| |
| |||||||
Log-Analyse und Auswertung: Win 7, häufige Hänger in allen ProgrammenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
24.09.2013, 19:07
| #1 |
 |  Win 7, häufige Hänger in allen Programmen Hallo, ich habe mit meinem Win7 home premium 32 bit folgendes Problem seit 2 Wochen: zuerst war es nur sporadisch, mittlerweile fast ständig: die Programme freezen im 4-5 Sekundentakt ein (oben steht: keine Rückmeldung), klickt man weiter, dann geht´s nach ein paar Sekunden, manchmal auch länger, weiter. Maus läuft ganz normal, aber eben die Programme wie z.B. firefox oder auch der Windows explorer hängen dann ein paar Sekunden, bevor der Befehl ausgeführt wird. Beim Schreiben geht dann nur alle paar Sekunden ein Buchstabe. Zuerst habe ich an einen Festplattendefekt gedacht, aber mittlerweile bin ich mir nicht so sicher, da mein Laptop auf einmal ein ähnliches Problem hat. Bootvorgang normal schnell. Der PC zeigt im task manager keine Auffälligkeiten, keine CPU Überlastung. Festplattencheck chckdsk hängt sich auf. Seatool festplatten check o.k. malwarebyte nix Log: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.18.09 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 8.0.7601.17514 Die Schauertes :: NEWBIE2010 [Administrator] 18.09.2013 16:27:51 mbam-log-2013-09-18 (16-27-51).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 3087 Laufzeit: 8 Minute(n), 49 Sekunde(n) [Abgebrochen] Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) defogger LOG: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 19:46 on 24/09/2013 (Die Schauertes)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-09-2013
Ran by Die Schauertes at 2013-09-24 18:06:44
Running from C:\Users\Die Schauertes\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958)
7-Zip 9.20
Adobe AIR (Version: 3.7.0.2090)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader 9.5.4 MUI (Version: 9.5.4)
Adobe Shockwave Player 11.6 (Version: 11.6.7.637)
Amazon MP3-Downloader 1.0.9
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Areca
ATI Catalyst Install Manager (Version: 3.0.778.0)
aTube Catcher (Version: 2.9.4272)
Audiograbber 1.83 SE (Version: 1.83 SE )
Audiograbber MP3-Plugin (Version: 1.0)
avast! Free Antivirus (Version: 8.0.1489.0)
Avery Wizard 3.1 (Version: 3.1.5)
Bonjour (Version: 3.0.0.10)
Canon Easy-PhotoPrint EX
CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.7.2.11)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon Internet Library for ZoomBrowser EX (Version: 1.6.3.9)
Canon iP4900 series Benutzerregistrierung
Canon iP4900 series On-screen Manual
Canon iP4900 series Printer Driver
Canon MOV Decoder (Version: 1.5.0.7)
Canon MOV Encoder (Version: 1.3.1.3)
Canon MovieEdit Task for ZoomBrowser EX (Version: 3.4.1.9)
Canon MP Navigator EX 4.0
Canon My Printer
Canon Solution Menu EX
Canon Utilities CameraWindow (Version: 7.4.0.7)
Canon Utilities CameraWindow DC 8 (Version: 8.1.0.11)
Canon Utilities MyCamera (Version: 7.3.0.5)
Canon Utilities PhotoStitch (Version: 3.1.22.46)
Canon Utilities ZoomBrowser EX (Version: 6.5.1.15)
Canon ZoomBrowser EX Memory Card Utility (Version: 1.3.0.4)
CanoScan LiDE 110 Scanner Driver
Cartoon Maker 6.01
Catalyst Control Center Graphics Previews Vista (Version: 2010.0527.1242.20909)
Catalyst Control Center InstallProxy (Version: 2010.0527.1242.20909)
Catalyst Control Center Localization All (Version: 2010.0527.1242.20909)
CCC Help Danish (Version: 2010.0527.1241.20909)
CCC Help Dutch (Version: 2010.0527.1241.20909)
