Posbank Trojaner

paintball · 11.06.2015, 11:45

Wie schon in andere Foren beschrieben " Zollamt hat mir zu viel geld 5500 überwiesen und will das Geld zurück haben"

FRST Additions Logfile:
[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x86) Version: 08-06-2015
Ran by mediamarkt at 2015-06-11 12:19:16
Running from C:\Users\mediamarkt\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1208384110-4107883307-101704457-500 - Administrator - Disabled)
Gast (S-1-5-21-1208384110-4107883307-101704457-501 - Limited - Disabled) => C:\Users\Gast
mediamarkt (S-1-5-21-1208384110-4107883307-101704457-1000 - Administrator - Enabled) => C:\Users\mediamarkt

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader 9.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Advanced Wheel Mouse 6.0.0.010 (HKLM\...\WheelMouse) (Version:  - )
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.13.0 - Ask.com) <==== ATTENTION
Avira (HKLM\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.3.33021 - Ask.com) <==== ATTENTION
BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.44 - Broadcom Corporation)
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
ChargeableUSB (HKLM\...\{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}) (Version: 1.0.0.0 - SAMSUNG)
Copy (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.)
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
DJ_AIO_06_F2400_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
DriverEasy 4.9.1 (HKLM\...\DriverEasy_is1) (Version: 4.9.1.0 - Easeware)
Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0.0.13 - Samsung Electronics Co., LTD)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.1 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{F771F1D4-EDD4-4D68-82DC-811583C099CD}) (Version: 4.3.1 - Samsung)
Easy Resolution Manager (HKLM\...\{45535A5E-1F81-4F35-BE1D-43D10A7D03B4}) (Version: 1.0.0 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.0.10 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM\...\{DDF38EE7-3A53-4B4C-8924-CFFDF906091A}) (Version: 1.0.2 - Samsung)
F2400 (Version: 140.0.690.000 - Hewlett-Packard) Hidden
Fast Booting SW (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 1.6.0.0 - SAMSUNG)
Google Chrome (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{819CA3BC-2FF8-4811-B42F-421F7BFD3559}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IB Updater Service (HKLM\...\WNLT) (Version: 3.0.4.6 - ) <==== ATTENTION
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) SE Development Kit 6 Update 20 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160200}) (Version: 1.6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
MarketResearch (Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.13580 - Symantec Corporation)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
REALTEK PCIE Wireless LAN Software (HKLM\...\{A5C8BFF2-0044-4500-8BB5-BEB0D2335885}) (Version: 0136.10.0325 - REALTEK Semiconductor Corp.)
Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)
Samsung Support Center (HKLM\...\{749BDD29-D756-4B9B-8022-3E666A24C13F}) (Version: 1.1.3 - Samsung)
Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Toolbars (HKLM\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.)
Skype™ 7.5 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
Web Assistant 2.0.0.478 (HKLM\...\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1) (Version: 2.0.0.478 - IncrediBar) <==== ATTENTION
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4500 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\43.0.2357.81\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)

==================== Restore Points =========================

10-06-2015 10:23:17 Windows Update
10-06-2015 20:35:57 avast! antivirus system restore point
11-06-2015 10:12:33 Windows Update
11-06-2015 11:12:45 Wiederherstellungsvorgang

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2013-07-23 14:11 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {003F54B3-7AB6-42B7-BEC8-0B17C1D39DBB} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-12-14] (SAMSUNG Electronics)
Task: {0C2367AD-FD7A-41B9-BE3D-B44CBB026E0B} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SFB\SmartRestarter.exe [2010-05-01] (Samsung Electronics Co., Ltd.)
Task: {0E02F341-1B47-436A-9FB1-EC40E5C24534} - System32\Tasks\{8FCB4350-3E6F-4F98-953B-9CFFCE593447} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {0F98D76C-30C1-4113-8148-CC3117B8AA53} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {12DFB32C-5F80-44DE-B00E-B37788C004FC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {1B097FD8-9484-4C16-8A5C-0BFA2215AA0E} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-04-07] (Samsung Electronics Co., Ltd.)
Task: {23AADD04-DC10-4526-BA91-E105A1141EB9} - System32\Tasks\{787D9726-6261-44FD-872F-068DBD13400E} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {339B0809-AB1C-478A-8573-C713C6793DB8} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-20] () <==== ATTENTION
Task: {351E558F-1A71-4E0D-9B57-52B2066BE8EE} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1208384110-4107883307-101704457-1000
Task: {37BECC5F-7248-496A-9002-D6260D04140F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {4BA01F99-1B40-4F90-95DD-1223FBAAF33B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {502895E6-DE5A-4420-8658-1C8AC55DCEA3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-11] (Adobe Systems Incorporated)
Task: {54CC7029-4876-4EF0-A187-52BD3C71AA8F} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)
Task: {5DB0F207-6DEC-4326-9607-3D377D13173A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {644C5AFF-BAEE-4843-AFF8-56F6A24C7E26} - System32\Tasks\{4B4CB786-1352-4602-ACAB-C7DDC4945E23} => pcalua.exe -a "C:\Users\mediamarkt\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\chipset INFs"
Task: {72E91422-683B-48F5-B57D-914399A1B3C9} - System32\Tasks\{30E22019-D725-43EC-AFDC-05EE10C7E508} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {798B0A52-F0CF-4CB2-B0B7-AD5F03951B1C} - System32\Tasks\{903E25FC-8195-43B7-B24C-96FAD5975327} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {815C756F-C467-4F89-B0A1-94AD697548F6} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {86B2B0C1-D204-4A36-816E-26DE522307EF} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-03-29] (SAMSUNG Electronics co., LTD.)
Task: {9525C70A-34F7-465B-8ABA-C6DE532D0DED} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-02-03] ()
Task: {98FF545A-E906-4723-9D56-9FFBAD8B3BFF} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-04-20] (Samsung Electronics)
Task: {A8F2F4DE-A48D-4646-983D-0A28B2FB6C69} - System32\Tasks\{EEA07B5C-532A-4A58-A36A-27CB9A280384} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Local\temp\Temp2_chipset INFs.zip\chipset INFs\Ssetup.exe"
Task: {AFA52ED2-F3A8-406E-BB69-7A93FF34BE2B} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)
Task: {B86F5284-BF3F-4D13-AC9E-25A27839C1FA} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [2015-04-01] (Easeware)
Task: {D5AE3AF4-BE12-4F3E-B13A-CC24C31EC9BC} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {F36C41CC-638D-4EF0-9D97-5A2D59FD8C36} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F6989F32-2E4F-4A79-A4BC-7863CD9C32A4} - System32\Tasks\{C6B3B211-1EE9-4F64-B428-770A5FEF454B} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2010-05-26 05:47 - 2010-05-26 05:47 - 00036864 _____ () C:\Advanced Wheel Mouse\wh_hook.dll
2010-05-11 04:11 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2010-05-26 05:47 - 2010-05-26 05:47 - 00147456 _____ () C:\Advanced Wheel Mouse\wh_exec.exe
2015-02-19 23:40 - 2015-02-19 23:40 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-03-25 23:17 - 2015-03-25 23:17 - 00172032 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2015-03-25 23:16 - 2011-11-29 21:00 - 00059392 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-06-11 12:09 - 2015-06-09 15:00 - 02212944 _____ () C:\Users\mediamarkt\AppData\Local\Google\Update\Install\{E061A9F3-6F43-488B-B31C-27A6EDB2C9B6}\43.0.2357.124_43.0.2357.81_chrome_updater.exe
2012-12-20 22:56 - 2012-12-20 22:56 - 00136992 _____ () C:\Program Files\Ask.com\UpdateTask.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2430E4FC

