Files (x86)\Astromenda

2014-08-03 16:12 - 2014-08-03 16:12 - 00756864 _____ ( ) C:\Users\Herr\Desktop\OpenOffice_Setup.exe

2014-07-31 20:22 - 2014-07-31 20:23 - 00000000 ____D () C:\Users\Herr\Desktop\Für Bachelorarbeit vielleicht interereressant

2014-07-31 20:06 - 2014-07-31 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-31 19:55 - 2014-07-31 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-14 13:00 - 2014-08-14 12:59 - 00019309 _____ () C:\Users\Herr\Desktop\FRST.txt

2014-08-14 13:00 - 2014-05-17 14:15 - 00003592 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-521381181-204090458-512974124-1001

2014-08-14 12:59 - 2014-08-14 12:59 - 00000000 ____D () C:\FRST

2014-08-14 12:58 - 2014-08-14 12:58 - 02100224 _____ (Farbar) C:\Users\Herr\Desktop\FRST64.exe

2014-08-14 12:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-08-14 12:55 - 2014-06-01 16:24 - 01342571 _____ () C:\WINDOWS\WindowsUpdate.log

2014-08-14 09:15 - 2014-08-03 16:14 - 00000306 _____ () C:\WINDOWS\Tasks\Astromenda.job

2014-08-14 09:10 - 2014-05-22 01:27 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-08-14 08:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-08-14 01:15 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-08-14 01:10 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports

2014-08-13 12:08 - 2014-06-01 16:09 - 00000000 ____D () C:\Users\Herr

2014-08-13 00:05 - 2014-05-19 11:55 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update

2014-08-12 23:25 - 2012-07-26 07:26 - 00000194 _____ () C:\WINDOWS\win.ini

2014-08-12 23:24 - 2014-08-12 23:24 - 00285048 _____ () C:\WINDOWS\Minidump\081214-16937-01.dmp

2014-08-12 23:24 - 2014-08-07 23:53 - 466980495 _____ () C:\WINDOWS\MEMORY.DMP

2014-08-12 23:24 - 2014-08-07 23:53 - 00000000 ____D () C:\WINDOWS\Minidump

2014-08-12 23:24 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-08-12 22:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF

2014-08-12 21:20 - 2014-08-12 21:18 - 00000000 ____D () C:\Users\Herr\Desktop\Zeug vom Stick

2014-08-12 21:19 - 2014-03-18 12:03 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-08-12 21:19 - 2014-03-18 11:25 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat

2014-08-12 21:19 - 2014-03-18 11:25 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat

2014-08-12 21:17 - 2014-06-01 17:08 - 00004437 _____ () C:\WINDOWS\setupact.log

2014-08-12 01:58 - 2014-05-29 13:41 - 00003142 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForI

2014-08-12 01:58 - 2014-05-29 13:41 - 00000340 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForI.job

2014-08-07 23:54 - 2014-08-07 23:53 - 00757600 _____ () C:\WINDOWS\Minidump\080714-22359-01.dmp

2014-08-06 11:40 - 2013-08-22 16:44 - 00375088 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-08-04 00:52 - 2014-08-03 16:14 - 00000000 ____D () C:\Program Files (x86)\Deal Keeper

2014-08-03 16:26 - 2014-08-03 16:26 - 00001184 _____ () C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk

2014-08-03 16:26 - 2014-08-03 16:26 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1

2014-08-03 16:25 - 2014-08-03 16:25 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3

2014-08-03 16:24 - 2014-08-03 16:24 - 00000000 ____D () C:\Users\Herr\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files

2014-08-03 16:23 - 2014-08-03 16:23 - 135933721 _____ () C:\Users\Herr\Downloads\OpenOffice_Setup [1].exe

2014-08-03 16:18 - 2014-08-03 16:18 - 00000000 ____D () C:\Users\Herr\Documents\PC Speed Maximizer

2014-08-03 16:15 - 2014-05-19 19:47 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-08-03 16:14 - 2014-08-03 16:14 - 00002644 _____ () C:\WINDOWS\System32\Tasks\Astromenda

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____D () C:\Users\Herr\AppData\Roaming\Astromenda

2014-08-03 16:14 - 2014-08-03 16:13 - 00000000 ____D () C:\Program Files (x86)\Astromenda

2014-08-03 16:12 - 2014-08-03 16:12 - 00756864 _____ ( ) C:\Users\Herr\Desktop\OpenOffice_Setup.exe

2014-08-02 19:40 - 2014-05-19 19:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-08-02 19:40 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-07-31 20:23 - 2014-07-31 20:22 - 00000000 ____D () C:\Users\Herr\Desktop\Für Bachelorarbeit vielleicht interereressant

2014-07-31 20:06 - 2014-07-31 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-31 19:55 - 2014-07-31 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-07-30 02:24 - 2014-08-04 00:47 - 00061072 _____ (StdLib) C:\WINDOWS\system32\Drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-12 23:44
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Addition.txt

Code:

 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-08-2014 01

Ran by I at 2014-08-14 13:00:09

Running from C:\Users\Herr\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Astromenda (HKLM-x32\...\Astromenda) (Version:  - Astromenda)

avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)

Buzzdock (HKLM\...\{ac225167-00fc-452d-94c5-bb93600e7d9a}) (Version:  - Alactro LLC) <==== ATTENTION

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.2.2114 - CyberLink Corp.)