CCC Help English (Version: 2010.0527.1241.20909)
CCC Help Finnish (Version: 2010.0527.1241.20909)
CCC Help French (Version: 2010.0527.1241.20909)
CCC Help German (Version: 2010.0527.1241.20909)
CCC Help Italian (Version: 2010.0527.1241.20909)
CCC Help Japanese (Version: 2010.0527.1241.20909)
CCC Help Norwegian (Version: 2010.0527.1241.20909)
CCC Help Spanish (Version: 2010.0527.1241.20909)
CCC Help Swedish (Version: 2010.0527.1241.20909)
ccc-core-static (Version: 2010.0527.1242.20909)
ccc-utility (Version: 2010.0527.1242.20909)
CCleaner (Version: 4.03)
CD-LabelPrint
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content (Version: 4.0)
CorelDRAW Essentials 4 - Draw (Version: 4.0)
CorelDRAW Essentials 4 - Filters (Version: 4.0)
CorelDRAW Essentials 4 - ICA (Version: 4.0)
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0)
CorelDRAW Essentials 4 - Lang BR (Version: 4.0)
CorelDRAW Essentials 4 - Lang DE (Version: 4.0)
CorelDRAW Essentials 4 - Lang EN (Version: 4.0)
CorelDRAW Essentials 4 - Lang ES (Version: 4.0)
CorelDRAW Essentials 4 - Lang FR (Version: 4.0)
CorelDRAW Essentials 4 - Lang IT (Version: 4.0)
CorelDRAW Essentials 4 - Lang NL (Version: 4.0)
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0)
CorelDRAW Essentials 4 - Windows Shell Extension
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1)
CorelDRAW Essentials 4 (Version: 4.0)
CyberLink LabelPrint (Version: 2.5.2515)
CyberLink Power2Go (Version: 6.1.3602c)
CyberLink PowerDVD Copy (Version: 1.5.1306)
D3DX10 (Version: 15.4.2368.0902)
Designer 2.0 (Version: 7.8.3)
DHTML Editing Component (Version: 6.02.0001)
Easy Poster Printer (Version: 2.0.3)
FastStone Capture 5.3 (Version: 5.3)
ffdshow v1.1.3914 [2011-06-29] (Version: 1.1.3914.0)
Flickr Uploadr 3.2.1
Freemake Video Converter Version 3.1.2 (Version: 3.1.2)
Fritz und Fertig (Version: 1.00.0000)
Fritz und Fertig 2 (Version: 2.00.0000)
GIMP 2.6.11 (Version: 2.6.11)
GIMP LqR Plug-In (Version: PlugIn: 0.7.1 - Lib: 0.4.1)
Google Translator
Google Update Helper (Version: 1.3.21.153)
GPL Ghostscript (Version: 9.04)
Helium (Version: 1.0.0)
HiJackThis (Version: 1.0.0)
Image Resizer Powertoy Clone for Windows (Version: 2.1.1)
InovisionViewer
Intel(R) Rapid Storage Technology (Version: 9.6.0.1014)
IrfanView (remove only) (Version: 4.36)
iTunes (Version: 11.0.5.5)
jAlbum (Version: 10.10.7)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
KeePass Password Safe 1.25 (Version: 1.25)
Licensing Service Install (Version: 2.0.1.181)
Lidl-Fotos
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Medion Home Cinema (Version: 6.0.0000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Search Enhancement Pack (Version: 3.0.127.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
Mozilla Thunderbird 17.0.7 (x86 de) (Version: 17.0.7)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyFreeCodec
Nokia Connectivity Cable Driver (Version: 7.1.172.0)
Nokia Suite (Version: 3.8.30.0)
Nur Deinstallierung der CopyTrans Suite möglich. (HKCU Version: 2.15)
ooVoo
Opera 12.12 (Version: 12.12.1707)
Opera 12.16 (Version: 12.16.1860)
PC Connectivity Solution (Version: 12.0.109.0)
PDF24 Creator 5.4.0
PDFCreator (Version: 1.7.0)
pdfforge Toolbar v4.1 (Version: 4.1)
PDF-XChange Viewer (Version: 2.5.188.0)
PlayReady PC Runtime x86 (Version: 1.3.0)
Protect Disc License Helper 1.0.125 (IE) (HKCU Version: 1.0.125)
QuickTime (Version: 7.74.80.86)
Rainlendar2 (remove only)
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.21.531.2010)