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3E69CAC2-A400-40DC-A5E2-6818C95E4510}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{11B032AD-B25E-41EF-833A-7E266C118A3A}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{C3194230-0312-4B6A-8898-A6654C609796}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{61D7A7C5-7969-4E66-A5BA-EA667FD225BF}] => (Allow) svchost.exe
FirewallRules: [{5877F1F9-FFCA-47E6-B051-5C4399CF11A0}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{E2276A8B-B36B-4B9D-9041-FB32D55AD42D}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{DBB6AF3F-F34E-4A73-B785-475B81CA6E7B}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [TCP Query User{E5637C96-A8E3-4D97-8171-AE4F3027A2A7}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{C7E4D1FC-A37C-493D-B628-5745A6F8F61B}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [{7F99A8DB-7231-43B7-BD6E-EBA13B1FE320}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BEC073FE-40D8-46CC-AA1C-E771DE01E6F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{164F9DF0-41B9-4278-AD8F-C717EF14D2A7}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A8C30DF8-7E74-4F2D-9E80-400B097D6984}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F7D57CB5-F4B6-43B8-9851-21F338E17241}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{056813C1-AD67-4F53-BACE-493F9A071315}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2F832820-C237-4BBF-AF8A-F1E1AB16A9B7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{79C8FB1C-8EAD-43EC-B284-5C30CCACD352}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CE22F886-B590-4478-8FF8-876EC3A7E234}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{198DBA44-9E5E-4448-B0A8-AB511633E458}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B74913CC-BF83-4864-8DAA-C1BF4F421FF3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3F1F00B4-2521-499D-8F84-D25E7D4E17D8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{42AEBA0A-A089-472D-9EF3-BB49A1EA7044}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6AFC6C2B-EC76-4DED-ABE1-947C610986BA}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B041A9E-6D11-40D4-B24D-EB8CAA8CEAB3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2148DDA5-B0E7-4A72-8650-12FECF486F88}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{717A41EB-6F70-46E2-BB8A-194730575C77}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EC8CAC0E-6B48-46B6-947E-96AA7C19D05A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2AACBAC3-3C5E-4F96-9043-D625C1CF2092}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B22D737-8A35-4E62-895E-A45E47636D8A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{554DCC80-0446-46E0-BC5D-DA1593DEC1A7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{59469A6E-A1D9-48F7-B252-653059167864}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{FC0F87BC-6439-4676-B169-740CB097A62B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8A7DF619-22B7-4723-8ED6-9528ACAA419E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{113A0D73-B95A-4D5D-A394-20D44AFB83EF}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{6A80A209-9A02-4CF5-84BF-ED901A6E5CCE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{5FA560A7-D15C-4C35-BC4E-0998A5C67B47}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{1CEF47A3-6FE5-41E4-AD7B-55471BADE1CD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{032617A6-028A-4CCC-862A-0719AE9B6DED}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{3A463978-132D-44C5-B37A-2393B9FA36A5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{E9A06E2E-DB89-43E3-820A-99A635F82F7F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F0F3A6A4-BCB3-4B7F-B309-0EDD52FC8D7A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{805A6F97-5784-40FD-AD93-084B0FB27EE0}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{31C9749E-A7B4-4416-AC94-CF3A0DBA46E1}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{47F69DC9-6081-4DF0-BEA5-A766E1F14A08}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{565D6269-CC79-4CD2-83DF-FAF85518EC1F}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{BEC4E462-0BCD-4DF7-96E7-95E18AA66369}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{F6D303A8-38EC-4593-B8A7-92B328723FC5}] => (Allow) C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3059317)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3063858)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3033890)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3068708)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 11 unter Windows 7 (KB3058515)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3054476)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3057839)

Error: (06/11/2015 11:34:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (06/11/2015 11:31:53 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (06/11/2015 11:31:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst parity_mathematics erreicht.


Microsoft Office:
=========================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore


==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
Percentage of memory in use: 89%
Total physical RAM: 1013.3 MB
Available physical RAM: 106.72 MB
Total Pagefile: 3024.08 MB
Available Pagefile: 447.13 MB
Total Virtual: 2047.88 MB
Available Virtual: 1839.02 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:85 GB) (Free:54.56 GB) NTFS
Drive d: () (Fixed) (Total:127.79 GB) (Free:127.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 4B51E00D)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=127.8 GB) - (Type=OF Extended)

==================== End of log ============================

--- --- ---

--- --- ---

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-06-2015
Ran by mediamarkt (administrator) on ZPC on 11-06-2015 12:14:57
Running from C:\Users\mediamarkt\Downloads
Loaded Profiles: mediamarkt (Available Profiles: mediamarkt & Gast)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SFB\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Symantec Corporation) C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Advanced Wheel Mouse\wh_exec.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Gracebyte Software) C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SSScheduler\enhanced_data_rates\zener_diode.exe
(Gracebyte Software) C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\ideal_gas_law.exe
(Gracebyte Software) C:\ProgramData\HP\Digital Imaging\Data\Destination\input_voltage_range\dslam.exe
(Kerio Technologies) C:\ProgramData\Avira\AntiVir Desktop\REPORTS\derivative\prochot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Samsung Electronics Co., Ltd.) C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\break_even_analysis\electric_field_gradient.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\McUICnt.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\print.exe
(Microsoft Corporation) C:\Windows\System32\reg.exe
(Microsoft Corporation) C:\Windows\System32\WPDShextAutoplay.exe
(Microsoft Corporation) C:\Windows\System32\typeperf.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\at.exe
(Microsoft Corporation) C:\Windows\System32\dxdiag.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe
(Google Inc.) C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Users\mediamarkt\AppData\Local\Google\Update\Install\{E061A9F3-6F43-488B-B31C-27A6EDB2C9B6}\43.0.2357.124_43.0.2357.81_chrome_updater.exe
(Google Inc.) C:\Users\mediamarkt\AppData\Local\temp\CR_105C2.tmp\setup.exe
() C:\Program Files\Ask.com\UpdateTask.exe
(Driver-Soft) C:\Users\mediamarkt\AppData\Local\temp\{00007844-ED63-F47}