CyberLink Media Suite 10 (x32 Version: 10.0.2.2114 - CyberLink Corp.) Hidden

CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)

CyberLink PhotoDirector (x32 Version: 2.0.2.3317 - CyberLink Corp.) Hidden

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.2.2110 - CyberLink Corp.)

CyberLink Power2Go 8 (x32 Version: 8.0.2.2110 - CyberLink Corp.) Hidden

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.2.2126 - CyberLink Corp.)

CyberLink PowerDirector 10 (x32 Version: 10.0.2.2126 - CyberLink Corp.) Hidden

CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7.4528 - CyberLink Corp.)

CyberLink PowerDVD (x32 Version: 10.0.7.4528 - CyberLink Corp.) Hidden

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.5.5811 - CyberLink Corp.)

CyberLink YouCam (x32 Version: 3.5.5.5811 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Deal Keeper (HKLM\...\Deal Keeper) (Version: 2014.08.03.103009 - Deal Keeper) <==== ATTENTION

Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)

Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Free YouTube to MP3 Converter version 3.12.39.604 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.39.604 - DVDVideoSoft Ltd.)

HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)

HP CoolSense (HKLM-x32\...\{11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F}) (Version: 2.10.51 - Hewlett-Packard Company)

HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden

HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden

HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)

HP Recovery Manager (x32 Version: 8.00 - Hewlett-Packard) Hidden

HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.8 - Hewlett-Packard)

HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6425.0 - IDT)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden

Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden

Open Office Packages (HKCU\...\Open Office Packages) (Version:  - ) <==== ATTENTION

OpenOffice.org 3.4.1 (HKLM-x32\...\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}) (Version: 3.41.9593 - Apache Software Foundation)

Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.5.0 - Ralink)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)

Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)

Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

19-07-2014 01:23:46 Geplanter Prüfpunkt

03-08-2014 14:25:04 Installed OpenOffice.org 3.4.1

12-08-2014 17:44:38 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {06BBAB11-B5E7-4602-9E00-86A6D79D9FA4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {1DE0CA86-2FC0-42EE-B3E5-675AE49C6571} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2187DA39-285A-4392-8AAF-D388ADD9D002} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-10] (AVAST Software)

Task: {2559CBD2-D54B-411A-84C9-E2A689E2115A} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)

Task: {2A0F9531-22D0-4247-BCF9-939427386392} - System32\Tasks\Astromenda => C:\Users\Herr\AppData\Roaming\Astromenda\UpdateProc\UpdateTask.exe [2013-04-09] ()

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {42E6B4F1-B57F-4C5A-8FD1-699059443955} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {549514F1-BEB5-42B1-AE4A-C82A25CCD898} - System32\Tasks\Microsoft\Windows\SysResetLogSuccess => Rundll32.exe ResetEng.dll,RjvLogSuccessEntryPoint

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {7BB1EC61-3140-48A7-9245-3DD56ECC42BA} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9E6912E4-D1A1-4EEB-A84C-DF2BF7D1864C} - System32\Tasks\HPCeeScheduleForI => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {AAAB57A6-E899-42AD-8088-50980BC850B2} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-10-12] (CyberLink)

Task: {B1C10441-0A02-49CE-A6B6-03CA6C3B473D} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {C3393CCD-2DEB-4A7D-98D5-164DBE8C9CE5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe

Task: {C82E2594-C450-4675-9E97-A85DD1A3DD81} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D4F1838F-B2D1-4B45-AEF2-FB800DF0E0ED} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {E888AF8D-5192-426F-9742-DD65C567309B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {FED6D47A-1DF0-464F-894D-D05CCCE93754} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\Astromenda.job => C:\Users\Herr\AppData\Roaming\ASTROM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\WINDOWS\Tasks\HPCeeScheduleForI.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-08-03 12:30 - 2014-08-12 18:39 - 00323320 _____ () C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe

2014-05-18 04:15 - 2014-05-29 13:01 - 00317720 _____ () C:\Program Files (x86)\webget\updatewebget.exe

2014-08-04 00:46 - 2014-08-12 18:42 - 00323320 _____ () C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe

2014-05-19 16:56 - 2014-05-28 03:42 - 00317720 _____ () C:\Program Files (x86)\webget\bin\utilwebget.exe

2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-07-10 02:54 - 2014-07-10 02:54 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll

2014-08-07 01:55 - 2014-08-07 01:55 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14080601\algo.dll

2014-08-12 23:25 - 2014-08-12 23:25 - 02786304 _____ () C:\Program Files\AVAST Software\Avast\defs\14081203\algo.dll

2014-06-06 11:06 - 2014-06-06 11:06 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\eb3fc3baba18e051ecb62c29f9862241\PSIClient.ni.dll

2012-12-28 19:54 - 2012-06-25 20:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2014-06-18 01:19 - 2014-06-18 01:19 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2012-12-28 20:11 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2012-06-08 12:34 - 2012-06-08 12:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2014-07-31 20:06 - 2014-07-31 20:06 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Users\Herr\OneDrive:ms-properties

AlternateDataStreams: C:\Users\Herr\SkyDrive:ms-properties
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/06/2014 00:16:13 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20573 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1110
 

Startzeit: 01cfb15eb9fc029f
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: ae899bf5-1d52-11e4-be8c-7446a08204d8
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 104) (User: )

Description: SearchIndexer (3144) Windows: Das Datenbankmodul hat die Instanz (0) mit einem Fehler (-510) beendet.
 
 
 

Interne Zeitsteuerungsabfolge: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.031, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.016, [10] 0.015, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (540)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 
 

Details:

         0x8e5e01fe (0x8e5e01fe)
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4811 - enduser\mssearch2\search\search\propstore\propsess.cxx (239)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 492) (User: )

Description: SearchIndexer (3144) Windows: Die Protokolldatei-Reihenfolge in "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\" wurde durch einen schwerwiegenden Fehler angehalten. Für die Datenbank, die diese Protokolldatei-Reihenfolge verwendet, sind keine weiteren Aktualisierungen möglich. Bitte korrigieren Sie das Problem, und starten Sie erneut, oder führen Sie eine Wiederherstellung aus einer Sicherung durch.
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 416) (User: )

Description: SearchIndexer (3144) Windows: Beim Leeren von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.log kann nicht in Abschnitt 2 geschrieben werden. Fehler -1022 (0xfffffc02).
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 482) (User: )

Description: SearchIndexer (3144) Windows: Versuch, in Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.log" bei Offset 409600 (0x0000000000064000) für 4096 (0x00001000) Bytes zu schreiben, ist nach SearchIndexer0 Sekunden mit Systemfehler 1 (0x00000001): "Unzulässige Funktion. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Schreiboperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden.
 

Error: (08/04/2014 04:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 31.0.0.5310, Zeitstempel: 0x53c75e91

Name des fehlerhaften Moduls: mozalloc.dll, Version: 31.0.0.5310, Zeitstempel: 0x53c72e91

Ausnahmecode: 0x80000003

Fehleroffset: 0x0000141b

ID des fehlerhaften Prozesses: 0x11c0

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3

Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
 
 

System errors:

=============

Error: (08/14/2014 03:38:27 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (08/14/2014 01:21:00 AM) (Source: DCOM) (EventID: 10010) (User: PERSONAL_PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (08/14/2014 01:20:30 AM) (Source: DCOM) (EventID: 10010) (User: PERSONAL_PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (08/12/2014 11:24:32 PM) (Source: BugCheck) (EventID: 1001) (User: )

Description: 0x0000007a (0xfffff6e0002d32e0, 0xffffffffc000000e, 0x00000001b2eb8880, 0xffffc0005a65ca68)C:\WINDOWS\MEMORY.DMP081214-16937-01
 

Error: (08/12/2014 11:24:24 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎12.‎08.‎2014 um 23:15:57 unerwartet heruntergefahren.
 

Error: (08/12/2014 06:44:12 PM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (08/12/2014 06:28:40 PM) (Source: DCOM) (EventID: 10010) (User: PERSONAL_PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (08/12/2014 06:28:10 PM) (Source: DCOM) (EventID: 10010) (User: PERSONAL_PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (08/12/2014 06:02:59 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (08/12/2014 00:15:07 AM) (Source: DCOM) (EventID: 10010) (User: PERSONAL_PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 
 

Microsoft Office Sessions:

=========================

Error: (08/06/2014 00:16:13 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: LiveComm.exe17.5.9600.20573111001cfb15eb9fc029f4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\LiveComm.exeae899bf5-1d52-11e4-be8c-7446a08204d8microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 104) (User: )

Description: SearchIndexer3144Windows: 0-510[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.031, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.016, [10] 0.015, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