Realtek High Definition Audio Driver (Version: 6.0.1.6136)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0)
Revo Uninstaller 1.95 (Version: 1.95)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2410.0)
SeaTools for Windows (Version: 1.2.0.7)
SilverCrest MTS2219-SLN Driver (Version: 1.0)
SiSoftware Sandra Lite 2013.SP5 (Version: 19.58.2013.9)
Skype™ 6.3 (Version: 6.3.105)
Sophos Anti-Rootkit 1.5.0 (Version: 1.5.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
StartSearch Toolbar 1.3 (Version: 1.3)
swMSM (Version: 12.0.0.1)
System Requirements Lab for Intel (Version: 4.5.15.0)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.110)
TuneUp Utilities 2014 (Version: 14.0.1000.110)
Turbo Lister 2 (Version: 2.00.0000)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VLC media player 2.0.7 (Version: 2.0.7)
VMLite Workstation (Version: 3.2.6)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
WISO Steuer-Sparbuch 2012 (Version: 19.00.7303)
WISO Steuer-Sparbuch 2013 (Version: 20.00.8137)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)
==================== Restore Points =========================
==================== Hosts content: ==========================
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {058882B0-64C7-4221-AD72-1FA70F96186F} - System32\Tasks\{74AF98CF-567B-4CE7-975F-E8AFC1943B6E} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {0EA0AA83-92EA-45E8-9CB6-D2EA5B5AF8BB} - System32\Tasks\{118C939C-3DE4-4FC4-BE71-B4C0E57CC5B3} => C:\exefiles\comskip80_023\comskip.exe [2009-04-04] (AtHome)
Task: {2FB5CD0E-AD1B-46E4-93C2-3746A454D081} - System32\Tasks\User_Feed_Synchronization-{BBDE3C09-A6B9-44B5-82C0-6523343D46D5} => C:\Windows\system32\msfeedssync.exe [2010-11-20] (Microsoft Corporation)
Task: {329BF31D-2990-4E11-8D84-C0EE949DA10D} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {4CE511E5-CBCE-4A2D-8DAA-B71E172B6362} - System32\Tasks\{2B2903C5-B5D8-4B35-8A7A-7FDBC2067C43} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {4E063338-330D-46CB-81C5-26E8388092F1} - System32\Tasks\{779DB327-F67C-4555-977A-42D8032C2E07} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {4ED695A2-6292-4271-9B1B-03F1D51AFD06} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {574076D0-36CC-45B2-8DB6-5C33CB3BEDA4} - System32\Tasks\{CDA842F8-874B-404D-9857-767AAD1B8472} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {610CD396-5492-410C-8E64-6C5FFC697252} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2014\OneClick.exe [2013-09-09] (TuneUp Software)
Task: {66CE8189-F43C-4FB1-ADB4-0BFA25F11958} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6ACDBE5F-E232-48B5-92E9-1436ED720ED3} - System32\Tasks\User_Feed_Synchronization-{20F20C08-1F31-44AA-A728-D164FD6E820E} => C:\Windows\system32\msfeedssync.exe [2010-11-20] (Microsoft Corporation)
Task: {7BE1DD3A-5155-4D14-B720-BFDDDBA1B8EA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {84AAC219-03B8-46D5-9FAE-C7A6696C06CF} - System32\Tasks\{24A16C1F-4EBC-4E05-942D-13F5F7EED855} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {86DFAAFF-026C-41E7-BD7D-E4ACDE9657A0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {8B360F27-48F4-4859-9299-3D09CB831793} - System32\Tasks\{9CCE252E-AB82-4DAA-9BD3-7274DEBB1BF7} => E:\Setup.exe
Task: {9A12DA66-4158-4C78-9F32-D2817BA17425} - System32\Tasks\{80ABEFC3-81B4-4472-B394-721C32C1971F} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {A2ED8231-B821-44F3-AFF9-EB94EE933E8D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-23] (Google Inc.)