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)
HKLM\...\Run: [NortonOnlineBackup] => C:\Program Files\Symantec\Norton Online Backup\NOBuClient.exe [926040 2010-03-05] (Symantec Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [ApnUpdater] => C:\Program Files\Ask.com\Updater\Updater.exe [1574176 2012-12-20] (Ask)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [WheelMouse] => C:\Advanced Wheel Mouse\wh_exec.exe [147456 2010-05-26] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [fuel_gauge] => C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SSScheduler\enhanced_data_rates\zener_diode.exe [216576 2013-08-26] (Gracebyte Software)
HKLM\...\Run: [debounce] => C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\ideal_gas_law.exe [216576 2012-12-03] (Gracebyte Software)
HKLM\...\Run: [magnetic_field] => C:\ProgramData\HP\Digital Imaging\Data\Destination\input_voltage_range\dslam.exe [216576 2013-09-26] (Gracebyte Software)
HKLM\...\Run: [boyles_law] => C:\ProgramData\Avira\AntiVir Desktop\REPORTS\derivative\prochot.exe [226304 2010-05-05] (Kerio Technologies)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [Google Update] => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-03-20] (Google Inc.)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5503768 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [lunch-kid] => C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe [189952 2015-06-04] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [garbage-rise] => C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe [201216 2015-05-24] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [reward-empty] => C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe [202752 2015-06-11] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [mouth-strip] => C:\Users\mediamarkt\AppData\Roaming\Mouth_jury\mouth_concerned.exe [188928 2015-06-11] ()
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [manner-mix] => C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [series-pay] => C:\Users\MEDIAM~1\AppData\Local\Temp\Series_send\seriesdeal.exe <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [expert-term] => C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [lunch-kid] => C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe [189952 2015-06-04] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [garbage-rise] => C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe [201216 2015-05-24] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [manner-mix] => C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [expert-term] => C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [reward-empty] => C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe [202752 2015-06-11] () <===== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-04-21]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-03-24]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=de-de
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.de/
URLSearchHook: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> DefaultScope {75B2CDF1-D948-46C3-8A8D-A3BA87EE9951} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_deBG438
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {75B2CDF1-D948-46C3-8A8D-A3BA87EE9951} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb203?a=6R8NiLcydL&search={searchTerms}&i=26
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {D1BEE7E8-1043-4A83-A7EB-6F08D3F57A0B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=320760c6-0ca1-4130-b8ef-1d3b6b274260&apn_sauid=999F043A-F624-475E-BE15-7E1303638725
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\mediamarkt\AppData\Roaming\Mozilla\Firefox\Profiles\bhqqihmg.default-1428402467411
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll [2009-06-23] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1208384110-4107883307-101704457-1000: @tools.google.com/Google Update;version=3 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin HKU\S-1-5-21-1208384110-4107883307-101704457-1000: @tools.google.com/Google Update;version=9 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: No Name - C:\Program Files\Web Assistant\Firefox [2012-08-07]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-04-21]
FF HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR Profile: C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl [2013-07-10]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [2013-07-10]
CHR Extension: (Bookmark Manager) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [2013-07-10]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-24]
CHR Extension: (Google Wallet) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-13]
CHR HKLM\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\mediamarkt\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.13.0.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files\Perion\NewTab\newTab.crx [Not Found]
CHR HKU\S-1-5-21-1208384110-4107883307-101704457-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
R3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2044248 2010-03-05] (Symantec Corporation)
R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 write_protect; C:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\battery_fuel_gauge\microelectromechanical.exe [214064 2013-08-11] (Lucersoft) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [107400 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-20] (Avira Operations GmbH & Co. KG)
S3 btwampfl; C:\windows\System32\drivers\btwampfl.sys [286248 2010-03-06] (Broadcom Corporation.)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-09-06] (Windows (R) 2003 DDK 3790 provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-12] (Avira GmbH)
R3 whfltr2k; C:\windows\System32\DRIVERS\whfltr2k.sys [7424 2009-09-16] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\MEDIAM~1\AppData\Local\Temp\catchme.sys [X]
S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-11 12:11 - 2015-06-11 12:14 - 00036467 _____ C:\Users\mediamarkt\Downloads\Addition.txt
2015-06-11 12:02 - 2015-06-11 12:14 - 00022352 _____ C:\Users\mediamarkt\Downloads\FRST.txt
2015-06-11 12:01 - 2015-06-11 12:15 - 00000000 ____D C:\FRST
2015-06-11 12:00 - 2015-06-11 12:01 - 01147904 _____ (Farbar) C:\Users\mediamarkt\Downloads\FRST.exe
2015-06-11 11:58 - 2015-06-11 11:58 - 00000000 _____ C:\windows\setuperr.log
2015-06-11 11:58 - 2015-06-11 11:58 - 00000000 _____ C:\windows\setupact.log
2015-06-11 11:57 - 2015-06-11 11:57 - 00000000 ___HD C:\Users\mediamarkt\AppData\Roaming\Mouth_jury
2015-06-11 11:42 - 2015-06-11 11:42 - 00001078 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-11 11:35 - 2015-06-11 11:35 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\GWX
2015-06-11 11:32 - 2015-06-11 11:32 - 00000000 __RSH C:\MSDOS.SYS
2015-06-11 11:32 - 2015-06-11 11:32 - 00000000 __RSH C:\IO.SYS
2015-06-11 09:31 - 2015-06-11 09:40 - 00000000 ____D C:\avast! sandbox
2015-06-10 21:07 - 2015-06-10 21:07 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\AVAST Software
2015-06-10 20:37 - 2015-06-10 20:37 - 00000000 ____D C:\Program Files\AVAST Software
2015-06-10 20:33 - 2015-06-10 20:34 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-10 19:51 - 2015-06-10 21:14 - 00000000 ____D C:\AdwCleaner
2015-06-10 17:14 - 2015-06-11 11:30 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 
2015-06-06 20:53 - 2015-06-10 21:30 - 00000000 ___HD C:\Users\mediamarkt\AppData\Local\Mouthprogram
2015-05-27 19:22 - 2015-06-10 21:33 - 00000000 ____D C:\ProgramData\ohcu
2015-05-24 22:31 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-24 22:05 - 2015-05-24 22:05 - 00116982 _____ C:\Users\mediamarkt\Downloads\Ausgleich nicht gedeckten Buchung Ihrer Bestellung DirectPay GmbH vom 16.05.2015.zip
2015-05-24 22:03 - 2015-06-05 22:07 - 00001088 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core.job
2015-05-24 21:55 - 2015-06-11 11:28 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-05-13 12:33 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-05-13 12:33 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-05-13 12:33 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-05-13 12:33 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-05-13 12:33 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\tracerpt.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\logman.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\typeperf.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\relog.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-05-13 12:33 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-05-13 12:33 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\diskperf.exe
2015-05-13 12:33 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-05-13 12:33 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-05-13 12:33 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-05-13 12:33 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-05-13 12:33 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-05-13 12:32 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\windows\system32\wpdshext.dll
2015-05-13 12:29 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-05-13 12:29 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-05-13 12:29 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-05-13 12:28 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-05-13 12:28 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-05-13 12:27 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-05-13 12:27 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-05-13 12:27 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-05-13 12:27 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-05-13 12:27 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-05-13 12:27 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-05-13 12:27 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-05-13 12:27 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-05-13 12:27 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-05-13 12:27 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-05-13 12:27 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-05-13 12:27 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-05-13 12:27 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-05-13 12:27 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-05-13 12:27 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-05-13 12:27 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-05-13 12:27 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-05-13 12:27 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 12:27 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-05-13 12:27 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-05-13 12:27 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-05-13 12:27 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-05-13 12:27 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-05-13 12:27 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-05-13 12:27 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-05-13 12:27 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-05-13 12:27 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-05-13 12:27 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-05-13 12:27 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-05-13 12:27 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\windows\system32\services.exe
2015-05-13 12:26 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-05-13 12:26 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-05-13 12:26 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-05-13 12:26 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-05-13 12:26 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\shimeng.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\aelupsvc.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe
2015-05-13 12:26 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-11 12:15 - 2015-04-07 11:00 - 01296766 _____ C:\windows\WindowsUpdate.log
2015-06-11 12:08 - 2011-06-29 20:34 - 00001140 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA.job
2015-06-11 12:03 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-11 12:03 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-11 11:48 - 2013-02-11 12:23 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-06-11 11:47 - 2013-02-11 12:23 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-06-11 11:47 - 2012-02-29 14:17 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-06-11 11:42 - 2014-08-16 23:02 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-11 11:41 - 2013-02-12 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-11 11:41 - 2013-02-12 23:23 - 00000000 ____D C:\Program Files\Avira
2015-06-11 11:39 - 2009-07-14 04:04 - 00000506 _____ C:\windows\win.ini
2015-06-11 11:30 - 2011-05-24 17:03 - 00000000 ____D C:\Users\mediamarkt
2015-06-11 11:30 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-11 11:30 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\wfp
2015-06-11 11:29 - 2015-04-24 11:22 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-11 11:29 - 2015-04-24 11:22 - 00000000 ____D C:\windows\system32\appraiser
2015-06-11 11:29 - 2015-04-04 21:53 - 00000000 ___SD C:\windows\system32\GWX
2015-06-11 11:29 - 2013-04-11 21:50 - 00000000 ____D C:\windows\system32\jmdp
2015-06-11 11:29 - 2012-09-02 10:31 - 00000000 ____D C:\windows\system32\WNLT
2015-06-11 11:29 - 2012-09-02 10:31 - 00000000 ____D C:\windows\system32\ARFC
2015-06-11 11:29 - 2011-06-29 20:35 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-11 11:29 - 2011-05-24 18:01 - 00000000 ____D C:\Users\Gast
2015-06-11 11:29 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\de-DE
2015-06-11 11:28 - 2015-03-24 16:12 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-06-11 11:28 - 2015-03-20 18:14 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-06-11 11:28 - 2013-02-12 23:24 - 00000000 ____D C:\Program Files\Ask.com
2015-06-11 11:28 - 2012-08-07 22:20 - 00000000 ____D C:\Program Files\Web Assistant
2015-06-11 11:28 - 2010-05-11 04:13 - 00000000 ____D C:\ProgramData\WinClon
2015-06-11 11:28 - 2010-05-11 04:07 - 00000000 ___RD C:\Program Files\Skype
2015-06-11 11:28 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-11 11:27 - 2009-07-14 04:37 - 00000000 ____D C:\windows\registration
2015-06-11 11:26 - 2011-06-29 21:01 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\SoftGrid Client
2015-06-11 11:26 - 2011-06-22 02:46 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\Skype
2015-06-11 11:26 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET
2015-06-11 11:25 - 2013-02-12 23:23 - 00000000 ____D C:\ProgramData\Avira
2015-06-11 11:25 - 2011-06-22 02:38 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\Google
2015-06-11 11:25 - 2010-05-11 04:06 - 00000000 ____D C:\ProgramData\Skype
2015-06-10 18:26 - 2009-07-14 04:37 - 00000000 ____D C:\windows\tracing
2015-06-10 17:14 - 2013-07-22 17:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-10 16:11 - 2011-07-08 21:29 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\CrashDumps
2015-06-10 11:26 - 2015-04-16 23:03 - 00000000 ____D C:\Users\mediamarkt\Desktop\Neuer Ordner
2015-06-09 19:29 - 2014-07-22 09:47 - 00000000 ____D C:\Users\mediamarkt\Desktop\Foto
2015-06-05 20:50 - 2015-04-06 19:47 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-05-27 20:53 - 2009-07-14 04:37 - 00000000 ____D C:\windows\rescache
2015-05-27 19:28 - 2011-06-29 20:35 - 00002376 _____ C:\Users\mediamarkt\Desktop\Google Chrome.lnk
2015-05-27 11:06 - 2015-03-25 20:58 - 00000416 _____ C:\windows\Tasks\DriverEasy Scheduled Scan.job
2015-05-24 23:14 - 2009-07-26 22:06 - 01620796 _____ C:\windows\system32\PerfStringBackup.INI
2015-05-24 23:03 - 2009-07-14 06:33 - 00269280 _____ C:\windows\system32\FNTCACHE.DAT
2015-05-24 23:00 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\AdvancedInstallers
2015-05-24 22:25 - 2013-10-20 15:22 - 00000000 ____D C:\windows\system32\MRT
2015-05-24 21:44 - 2012-12-05 10:31 - 137310008 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