The catalog is corrupt
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: 

Details:

         0x8e5e01fe (0x8e5e01fe)

4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (540)
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

The catalog is corrupt
 

Error: (08/05/2014 09:48:44 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

4811 - enduser\mssearch2\search\search\propstore\propsess.cxx (239)
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 492) (User: )

Description: SearchIndexer3144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 416) (User: )

Description: SearchIndexer3144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.log-1022 (0xfffffc02)
 

Error: (08/05/2014 09:48:44 PM) (Source: ESENT) (EventID: 482) (User: )

Description: SearchIndexer3144Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.log409600 (0x0000000000064000)4096 (0x00001000)-1022 (0xfffffc02)1 (0x00000001)Unzulässige Funktion. 0.020
 

Error: (08/04/2014 04:36:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe31.0.0.531053c75e91mozalloc.dll31.0.0.531053c72e91800000030000141b11c001cfafc87df260bcC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllb1e00ba4-1be4-11e4-be8b-7446a08204d8
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-06-01 14:04:01.984

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2014-06-01 13:58:48.918

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2014-06-01 13:54:33.374

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2014-05-31 07:53:25.710

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz

Percentage of memory in use: 39%

Total physical RAM: 3988.28 MB

Available physical RAM: 2406.67 MB

Total Pagefile: 8084.28 MB

Available Pagefile: 6420.59 MB

Total Virtual: 131072 MB

Available Virtual: 131071.79 MB
 

==================== Drives ================================
 

Drive c: (Windows) (Fixed) (Total:577.79 GB) (Free:540.27 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Recovery) (Fixed) (Total:16.82 GB) (Free:2.12 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 596 GB) (Disk ID: 54D52BBE)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

EDIT: Nein, keine anderen Meldungen sind vorhanden!
EDIT 2: Ich finde die Logs aus Avast nicht, weder finde ich eine Option im Programm noch einen Ordner im Programmordner. Weißt du eine Möglichkeit da ran zu kommen?

AdwCleaner Logfile:

Code:

# AdwCleaner v3.305 - Bericht erstellt am 15/08/2014 um 09:43:51

# Aktualisiert 14/08/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : I - PERSONAL_PC

# Gestartet von : C:\Users\Herr\Desktop\adwcleaner_3.305.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

Dienst Gelöscht : IePluginServices

[#] Dienst Gelöscht : Update webget

[#] Dienst Gelöscht : Util webget

[#] Dienst Gelöscht : Update Deal Keeper

[#] Dienst Gelöscht : Util Deal Keeper

Dienst Gelöscht : {55dce8ba-9dec-4013-937e-adbf9317d990}w64

Dienst Gelöscht : {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\IePluginServices

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\Program Files (x86)\Astromenda

Ordner Gelöscht : C:\Program Files (x86)\Speedial

Ordner Gelöscht : C:\Program Files (x86)\SupTab

Ordner Gelöscht : C:\Program Files (x86)\webget

Ordner Gelöscht : C:\Program Files (x86)\Deal Keeper

Ordner Gelöscht : C:\Users\Herr\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\Herr\AppData\Local\Temp\Deal Keeper

Ordner Gelöscht : C:\Users\Herr\AppData\LocalLow\Opti Toolbar

Ordner Gelöscht : C:\Users\Herr\Documents\PC Speed Maximizer

Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe

Datei Gelöscht : C:\WINDOWS\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w64.sys

Datei Gelöscht : C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
 

***** [ Tasks ] *****
 

Task Gelöscht : Astromenda
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updatewebget_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updatewebget_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\utilwebget_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\utilwebget_RASMANCS

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DC264A72-FA75-4948-B881-EA8EFF8E5DD2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}

Schlüssel Gelöscht : HKCU\Software\Astromenda

Schlüssel Gelöscht : HKCU\Software\ClickConnect

Schlüssel Gelöscht : HKCU\Software\Deal Keeper

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\SecuredDownload

Schlüssel Gelöscht : HKCU\Software\Speedial

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\webget

Schlüssel Gelöscht : HKLM\Software\Deal Keeper

Schlüssel Gelöscht : HKLM\Software\InstallCore

Schlüssel Gelöscht : HKLM\Software\SupDp

Schlüssel Gelöscht : HKLM\Software\SupTab

Schlüssel Gelöscht : HKLM\Software\supWPM

Schlüssel Gelöscht : HKLM\Software\sweet-pageSoftware

Schlüssel Gelöscht : HKLM\Software\systweak

Schlüssel Gelöscht : HKLM\Software\webget

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Astromenda

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ac225167-00fc-452d-94c5-bb93600e7d9a}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deal Keeper

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17239
 

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]

Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
 

-\\ Mozilla Firefox v31.0 (x86 de)
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht [Extension] : bakijjialdiiboeaknfpmflphhmljfkd
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

[ Datei : C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [9477 octets] - [15/08/2014 09:42:25]

AdwCleaner[S0].txt - [7100 octets] - [15/08/2014 09:43:51]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7160 octets] ##########

Code:

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 8.1 x64

Ran by I on 15.08.2014 at  9:49:48,80

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilDealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilDealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DE809717-BAF8-4C65-BE7E-E2DB3E9480FB}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{DE809717-BAF8-4C65-BE7E-E2DB3E9480FB}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\adtrustmedia"

Successfully deleted: [Folder] "C:\Users\Herr\AppData\Roaming\loadtbs"

Successfully deleted: [Folder] "C:\Users\Herr\AppData\Roaming\systweak"
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Herr\AppData\Roaming\mozilla\firefox\profiles\jf3jmzx4.default\minidumps [9 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.08.2014 at  9:55:28,94

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014 01

Ran by I (administrator) on PERSONAL_PC on 15-08-2014 09:57:48

Running from C:\Users\Herr\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Thisisu) C:\Users\Herr\Desktop\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-20] (IDT, Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-28] (Synaptics Incorporated)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491632 2012-09-10] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)

HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-06] (AVAST Software)

Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)

ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKLM - {DE809717-BAF8-4C65-BE7E-E2DB3E9480FB} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_clickconnect_14_49_ff&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0CyC0FtDtAyByByC0BtDtN0D0Tzu0SzyyEyCtN1L2XzutBtFtBtCtFtCzztFtAtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StC0DtDyE0DyBtDyDtG0EzzyEyDtG0F0CzztBtGtAzy0DtDtGtC0ByBzytCzz0B0BtAyB0FyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0CyDyCyCtB0A0FtGyD0CtByEtG0E0Ezy0DtGtD0C0AyCtGtA0B0ByEtC0B0F0D0BtC0CyC2Q&cr=140426622&ir=

SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->  No File

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->  No File

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default

FF SearchEngineOrder.1: Microsoft (Bing)

FF Homepage: about:home

FF Keyword.URL: hxxp://www.bing.com/search

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\Astromenda.xml

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\bing-avast.xml

FF SearchPlugin: C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\searchplugins\Speedial.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-19]

FF Extension: BetterPrivacy - C:\Users\Herr\AppData\Roaming\Mozilla\Firefox\Profiles\jf3jmzx4.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-06-01]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-19]

FF StartMenuInternet: FIREFOX.EXE - firefox.exe
 

Chrome: 

=======

CHR HomePage: 

CHR StartupUrls: "hxxp://www.google.com/"

CHR Extension: (Docs) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]

CHR Extension: (Google Drive) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-10]

CHR Extension: (YouTube) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-10]

CHR Extension: (Google-Suche) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-10]

CHR Extension: (Google Wallet) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-10]

CHR Extension: (Google Mail) - C:\Users\Herr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-10]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-10]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-10] (AVAST Software)

R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed]

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-06-01] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-01] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-01] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-10] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-10] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-10] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-10] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-10] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-10] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-10] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-10] ()

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)

S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-01] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-15 09:55 - 2014-08-15 09:55 - 00001832 _____ () C:\Users\Herr\Desktop\JRT.txt

2014-08-15 09:49 - 2014-08-15 09:49 - 01016261 _____ (Thisisu) C:\Users\Herr\Desktop\JRT.exe

2014-08-15 09:49 - 2014-08-15 09:49 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-08-15 09:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll

2014-08-15 09:41 - 2014-08-15 09:44 - 00000000 ____D () C:\AdwCleaner

2014-08-15 09:41 - 2014-08-15 09:41 - 01356107 _____ () C:\Users\Herr\Desktop\adwcleaner_3.305.exe

2014-08-14 14:54 - 2014-08-14 14:54 - 00001835 _____ () C:\Users\Herr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk

2014-08-14 13:00 - 2014-08-14 13:00 - 00029266 _____ () C:\Users\Herr\Desktop\Addition.txt

2014-08-14 12:59 - 2014-08-15 09:57 - 00014266 _____ () C:\Users\Herr\Desktop\FRST.txt

2014-08-14 12:59 - 2014-08-15 09:57 - 00000000 ____D () C:\FRST

2014-08-14 12:58 - 2014-08-14 12:58 - 02100224 _____ (Farbar) C:\Users\Herr\Desktop\FRST64.exe

2014-08-14 01:17 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-08-14 01:17 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-08-14 01:17 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-08-14 01:17 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-08-14 01:17 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-08-14 01:17 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-08-14 01:17 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-08-14 01:17 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-08-14 01:17 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-08-14 01:17 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-08-14 01:17 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-08-14 01:17 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-08-14 01:17 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-08-14 01:17 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-08-14 01:17 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-08-14 01:17 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-08-14 01:17 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-08-14 01:17 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-08-14 01:17 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-08-14 01:17 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-14 01:17 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-08-14 01:17 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-08-14 01:17 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-08-14 01:17 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-08-14 01:17 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-08-14 01:17 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-08-14 01:17 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-08-14 01:17 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-08-14 01:17 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-08-14 01:17 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-08-14 01:17 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-08-14 01:17 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-08-14 01:17 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-08-14 01:17 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-08-14 01:17 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-08-14 01:16 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2014-08-14 01:16 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2014-08-14 01:16 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2014-08-14 01:16 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2014-08-14 01:16 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2014-08-14 01:16 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe

2014-08-14 01:16 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-08-14 01:16 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-08-14 01:16 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-08-14 01:16 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2014-08-14 01:16 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2014-08-14 01:16 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2014-08-14 01:16 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll

2014-08-14 01:16 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll

2014-08-14 01:16 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll

2014-08-14 01:16 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll

2014-08-14 01:16 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll

2014-08-14 01:16 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll

2014-08-14 01:16 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat

2014-08-14 01:16 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2014-08-14 01:16 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys

2014-08-14 01:16 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2014-08-14 01:16 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys

2014-08-14 01:16 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys

2014-08-14 01:16 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe

2014-08-14 01:16 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe

2014-08-14 01:16 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll

2014-08-14 01:16 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll

2014-08-14 01:16 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll

2014-08-14 01:16 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll

2014-08-14 01:16 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2014-08-14 01:16 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2014-08-14 01:16 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll

2014-08-14 01:16 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll

2014-08-14 01:16 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll

2014-08-14 01:16 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll

2014-08-14 01:16 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2014-08-14 01:16 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2014-08-14 01:16 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2014-08-14 01:16 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2014-08-14 01:16 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2014-08-14 01:16 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2014-08-14 01:16 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2014-08-14 01:16 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll

2014-08-14 01:16 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll

2014-08-14 01:16 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll

2014-08-14 01:15 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2014-08-14 01:15 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-08-14 01:15 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2014-08-14 01:15 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-08-14 01:15 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2014-08-14 01:15 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2014-08-14 01:15 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll

2014-08-14 01:15 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2014-08-14 01:15 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2014-08-14 01:15 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-08-14 01:15 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-08-14 01:15 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-08-14 01:15 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2014-08-14 01:15 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2014-08-14 01:15 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2014-08-14 01:15 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2014-08-14 01:15 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll

2014-08-14 01:15 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll

2014-08-14 01:15 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2014-08-14 01:15 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll

2014-08-14 01:15 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2014-08-14 01:15 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll

2014-08-14 01:15 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2014-08-14 01:15 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-08-14 01:15 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-08-14 01:15 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2014-08-14 01:15 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2014-08-14 01:15 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys

2014-08-14 01:15 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2014-08-14 01:15 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys

2014-08-14 01:15 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys

2014-08-14 01:15 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys

2014-08-14 01:15 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys

2014-08-14 01:15 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys

2014-08-14 01:15 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe

2014-08-14 01:15 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2014-08-14 01:15 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll

2014-08-14 01:15 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-08-14 01:15 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll

2014-08-14 01:15 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll

2014-08-14 01:15 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-08-14 01:15 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-08-14 01:15 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-08-14 01:15 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-08-12 23:24 - 2014-08-12 23:24 - 00285048 _____ () C:\WINDOWS\Minidump\081214-16937-01.dmp

2014-08-12 21:19 - 2014-03-25 06:21 - 00001580 _____ () C:\Users\Herr\Desktop\BOOTEX.LOG

2014-08-12 21:18 - 2014-08-12 21:20 - 00000000 ____D () C:\Users\Herr\Desktop\Zeug vom Stick

2014-08-07 23:53 - 2014-08-12 23:24 - 466980495 _____ () C:\WINDOWS\MEMORY.DMP

2014-08-07 23:53 - 2014-08-12 23:24 - 00000000 ____D () C:\WINDOWS\Minidump

2014-08-07 23:53 - 2014-08-07 23:54 - 00757600 _____ () C:\WINDOWS\Minidump\080714-22359-01.dmp

2014-08-03 16:26 - 2014-08-03 16:26 - 00001184 _____ () C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk

2014-08-03 16:26 - 2014-08-03 16:26 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1

2014-08-03 16:25 - 2014-08-03 16:25 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3

2014-08-03 16:24 - 2014-08-03 16:24 - 00000000 ____D () C:\Users\Herr\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files