==================== Files in the root of some directories =======

2013-07-23 13:13 - 2013-07-23 13:26 - 0000000 _____ () C:\ProgramData\g252qs.txt
2013-07-23 13:13 - 2013-07-23 13:13 - 0002687 _____ () C:\ProgramData\gqodeq.js
2015-04-21 19:20 - 2015-04-21 19:20 - 0000317 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe
C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe
C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe
C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe
C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe
C:\ProgramData\gqodeq.js


Some files in TEMP:
====================
C:\Users\mediamarkt\AppData\Local\temp\avgnt.exe
C:\Users\mediamarkt\AppData\Local\temp\ReimagePackage.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-04 11:14

==================== End of log ============================

--- --- ---

FRST Additions Logfile:
[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x86) Version: 08-06-2015
Ran by mediamarkt at 2015-06-11 12:11:17
Running from C:\Users\mediamarkt\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1208384110-4107883307-101704457-500 - Administrator - Disabled)
Gast (S-1-5-21-1208384110-4107883307-101704457-501 - Limited - Disabled) => C:\Users\Gast
mediamarkt (S-1-5-21-1208384110-4107883307-101704457-1000 - Administrator - Enabled) => C:\Users\mediamarkt

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader 9.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Advanced Wheel Mouse 6.0.0.010 (HKLM\...\WheelMouse) (Version:  - )
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.13.0 - Ask.com) <==== ATTENTION
Avira (HKLM\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.3.33021 - Ask.com) <==== ATTENTION
BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.44 - Broadcom Corporation)
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
ChargeableUSB (HKLM\...\{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}) (Version: 1.0.0.0 - SAMSUNG)
Copy (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.)
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
DJ_AIO_06_F2400_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
DriverEasy 4.9.1 (HKLM\...\DriverEasy_is1) (Version: 4.9.1.0 - Easeware)
Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0.0.13 - Samsung Electronics Co., LTD)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.1 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{F771F1D4-EDD4-4D68-82DC-811583C099CD}) (Version: 4.3.1 - Samsung)
Easy Resolution Manager (HKLM\...\{45535A5E-1F81-4F35-BE1D-43D10A7D03B4}) (Version: 1.0.0 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.0.10 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM\...\{DDF38EE7-3A53-4B4C-8924-CFFDF906091A}) (Version: 1.0.2 - Samsung)
F2400 (Version: 140.0.690.000 - Hewlett-Packard) Hidden
Fast Booting SW (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 1.6.0.0 - SAMSUNG)
Google Chrome (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{819CA3BC-2FF8-4811-B42F-421F7BFD3559}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IB Updater Service (HKLM\...\WNLT) (Version: 3.0.4.6 - ) <==== ATTENTION
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) SE Development Kit 6 Update 20 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160200}) (Version: 1.6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
MarketResearch (Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.13580 - Symantec Corporation)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
REALTEK PCIE Wireless LAN Software (HKLM\...\{A5C8BFF2-0044-4500-8BB5-BEB0D2335885}) (Version: 0136.10.0325 - REALTEK Semiconductor Corp.)
Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)
Samsung Support Center (HKLM\...\{749BDD29-D756-4B9B-8022-3E666A24C13F}) (Version: 1.1.3 - Samsung)
Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Toolbars (HKLM\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.)
Skype™ 7.5 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
Web Assistant 2.0.0.478 (HKLM\...\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1) (Version: 2.0.0.478 - IncrediBar) <==== ATTENTION
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4500 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\43.0.2357.81\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)

==================== Restore Points =========================

10-06-2015 10:23:17 Windows Update
10-06-2015 20:35:57 avast! antivirus system restore point
11-06-2015 10:12:33 Windows Update
11-06-2015 11:12:45 Wiederherstellungsvorgang

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2013-07-23 14:11 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {003F54B3-7AB6-42B7-BEC8-0B17C1D39DBB} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-12-14] (SAMSUNG Electronics)
Task: {0C2367AD-FD7A-41B9-BE3D-B44CBB026E0B} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SFB\SmartRestarter.exe [2010-05-01] (Samsung Electronics Co., Ltd.)
Task: {0E02F341-1B47-436A-9FB1-EC40E5C24534} - System32\Tasks\{8FCB4350-3E6F-4F98-953B-9CFFCE593447} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {0F98D76C-30C1-4113-8148-CC3117B8AA53} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {12DFB32C-5F80-44DE-B00E-B37788C004FC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {1B097FD8-9484-4C16-8A5C-0BFA2215AA0E} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-04-07] (Samsung Electronics Co., Ltd.)
Task: {23AADD04-DC10-4526-BA91-E105A1141EB9} - System32\Tasks\{787D9726-6261-44FD-872F-068DBD13400E} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {339B0809-AB1C-478A-8573-C713C6793DB8} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-20] () <==== ATTENTION
Task: {351E558F-1A71-4E0D-9B57-52B2066BE8EE} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1208384110-4107883307-101704457-1000
Task: {37BECC5F-7248-496A-9002-D6260D04140F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {4BA01F99-1B40-4F90-95DD-1223FBAAF33B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {502895E6-DE5A-4420-8658-1C8AC55DCEA3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-11] (Adobe Systems Incorporated)
Task: {54CC7029-4876-4EF0-A187-52BD3C71AA8F} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)
Task: {5DB0F207-6DEC-4326-9607-3D377D13173A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {644C5AFF-BAEE-4843-AFF8-56F6A24C7E26} - System32\Tasks\{4B4CB786-1352-4602-ACAB-C7DDC4945E23} => pcalua.exe -a "C:\Users\mediamarkt\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\chipset INFs"
Task: {72E91422-683B-48F5-B57D-914399A1B3C9} - System32\Tasks\{30E22019-D725-43EC-AFDC-05EE10C7E508} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {798B0A52-F0CF-4CB2-B0B7-AD5F03951B1C} - System32\Tasks\{903E25FC-8195-43B7-B24C-96FAD5975327} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {815C756F-C467-4F89-B0A1-94AD697548F6} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {86B2B0C1-D204-4A36-816E-26DE522307EF} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-03-29] (SAMSUNG Electronics co., LTD.)
Task: {9525C70A-34F7-465B-8ABA-C6DE532D0DED} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-02-03] ()
Task: {98FF545A-E906-4723-9D56-9FFBAD8B3BFF} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-04-20] (Samsung Electronics)
Task: {A8F2F4DE-A48D-4646-983D-0A28B2FB6C69} - System32\Tasks\{EEA07B5C-532A-4A58-A36A-27CB9A280384} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Local\temp\Temp2_chipset INFs.zip\chipset INFs\Ssetup.exe"
Task: {AFA52ED2-F3A8-406E-BB69-7A93FF34BE2B} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)
Task: {B86F5284-BF3F-4D13-AC9E-25A27839C1FA} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [2015-04-01] (Easeware)
Task: {D5AE3AF4-BE12-4F3E-B13A-CC24C31EC9BC} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {F36C41CC-638D-4EF0-9D97-5A2D59FD8C36} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F6989F32-2E4F-4A79-A4BC-7863CD9C32A4} - System32\Tasks\{C6B3B211-1EE9-4F64-B428-770A5FEF454B} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2010-05-26 05:47 - 2010-05-26 05:47 - 00036864 _____ () C:\Advanced Wheel Mouse\wh_hook.dll
2010-05-11 04:11 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2010-05-26 05:47 - 2010-05-26 05:47 - 00147456 _____ () C:\Advanced Wheel Mouse\wh_exec.exe
2015-02-19 23:40 - 2015-02-19 23:40 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-03-25 23:17 - 2015-03-25 23:17 - 00172032 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2015-03-25 23:16 - 2011-11-29 21:00 - 00059392 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2430E4FC

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3E69CAC2-A400-40DC-A5E2-6818C95E4510}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{11B032AD-B25E-41EF-833A-7E266C118A3A}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{C3194230-0312-4B6A-8898-A6654C609796}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{61D7A7C5-7969-4E66-A5BA-EA667FD225BF}] => (Allow) svchost.exe
FirewallRules: [{5877F1F9-FFCA-47E6-B051-5C4399CF11A0}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{E2276A8B-B36B-4B9D-9041-FB32D55AD42D}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{DBB6AF3F-F34E-4A73-B785-475B81CA6E7B}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [TCP Query User{E5637C96-A8E3-4D97-8171-AE4F3027A2A7}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{C7E4D1FC-A37C-493D-B628-5745A6F8F61B}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [{7F99A8DB-7231-43B7-BD6E-EBA13B1FE320}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BEC073FE-40D8-46CC-AA1C-E771DE01E6F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{164F9DF0-41B9-4278-AD8F-C717EF14D2A7}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A8C30DF8-7E74-4F2D-9E80-400B097D6984}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F7D57CB5-F4B6-43B8-9851-21F338E17241}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{056813C1-AD67-4F53-BACE-493F9A071315}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2F832820-C237-4BBF-AF8A-F1E1AB16A9B7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{79C8FB1C-8EAD-43EC-B284-5C30CCACD352}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CE22F886-B590-4478-8FF8-876EC3A7E234}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{198DBA44-9E5E-4448-B0A8-AB511633E458}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B74913CC-BF83-4864-8DAA-C1BF4F421FF3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3F1F00B4-2521-499D-8F84-D25E7D4E17D8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{42AEBA0A-A089-472D-9EF3-BB49A1EA7044}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6AFC6C2B-EC76-4DED-ABE1-947C610986BA}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B041A9E-6D11-40D4-B24D-EB8CAA8CEAB3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2148DDA5-B0E7-4A72-8650-12FECF486F88}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{717A41EB-6F70-46E2-BB8A-194730575C77}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EC8CAC0E-6B48-46B6-947E-96AA7C19D05A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2AACBAC3-3C5E-4F96-9043-D625C1CF2092}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B22D737-8A35-4E62-895E-A45E47636D8A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{554DCC80-0446-46E0-BC5D-DA1593DEC1A7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{59469A6E-A1D9-48F7-B252-653059167864}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{FC0F87BC-6439-4676-B169-740CB097A62B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8A7DF619-22B7-4723-8ED6-9528ACAA419E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{113A0D73-B95A-4D5D-A394-20D44AFB83EF}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{6A80A209-9A02-4CF5-84BF-ED901A6E5CCE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{5FA560A7-D15C-4C35-BC4E-0998A5C67B47}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{1CEF47A3-6FE5-41E4-AD7B-55471BADE1CD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{032617A6-028A-4CCC-862A-0719AE9B6DED}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{3A463978-132D-44C5-B37A-2393B9FA36A5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{E9A06E2E-DB89-43E3-820A-99A635F82F7F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F0F3A6A4-BCB3-4B7F-B309-0EDD52FC8D7A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{805A6F97-5784-40FD-AD93-084B0FB27EE0}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{31C9749E-A7B4-4416-AC94-CF3A0DBA46E1}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{47F69DC9-6081-4DF0-BEA5-A766E1F14A08}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{565D6269-CC79-4CD2-83DF-FAF85518EC1F}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{BEC4E462-0BCD-4DF7-96E7-95E18AA66369}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{F6D303A8-38EC-4593-B8A7-92B328723FC5}] => (Allow) C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3059317)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3063858)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3033890)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3068708)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 11 unter Windows 7 (KB3058515)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3054476)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3057839)

Error: (06/11/2015 11:34:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (06/11/2015 11:31:53 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (06/11/2015 11:31:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst parity_mathematics erreicht.


Microsoft Office:
=========================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore


==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
Percentage of memory in use: 89%
Total physical RAM: 1013.3 MB
Available physical RAM: 103.49 MB
Total Pagefile: 3024.08 MB
Available Pagefile: 452.46 MB
Total Virtual: 2047.88 MB
Available Virtual: 1839.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:85 GB) (Free:54.6 GB) NTFS
Drive d: () (Fixed) (Total:127.79 GB) (Free:127.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 4B51E00D)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=127.8 GB) - (Type=OF Extended)

==================== End of log ============================

--- --- ---

--- --- ---

paintball · 11.06.2015, 12:22

FRST Additions Logfile:
[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x86) Version: 08-06-2015
Ran by mediamarkt at 2015-06-11 12:59:22
Running from C:\Users\mediamarkt\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1208384110-4107883307-101704457-500 - Administrator - Disabled)
Gast (S-1-5-21-1208384110-4107883307-101704457-501 - Limited - Disabled) => C:\Users\Gast
mediamarkt (S-1-5-21-1208384110-4107883307-101704457-1000 - Administrator - Enabled) => C:\Users\mediamarkt

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader 9.1 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Advanced Wheel Mouse 6.0.0.010 (HKLM\...\WheelMouse) (Version:  - )
Ask Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.13.0 - Ask.com) <==== ATTENTION
Avira (HKLM\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Avira SearchFree Toolbar plus Web Protection Updater (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.3.33021 - Ask.com) <==== ATTENTION
BatteryLifeExtender (HKLM\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.44 - Broadcom Corporation)
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
ChargeableUSB (HKLM\...\{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}) (Version: 1.0.0.0 - SAMSUNG)
Copy (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3911 - CyberLink Corp.)
Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.212.000 - Hewlett-Packard) Hidden
DJ_AIO_06_F2400_SW_Min (Version: 140.0.690.000 - Hewlett-Packard) Hidden
DriverEasy 4.9.1 (HKLM\...\DriverEasy_is1) (Version: 4.9.1.0 - Easeware)
Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0.0.13 - Samsung Electronics Co., LTD)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.1 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{F771F1D4-EDD4-4D68-82DC-811583C099CD}) (Version: 4.3.1 - Samsung)
Easy Resolution Manager (HKLM\...\{45535A5E-1F81-4F35-BE1D-43D10A7D03B4}) (Version: 1.0.0 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.0.10 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM\...\{DDF38EE7-3A53-4B4C-8924-CFFDF906091A}) (Version: 1.0.2 - Samsung)
F2400 (Version: 140.0.690.000 - Hewlett-Packard) Hidden
Fast Booting SW (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 1.6.0.0 - SAMSUNG)
Google Chrome (HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
GPBaseService2 (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{819CA3BC-2FF8-4811-B42F-421F7BFD3559}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IB Updater Service (HKLM\...\WNLT) (Version: 3.0.4.6 - ) <==== ATTENTION
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Java 8 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) SE Development Kit 6 Update 20 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160200}) (Version: 1.6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
MarketResearch (Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40624.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.13580 - Symantec Corporation)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
REALTEK PCIE Wireless LAN Software (HKLM\...\{A5C8BFF2-0044-4500-8BB5-BEB0D2335885}) (Version: 0136.10.0325 - REALTEK Semiconductor Corp.)
Samsung Recovery Solution 4 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 4.0.0.6 - Samsung)
Samsung Support Center (HKLM\...\{749BDD29-D756-4B9B-8022-3E666A24C13F}) (Version: 1.1.3 - Samsung)
Samsung Update Plus (HKLM\...\{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Toolbars (HKLM\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.)
Skype™ 7.5 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.10.0 - Synaptics Incorporated)
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.212.000 - Hewlett-Packard) Hidden
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
Web Assistant 2.0.0.478 (HKLM\...\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1) (Version: 2.0.0.478 - IncrediBar) <==== ATTENTION
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4500 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\43.0.2357.81\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1208384110-4107883307-101704457-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\psuser.dll (Google Inc.)