2014-08-03 16:23 - 2014-08-03 16:23 - 135933721 _____ () C:\Users\Herr\Downloads\OpenOffice_Setup [1].exe

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____D () C:\Users\Herr\AppData\Roaming\Astromenda

2014-08-03 16:12 - 2014-08-03 16:12 - 00756864 _____ ( ) C:\Users\Herr\Desktop\OpenOffice_Setup.exe

2014-07-31 20:22 - 2014-07-31 20:23 - 00000000 ____D () C:\Users\Herr\Desktop\Für Bachelorarbeit vielleicht interereressant

2014-07-31 20:06 - 2014-07-31 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-31 19:55 - 2014-07-31 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-08-15 09:58 - 2014-08-14 12:59 - 00014266 _____ () C:\Users\Herr\Desktop\FRST.txt

2014-08-15 09:57 - 2014-08-14 12:59 - 00000000 ____D () C:\FRST

2014-08-15 09:57 - 2014-05-17 14:15 - 00003592 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-521381181-204090458-512974124-1001

2014-08-15 09:55 - 2014-08-15 09:55 - 00001832 _____ () C:\Users\Herr\Desktop\JRT.txt

2014-08-15 09:49 - 2014-08-15 09:49 - 01016261 _____ (Thisisu) C:\Users\Herr\Desktop\JRT.exe

2014-08-15 09:49 - 2014-08-15 09:49 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-08-15 09:45 - 2014-06-12 12:00 - 00006560 _____ () C:\WINDOWS\PFRO.log

2014-08-15 09:45 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-08-15 09:45 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-08-15 09:44 - 2014-08-15 09:41 - 00000000 ____D () C:\AdwCleaner

2014-08-15 09:41 - 2014-08-15 09:41 - 01356107 _____ () C:\Users\Herr\Desktop\adwcleaner_3.305.exe

2014-08-15 09:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-08-15 04:10 - 2014-05-22 01:27 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-08-15 01:16 - 2014-06-01 16:24 - 01514566 _____ () C:\WINDOWS\WindowsUpdate.log

2014-08-14 15:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-08-14 14:54 - 2014-08-14 14:54 - 00001835 _____ () C:\Users\Herr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk

2014-08-14 13:49 - 2013-08-22 16:44 - 00375088 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-08-14 13:46 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-08-14 13:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

2014-08-14 13:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-08-14 13:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-08-14 13:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-08-14 13:41 - 2014-05-19 17:56 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-08-14 13:41 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-08-14 13:40 - 2014-05-19 17:56 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-08-14 13:35 - 2014-05-22 01:27 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2014-08-14 13:00 - 2014-08-14 13:00 - 00029266 _____ () C:\Users\Herr\Desktop\Addition.txt

2014-08-14 12:58 - 2014-08-14 12:58 - 02100224 _____ (Farbar) C:\Users\Herr\Desktop\FRST64.exe

2014-08-14 08:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-08-14 01:15 - 2013-08-22 13:45 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-08-14 01:15 - 2013-08-22 06:17 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-08-14 01:15 - 2013-08-22 05:46 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-08-14 01:15 - 2013-08-22 05:16 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-08-14 01:14 - 2014-03-18 12:12 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2014-08-14 01:14 - 2014-03-18 12:12 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-08-14 01:14 - 2014-03-18 12:12 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-08-14 01:14 - 2014-03-18 12:11 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-08-14 01:14 - 2013-08-22 13:44 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-08-14 01:14 - 2013-08-22 13:22 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-08-14 01:14 - 2013-08-22 13:21 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-08-14 01:14 - 2013-08-22 13:10 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-08-14 01:14 - 2013-08-22 13:03 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-08-14 01:14 - 2013-08-22 12:32 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-08-14 01:14 - 2013-08-22 05:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-08-14 01:14 - 2013-08-22 05:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-08-14 01:14 - 2013-08-22 05:40 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-08-14 01:11 - 2014-06-01 16:45 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2014-08-14 01:10 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports

2014-08-13 12:08 - 2014-06-01 16:09 - 00000000 ____D () C:\Users\Herr

2014-08-13 00:05 - 2014-05-19 11:55 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update

2014-08-12 23:25 - 2012-07-26 07:26 - 00000194 _____ () C:\WINDOWS\win.ini

2014-08-12 23:24 - 2014-08-12 23:24 - 00285048 _____ () C:\WINDOWS\Minidump\081214-16937-01.dmp

2014-08-12 23:24 - 2014-08-07 23:53 - 466980495 _____ () C:\WINDOWS\MEMORY.DMP

2014-08-12 23:24 - 2014-08-07 23:53 - 00000000 ____D () C:\WINDOWS\Minidump

2014-08-12 22:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF

2014-08-12 21:20 - 2014-08-12 21:18 - 00000000 ____D () C:\Users\Herr\Desktop\Zeug vom Stick