==================== Restore Points =========================

10-06-2015 10:23:17 Windows Update
10-06-2015 20:35:57 avast! antivirus system restore point
11-06-2015 10:12:33 Windows Update
11-06-2015 11:12:45 Wiederherstellungsvorgang

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2013-07-23 14:11 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {003F54B3-7AB6-42B7-BEC8-0B17C1D39DBB} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-12-14] (SAMSUNG Electronics)
Task: {0C2367AD-FD7A-41B9-BE3D-B44CBB026E0B} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SFB\SmartRestarter.exe [2010-05-01] (Samsung Electronics Co., Ltd.)
Task: {0E02F341-1B47-436A-9FB1-EC40E5C24534} - System32\Tasks\{8FCB4350-3E6F-4F98-953B-9CFFCE593447} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {0F98D76C-30C1-4113-8148-CC3117B8AA53} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {12DFB32C-5F80-44DE-B00E-B37788C004FC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {1B097FD8-9484-4C16-8A5C-0BFA2215AA0E} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-04-07] (Samsung Electronics Co., Ltd.)
Task: {23AADD04-DC10-4526-BA91-E105A1141EB9} - System32\Tasks\{787D9726-6261-44FD-872F-068DBD13400E} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {339B0809-AB1C-478A-8573-C713C6793DB8} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-20] () <==== ATTENTION
Task: {351E558F-1A71-4E0D-9B57-52B2066BE8EE} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1208384110-4107883307-101704457-1000
Task: {37BECC5F-7248-496A-9002-D6260D04140F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {4BA01F99-1B40-4F90-95DD-1223FBAAF33B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {502895E6-DE5A-4420-8658-1C8AC55DCEA3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-11] (Adobe Systems Incorporated)
Task: {54CC7029-4876-4EF0-A187-52BD3C71AA8F} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-11-19] (Samsung Electronics. Co. Ltd.)
Task: {5DB0F207-6DEC-4326-9607-3D377D13173A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-20] (Google Inc.)
Task: {644C5AFF-BAEE-4843-AFF8-56F6A24C7E26} - System32\Tasks\{4B4CB786-1352-4602-ACAB-C7DDC4945E23} => pcalua.exe -a "C:\Users\mediamarkt\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\chipset INFs"
Task: {72E91422-683B-48F5-B57D-914399A1B3C9} - System32\Tasks\{30E22019-D725-43EC-AFDC-05EE10C7E508} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {798B0A52-F0CF-4CB2-B0B7-AD5F03951B1C} - System32\Tasks\{903E25FC-8195-43B7-B24C-96FAD5975327} => C:\Users\mediamarkt\Downloads\LTconfig.exe [2013-02-12] ()
Task: {815C756F-C467-4F89-B0A1-94AD697548F6} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {86B2B0C1-D204-4A36-816E-26DE522307EF} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-03-29] (SAMSUNG Electronics co., LTD.)
Task: {9525C70A-34F7-465B-8ABA-C6DE532D0DED} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-02-03] ()
Task: {98FF545A-E906-4723-9D56-9FFBAD8B3BFF} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-04-20] (Samsung Electronics)
Task: {A8F2F4DE-A48D-4646-983D-0A28B2FB6C69} - System32\Tasks\{EEA07B5C-532A-4A58-A36A-27CB9A280384} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Local\temp\Temp2_chipset INFs.zip\chipset INFs\Ssetup.exe"
Task: {AFA52ED2-F3A8-406E-BB69-7A93FF34BE2B} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2010-01-19] (SEC)
Task: {B86F5284-BF3F-4D13-AC9E-25A27839C1FA} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [2015-04-01] (Easeware)
Task: {D5AE3AF4-BE12-4F3E-B13A-CC24C31EC9BC} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {F36C41CC-638D-4EF0-9D97-5A2D59FD8C36} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {F6989F32-2E4F-4A79-A4BC-7863CD9C32A4} - System32\Tasks\{C6B3B211-1EE9-4F64-B428-770A5FEF454B} => pcalua.exe -a "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs\Ssetup.exe" -d "C:\Users\mediamarkt\AppData\Roaming\Easeware\DriverEasy\drivers\uouesf15.5oc\chipset INFs\chipset INFs"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA.job => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2010-05-26 05:47 - 2010-05-26 05:47 - 00036864 _____ () C:\Advanced Wheel Mouse\wh_hook.dll
2010-05-11 04:11 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2010-05-26 05:47 - 2010-05-26 05:47 - 00147456 _____ () C:\Advanced Wheel Mouse\wh_exec.exe
2015-02-19 23:40 - 2015-02-19 23:40 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-03-25 23:17 - 2015-03-25 23:17 - 00172032 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2015-03-25 23:16 - 2011-11-29 21:00 - 00059392 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:2430E4FC

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3E69CAC2-A400-40DC-A5E2-6818C95E4510}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{11B032AD-B25E-41EF-833A-7E266C118A3A}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{C3194230-0312-4B6A-8898-A6654C609796}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{61D7A7C5-7969-4E66-A5BA-EA667FD225BF}] => (Allow) svchost.exe
FirewallRules: [{5877F1F9-FFCA-47E6-B051-5C4399CF11A0}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{E2276A8B-B36B-4B9D-9041-FB32D55AD42D}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{DBB6AF3F-F34E-4A73-B785-475B81CA6E7B}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [TCP Query User{E5637C96-A8E3-4D97-8171-AE4F3027A2A7}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{C7E4D1FC-A37C-493D-B628-5745A6F8F61B}C:\windows\system32\javaw.exe] => (Block) C:\windows\system32\javaw.exe
FirewallRules: [{7F99A8DB-7231-43B7-BD6E-EBA13B1FE320}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{BEC073FE-40D8-46CC-AA1C-E771DE01E6F2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{164F9DF0-41B9-4278-AD8F-C717EF14D2A7}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A8C30DF8-7E74-4F2D-9E80-400B097D6984}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F7D57CB5-F4B6-43B8-9851-21F338E17241}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{056813C1-AD67-4F53-BACE-493F9A071315}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2F832820-C237-4BBF-AF8A-F1E1AB16A9B7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{79C8FB1C-8EAD-43EC-B284-5C30CCACD352}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{CE22F886-B590-4478-8FF8-876EC3A7E234}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{198DBA44-9E5E-4448-B0A8-AB511633E458}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{B74913CC-BF83-4864-8DAA-C1BF4F421FF3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3F1F00B4-2521-499D-8F84-D25E7D4E17D8}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{42AEBA0A-A089-472D-9EF3-BB49A1EA7044}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{6AFC6C2B-EC76-4DED-ABE1-947C610986BA}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B041A9E-6D11-40D4-B24D-EB8CAA8CEAB3}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2148DDA5-B0E7-4A72-8650-12FECF486F88}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{717A41EB-6F70-46E2-BB8A-194730575C77}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{EC8CAC0E-6B48-46B6-947E-96AA7C19D05A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2AACBAC3-3C5E-4F96-9043-D625C1CF2092}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{4B22D737-8A35-4E62-895E-A45E47636D8A}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{554DCC80-0446-46E0-BC5D-DA1593DEC1A7}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{59469A6E-A1D9-48F7-B252-653059167864}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{FC0F87BC-6439-4676-B169-740CB097A62B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8A7DF619-22B7-4723-8ED6-9528ACAA419E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{113A0D73-B95A-4D5D-A394-20D44AFB83EF}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{6A80A209-9A02-4CF5-84BF-ED901A6E5CCE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{5FA560A7-D15C-4C35-BC4E-0998A5C67B47}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{1CEF47A3-6FE5-41E4-AD7B-55471BADE1CD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{032617A6-028A-4CCC-862A-0719AE9B6DED}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{3A463978-132D-44C5-B37A-2393B9FA36A5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{E9A06E2E-DB89-43E3-820A-99A635F82F7F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F0F3A6A4-BCB3-4B7F-B309-0EDD52FC8D7A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{805A6F97-5784-40FD-AD93-084B0FB27EE0}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{31C9749E-A7B4-4416-AC94-CF3A0DBA46E1}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{47F69DC9-6081-4DF0-BEA5-A766E1F14A08}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{565D6269-CC79-4CD2-83DF-FAF85518EC1F}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{BEC4E462-0BCD-4DF7-96E7-95E18AA66369}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{F6D303A8-38EC-4593-B8A7-92B328723FC5}] => (Allow) C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Description: Broadcom BCM2070 Bluetooth 3.0 + HS USB Device
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3059317)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3063858)

Error: (06/11/2015 11:38:59 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3033890)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3068708)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 11 unter Windows 7 (KB3058515)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für Windows 7 (KB3054476)

Error: (06/11/2015 11:38:54 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB3057839)

Error: (06/11/2015 11:34:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (06/11/2015 11:31:53 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (06/11/2015 11:31:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst parity_mathematics erreicht.


Microsoft Office:
=========================
Error: (06/11/2015 11:54:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:31:07 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0

Error: (06/11/2015 11:13:22 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/11/2015 10:13:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddWin32ServiceFiles: Unable to back up image of service unicode since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (06/10/2015 08:35:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {9e0deae6-ce9d-45f0-ada7-8a0c572300da}

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (06/10/2015 06:37:46 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (06/10/2015 06:37:38 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore


==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
Percentage of memory in use: 87%
Total physical RAM: 1013.3 MB
Available physical RAM: 128.96 MB
Total Pagefile: 3024.08 MB
Available Pagefile: 406.2 MB
Total Virtual: 2047.88 MB
Available Virtual: 1843.02 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:85 GB) (Free:54.18 GB) NTFS
Drive d: () (Fixed) (Total:127.79 GB) (Free:127.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 4B51E00D)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=85 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=127.8 GB) - (Type=OF Extended)

==================== End of log ============================

--- --- ---

--- --- ---

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-06-2015
Ran by mediamarkt (administrator) on ZPC on 11-06-2015 12:27:35
Running from C:\Users\mediamarkt\Downloads
Loaded Profiles: mediamarkt (Available Profiles: mediamarkt & Gast)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SFB\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Symantec Corporation) C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Advanced Wheel Mouse\wh_exec.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Gracebyte Software) C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SSScheduler\enhanced_data_rates\zener_diode.exe
(Gracebyte Software) C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\ideal_gas_law.exe
(Gracebyte Software) C:\ProgramData\HP\Digital Imaging\Data\Destination\input_voltage_range\dslam.exe
(Kerio Technologies) C:\ProgramData\Avira\AntiVir Desktop\REPORTS\derivative\prochot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Samsung Electronics Co., Ltd.) C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\break_even_analysis\electric_field_gradient.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\McUICnt.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\print.exe
(Microsoft Corporation) C:\Windows\System32\reg.exe
(Microsoft Corporation) C:\Windows\System32\WPDShextAutoplay.exe
(Microsoft Corporation) C:\Windows\System32\typeperf.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\at.exe
(Microsoft Corporation) C:\Windows\System32\dxdiag.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Driver-Soft) C:\Users\mediamarkt\AppData\Local\temp\{00007844-ED63-F47}