2014-08-12 21:19 - 2014-03-18 12:03 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-08-12 21:19 - 2014-03-18 11:25 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat

2014-08-12 21:19 - 2014-03-18 11:25 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat

2014-08-12 21:17 - 2014-06-01 17:08 - 00004437 _____ () C:\WINDOWS\setupact.log

2014-08-12 01:58 - 2014-05-29 13:41 - 00003142 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForI

2014-08-12 01:58 - 2014-05-29 13:41 - 00000340 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForI.job

2014-08-07 23:54 - 2014-08-07 23:53 - 00757600 _____ () C:\WINDOWS\Minidump\080714-22359-01.dmp

2014-08-07 04:12 - 2014-08-14 01:15 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2014-08-07 00:39 - 2014-08-14 01:15 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-08-03 16:26 - 2014-08-03 16:26 - 00001184 _____ () C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk

2014-08-03 16:26 - 2014-08-03 16:26 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1

2014-08-03 16:25 - 2014-08-03 16:25 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3

2014-08-03 16:24 - 2014-08-03 16:24 - 00000000 ____D () C:\Users\Herr\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files

2014-08-03 16:23 - 2014-08-03 16:23 - 135933721 _____ () C:\Users\Herr\Downloads\OpenOffice_Setup [1].exe

2014-08-03 16:15 - 2014-05-19 19:47 - 00001138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-08-03 16:14 - 2014-08-03 16:14 - 00000000 ____D () C:\Users\Herr\AppData\Roaming\Astromenda

2014-08-03 16:12 - 2014-08-03 16:12 - 00756864 _____ ( ) C:\Users\Herr\Desktop\OpenOffice_Setup.exe

2014-08-02 19:40 - 2014-05-19 19:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-08-02 05:56 - 2014-08-14 01:15 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2014-08-02 05:11 - 2014-08-14 01:15 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-08-02 02:17 - 2013-08-22 17:38 - 00704480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-08-02 02:17 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-31 20:23 - 2014-07-31 20:22 - 00000000 ____D () C:\Users\Herr\Desktop\Für Bachelorarbeit vielleicht interereressant

2014-07-31 20:06 - 2014-07-31 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-31 19:55 - 2014-07-31 19:55 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-07-25 16:52 - 2014-08-14 01:17 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-07-25 15:51 - 2014-08-14 01:17 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-07-25 15:28 - 2014-08-14 01:17 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-07-25 15:25 - 2014-08-14 01:17 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-07-25 15:25 - 2014-08-14 01:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-07-25 14:59 - 2014-08-14 01:17 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-07-25 14:40 - 2014-08-14 01:17 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-07-25 14:34 - 2014-08-14 01:17 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-07-25 14:30 - 2014-08-14 01:17 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-07-25 14:28 - 2014-08-14 01:17 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-07-25 14:28 - 2014-08-14 01:17 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-07-25 14:21 - 2014-08-14 01:17 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-07-25 14:17 - 2014-08-14 01:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-07-25 14:10 - 2014-08-14 01:17 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-07-25 14:08 - 2014-08-14 01:17 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-07-25 14:06 - 2014-08-14 01:17 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-07-25 13:52 - 2014-08-14 01:17 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-07-25 13:47 - 2014-08-14 01:17 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-07-25 13:43 - 2014-08-14 01:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-07-25 13:43 - 2014-08-14 01:17 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-25 13:42 - 2014-08-14 01:17 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-07-25 13:39 - 2014-08-14 01:17 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-07-25 13:34 - 2014-08-14 01:17 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-07-25 13:29 - 2014-08-14 01:17 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-07-25 13:23 - 2014-08-14 01:17 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-07-25 13:13 - 2014-08-14 01:17 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-07-25 13:09 - 2014-08-14 01:17 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-07-25 13:07 - 2014-08-14 01:17 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-07-25 13:03 - 2014-08-14 01:17 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-07-25 12:52 - 2014-08-14 01:17 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-07-25 12:26 - 2014-08-14 01:17 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-07-25 12:17 - 2014-08-14 01:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-07-25 12:09 - 2014-08-14 01:17 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-07-25 12:05 - 2014-08-14 01:17 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-07-25 12:00 - 2014-08-14 01:17 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
 

Some content of TEMP:

====================

C:\Users\Herr\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-08-14 14:32
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Bereits nach dem Anwenden von adwCleaner, blieb die Bedrohungsmeldung durch Avast aus. Damit sollte das Problem gelöst sein, nicht wahr?

Vielen Dank cosinus! Das war mir echt eine große Hilfe!