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)
HKLM\...\Run: [NortonOnlineBackup] => C:\Program Files\Symantec\Norton Online Backup\NOBuClient.exe [926040 2010-03-05] (Symantec Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [ApnUpdater] => C:\Program Files\Ask.com\Updater\Updater.exe [1574176 2012-12-20] (Ask)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [WheelMouse] => C:\Advanced Wheel Mouse\wh_exec.exe [147456 2010-05-26] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [fuel_gauge] => C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SSScheduler\enhanced_data_rates\zener_diode.exe [216576 2013-08-26] (Gracebyte Software)
HKLM\...\Run: [debounce] => C:\ProgramData\Microsoft\IdentityCRL\production\inorganic_chemistry\ideal_gas_law.exe [216576 2012-12-03] (Gracebyte Software)
HKLM\...\Run: [magnetic_field] => C:\ProgramData\HP\Digital Imaging\Data\Destination\input_voltage_range\dslam.exe [216576 2013-09-26] (Gracebyte Software)
HKLM\...\Run: [boyles_law] => C:\ProgramData\Avira\AntiVir Desktop\REPORTS\derivative\prochot.exe [226304 2010-05-05] (Kerio Technologies)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [Google Update] => C:\Users\mediamarkt\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-03-20] (Google Inc.)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5503768 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [lunch-kid] => C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe [189952 2015-06-04] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [garbage-rise] => C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe [201216 2015-05-24] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [reward-empty] => C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe [202752 2015-06-11] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [mouth-strip] => C:\Users\mediamarkt\AppData\Roaming\Mouth_jury\mouth_concerned.exe [188928 2015-06-11] ()
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [manner-mix] => C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [series-pay] => C:\Users\MEDIAM~1\AppData\Local\Temp\Series_send\seriesdeal.exe <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Run: [expert-term] => C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [lunch-kid] => C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe [189952 2015-06-04] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [garbage-rise] => C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe [201216 2015-05-24] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [manner-mix] => C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [expert-term] => C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe [218624 2015-06-05] () <===== ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\RunOnce: [reward-empty] => C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe [202752 2015-06-11] () <===== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-04-21]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-03-24]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SKY2&ocid=SKY2DHP&osmkt=de-de
HKU\S-1-5-21-1208384110-4107883307-101704457-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.de/
URLSearchHook: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> DefaultScope {75B2CDF1-D948-46C3-8A8D-A3BA87EE9951} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_deBG438
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {75B2CDF1-D948-46C3-8A8D-A3BA87EE9951} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb203?a=6R8NiLcydL&search={searchTerms}&i=26
SearchScopes: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> {D1BEE7E8-1043-4A83-A7EB-6F08D3F57A0B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=320760c6-0ca1-4130-b8ef-1d3b6b274260&apn_sauid=999F043A-F624-475E-BE15-7E1303638725
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-1208384110-4107883307-101704457-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_40-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\mediamarkt\AppData\Roaming\Mozilla\Firefox\Profiles\bhqqihmg.default-1428402467411
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll [2009-06-23] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1208384110-4107883307-101704457-1000: @tools.google.com/Google Update;version=3 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin HKU\S-1-5-21-1208384110-4107883307-101704457-1000: @tools.google.com/Google Update;version=9 -> C:\Users\mediamarkt\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: No Name - C:\Program Files\Web Assistant\Firefox [2012-08-07]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-04-21]
FF HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-1208384110-4107883307-101704457-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR Profile: C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl [2013-07-10]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [2013-07-10]
CHR Extension: (Bookmark Manager) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [2013-07-10]
CHR Extension: (No Name) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-24]
CHR Extension: (Google Wallet) - C:\Users\mediamarkt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-13]
CHR HKLM\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\mediamarkt\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.13.0.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files\Perion\NewTab\newTab.crx [Not Found]
CHR HKU\S-1-5-21-1208384110-4107883307-101704457-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - https://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\mediamarkt\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
R3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
R2 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2044248 2010-03-05] (Symantec Corporation)
R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 write_protect; C:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\battery_fuel_gauge\microelectromechanical.exe [214064 2013-08-11] (Lucersoft) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [107400 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [136216 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-20] (Avira Operations GmbH & Co. KG)
S3 btwampfl; C:\windows\System32\drivers\btwampfl.sys [286248 2010-03-06] (Broadcom Corporation.)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2010-09-06] (Windows (R) 2003 DDK 3790 provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-12] (Avira GmbH)
R3 whfltr2k; C:\windows\System32\DRIVERS\whfltr2k.sys [7424 2009-09-16] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\MEDIAM~1\AppData\Local\Temp\catchme.sys [X]
S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-11 12:11 - 2015-06-11 12:27 - 00036763 _____ C:\Users\mediamarkt\Downloads\Addition.txt
2015-06-11 12:02 - 2015-06-11 12:27 - 00021926 _____ C:\Users\mediamarkt\Downloads\FRST.txt
2015-06-11 12:01 - 2015-06-11 12:28 - 00000000 ____D C:\FRST
2015-06-11 12:00 - 2015-06-11 12:01 - 01147904 _____ (Farbar) C:\Users\mediamarkt\Downloads\FRST.exe
2015-06-11 11:58 - 2015-06-11 11:58 - 00000000 _____ C:\windows\setuperr.log
2015-06-11 11:58 - 2015-06-11 11:58 - 00000000 _____ C:\windows\setupact.log
2015-06-11 11:57 - 2015-06-11 11:57 - 00000000 ___HD C:\Users\mediamarkt\AppData\Roaming\Mouth_jury
2015-06-11 11:42 - 2015-06-11 11:42 - 00001078 _____ C:\Users\Public\Desktop\Avira.lnk
2015-06-11 11:35 - 2015-06-11 11:35 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\GWX
2015-06-11 11:32 - 2015-06-11 11:32 - 00000000 __RSH C:\MSDOS.SYS
2015-06-11 11:32 - 2015-06-11 11:32 - 00000000 __RSH C:\IO.SYS
2015-06-11 09:31 - 2015-06-11 09:40 - 00000000 ____D C:\avast! sandbox
2015-06-10 21:07 - 2015-06-10 21:07 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\AVAST Software
2015-06-10 20:37 - 2015-06-10 20:37 - 00000000 ____D C:\Program Files\AVAST Software
2015-06-10 20:33 - 2015-06-10 20:34 - 00000000 ____D C:\ProgramData\AVAST Software
2015-06-10 19:51 - 2015-06-10 21:14 - 00000000 ____D C:\AdwCleaner
2015-06-10 17:14 - 2015-06-11 11:30 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 
2015-06-06 20:53 - 2015-06-10 21:30 - 00000000 ___HD C:\Users\mediamarkt\AppData\Local\Mouthprogram
2015-05-27 19:22 - 2015-06-10 21:33 - 00000000 ____D C:\ProgramData\ohcu
2015-05-24 22:31 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-24 22:05 - 2015-05-24 22:05 - 00116982 _____ C:\Users\mediamarkt\Downloads\Ausgleich nicht gedeckten Buchung Ihrer Bestellung DirectPay GmbH vom 16.05.2015.zip
2015-05-24 22:03 - 2015-06-05 22:07 - 00001088 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000Core.job
2015-05-24 21:55 - 2015-06-11 11:28 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-05-13 12:33 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-05-13 12:33 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-05-13 12:33 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-05-13 12:33 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-05-13 12:33 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\sechost.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-05-13 12:33 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\tracerpt.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\logman.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\typeperf.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-05-13 12:33 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\relog.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-05-13 12:33 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-05-13 12:33 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-05-13 12:33 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\diskperf.exe
2015-05-13 12:33 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-05-13 12:33 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-05-13 12:33 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-05-13 12:33 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-05-13 12:33 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-05-13 12:32 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\windows\system32\wpdshext.dll
2015-05-13 12:29 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-05-13 12:29 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-05-13 12:29 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-05-13 12:28 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-05-13 12:28 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-05-13 12:27 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-05-13 12:27 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-05-13 12:27 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-05-13 12:27 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-05-13 12:27 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-05-13 12:27 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-05-13 12:27 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-05-13 12:27 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-05-13 12:27 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-05-13 12:27 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-05-13 12:27 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-05-13 12:27 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-05-13 12:27 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-05-13 12:27 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-05-13 12:27 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-05-13 12:27 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-05-13 12:27 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-05-13 12:27 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 12:27 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-05-13 12:27 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-05-13 12:27 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-05-13 12:27 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-05-13 12:27 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-05-13 12:27 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-05-13 12:27 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-05-13 12:27 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-05-13 12:27 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-05-13 12:27 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-05-13 12:27 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-05-13 12:27 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\windows\system32\services.exe
2015-05-13 12:26 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-05-13 12:26 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-05-13 12:26 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-05-13 12:26 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-05-13 12:26 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\shimeng.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\aelupsvc.dll
2015-05-13 12:26 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe
2015-05-13 12:26 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-11 12:44 - 2013-02-11 12:23 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-06-11 12:28 - 2015-04-07 11:00 - 01319850 _____ C:\windows\WindowsUpdate.log
2015-06-11 12:25 - 2011-06-29 20:34 - 00001140 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1208384110-4107883307-101704457-1000UA.job
2015-06-11 12:03 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-11 12:03 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-11 11:47 - 2013-02-11 12:23 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-06-11 11:47 - 2012-02-29 14:17 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-06-11 11:42 - 2014-08-16 23:02 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-11 11:41 - 2013-02-12 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-11 11:41 - 2013-02-12 23:23 - 00000000 ____D C:\Program Files\Avira
2015-06-11 11:39 - 2009-07-14 04:04 - 00000506 _____ C:\windows\win.ini
2015-06-11 11:30 - 2011-05-24 17:03 - 00000000 ____D C:\Users\mediamarkt
2015-06-11 11:30 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-06-11 11:30 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\wfp
2015-06-11 11:29 - 2015-04-24 11:22 - 00000000 ___SD C:\windows\system32\CompatTel
2015-06-11 11:29 - 2015-04-24 11:22 - 00000000 ____D C:\windows\system32\appraiser
2015-06-11 11:29 - 2015-04-04 21:53 - 00000000 ___SD C:\windows\system32\GWX
2015-06-11 11:29 - 2013-04-11 21:50 - 00000000 ____D C:\windows\system32\jmdp
2015-06-11 11:29 - 2012-09-02 10:31 - 00000000 ____D C:\windows\system32\WNLT
2015-06-11 11:29 - 2012-09-02 10:31 - 00000000 ____D C:\windows\system32\ARFC
2015-06-11 11:29 - 2011-06-29 20:35 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-11 11:29 - 2011-05-24 18:01 - 00000000 ____D C:\Users\Gast
2015-06-11 11:29 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\de-DE
2015-06-11 11:28 - 2015-03-24 16:12 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-06-11 11:28 - 2015-03-20 18:14 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-06-11 11:28 - 2013-02-12 23:24 - 00000000 ____D C:\Program Files\Ask.com
2015-06-11 11:28 - 2012-08-07 22:20 - 00000000 ____D C:\Program Files\Web Assistant
2015-06-11 11:28 - 2010-05-11 04:13 - 00000000 ____D C:\ProgramData\WinClon
2015-06-11 11:28 - 2010-05-11 04:07 - 00000000 ___RD C:\Program Files\Skype
2015-06-11 11:28 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-11 11:27 - 2009-07-14 04:37 - 00000000 ____D C:\windows\registration
2015-06-11 11:26 - 2011-06-29 21:01 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\SoftGrid Client
2015-06-11 11:26 - 2011-06-22 02:46 - 00000000 ____D C:\Users\mediamarkt\AppData\Roaming\Skype
2015-06-11 11:26 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET
2015-06-11 11:25 - 2013-02-12 23:23 - 00000000 ____D C:\ProgramData\Avira
2015-06-11 11:25 - 2011-06-22 02:38 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\Google
2015-06-11 11:25 - 2010-05-11 04:06 - 00000000 ____D C:\ProgramData\Skype
2015-06-10 18:26 - 2009-07-14 04:37 - 00000000 ____D C:\windows\tracing
2015-06-10 17:14 - 2013-07-22 17:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-10 16:11 - 2011-07-08 21:29 - 00000000 ____D C:\Users\mediamarkt\AppData\Local\CrashDumps
2015-06-10 11:26 - 2015-04-16 23:03 - 00000000 ____D C:\Users\mediamarkt\Desktop\Neuer Ordner
2015-06-09 19:29 - 2014-07-22 09:47 - 00000000 ____D C:\Users\mediamarkt\Desktop\Foto
2015-06-05 20:50 - 2015-04-06 19:47 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-05-27 20:53 - 2009-07-14 04:37 - 00000000 ____D C:\windows\rescache
2015-05-27 19:28 - 2011-06-29 20:35 - 00002376 _____ C:\Users\mediamarkt\Desktop\Google Chrome.lnk
2015-05-27 11:06 - 2015-03-25 20:58 - 00000416 _____ C:\windows\Tasks\DriverEasy Scheduled Scan.job
2015-05-24 23:14 - 2009-07-26 22:06 - 01620796 _____ C:\windows\system32\PerfStringBackup.INI
2015-05-24 23:03 - 2009-07-14 06:33 - 00269280 _____ C:\windows\system32\FNTCACHE.DAT
2015-05-24 23:00 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\AdvancedInstallers
2015-05-24 22:25 - 2013-10-20 15:22 - 00000000 ____D C:\windows\system32\MRT
2015-05-24 21:44 - 2012-12-05 10:31 - 137310008 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

==================== Files in the root of some directories =======

2013-07-23 13:13 - 2013-07-23 13:26 - 0000000 _____ () C:\ProgramData\g252qs.txt
2013-07-23 13:13 - 2013-07-23 13:13 - 0002687 _____ () C:\ProgramData\gqodeq.js
2015-04-21 19:20 - 2015-04-21 19:20 - 0000317 _____ () C:\ProgramData\hpzinstall.log

Files to move or delete:
====================
C:\Users\mediamarkt\AppData\Local\temp\Lunch-ring\lunch_bake.exe
C:\Users\mediamarkt\AppData\Local\temp\Garbagecarpet\garbage_experienced.exe
C:\Users\mediamarkt\AppData\Local\temp\Reward_strike\reward-dimension.exe
C:\Users\mediamarkt\AppData\Local\temp\Mannerhappen\manner_check.exe
C:\Users\mediamarkt\AppData\Local\temp\Expert_evidence\expert_was.exe
C:\ProgramData\gqodeq.js


Some files in TEMP:
====================
C:\Users\mediamarkt\AppData\Local\temp\avgnt.exe
C:\Users\mediamarkt\AppData\Local\temp\ReimagePackage.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-04 11:14

==================== End of log ============================

--- --- ---

cosinus · 11.06.2015, 12:24

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Posbank Trojaner

Log-Analyse und Auswertung: Posbank Trojaner