Task: {AE8F0B69-565F-4409-81D4-3BAB131DDBAB} - System32\Tasks\{64AB10CB-EF2B-4876-B005-549DBCA2FA9F} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {B204CE2B-BDA5-445C-AEBF-4FA9B35CA8B1} - System32\Tasks\{33E6C1EC-684D-42F2-9FD9-114D8D40BA88} => C:\exefiles\comskip80_023\comskip.exe [2009-04-04] (AtHome)
Task: {B66F957B-D50C-4A4A-B1CA-2A576844DE70} - System32\Tasks\{CE4C3CD3-3787-4D8B-BF04-5FBBB4FCBDA1} => E:\Setup.exe
Task: {D5159BBC-6B5A-49AC-83AF-C98F4D81931A} - System32\Tasks\{57BDA9D8-379F-4D3A-9409-D2E2974F79D0} => C:\exefiles\comskip80_023\comskip.exe [2009-04-04] (AtHome)
Task: {DCAB1D0E-79F3-4490-AC06-1C536F0E11F1} - System32\Tasks\{1954EFD5-BA21-41AF-8819-317A67819C54} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {EC974B34-D212-4315-B9BB-9CCD0B81C298} - System32\Tasks\{1F0CE09A-D8E5-4EDD-9A1C-90ECDCE5119E} => c:\program files\opera\opera.exe [2013-07-09] (Opera Software)
Task: {EE8DEFC2-EA82-4D63-92E5-B2C5DF95038D} - System32\Tasks\{A912CCC6-6B9F-45A8-9956-074C3FE0B1F4} => C:\Program Files\Opera\opera.exe [2013-07-09] (Opera Software)
Task: {F49290E3-DC32-4E95-A751-1071C9C15434} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {FC72D2A2-4E37-45D3-B067-B5D4F6262F2E} - System32\Tasks\{46C9CC24-7F7D-4868-A850-21CCA96C898D} => C:\exefiles\comskip80_023\comskipGUI.exe [2009-04-04] (AtHome)
Task: {FC7EBE73-4779-44A8-9113-BB9DE5273E6E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-23] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-19 09:17 - 2012-11-10 10:55 - 00158056 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2013-09-19 09:17 - 2012-11-10 10:56 - 00223592 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2008-05-22 01:09 - 2008-05-22 01:09 - 00247072 _____ (Corel Corporation) c:\Program Files\Common Files\Corel\Shared\Shell Extension\ShellXP.dll
2008-05-22 01:08 - 2008-05-22 01:08 - 00599328 _____ (Corel Corporation) c:\Program Files\Common Files\Corel\Shared\Shell Extension\FileInfoProvider.dll
2010-11-25 14:50 - 2010-11-25 14:50 - 05916952 _____ (Tracker Software Products Ltd.) C:\Program Files\Tracker Software\Shell Extensions\XCShInfo.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 00053024 _____ (Open Source Software community project) C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 22:56 - 2011-06-24 22:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-01-29 14:45 - 2011-01-29 14:45 - 00244224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files\Rainlendar2\libcurl.dll
2010-05-23 20:20 - 2010-05-23 20:20 - 00126976 _____ () C:\Program Files\Rainlendar2\lua51.dll
2010-12-12 12:56 - 2010-12-12 12:56 - 01205760 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxbase28u_vc_rny.dll
2010-12-12 12:58 - 2010-12-12 12:58 - 00131584 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxbase28u_xml_vc_rny.dll
2010-12-12 12:57 - 2010-12-12 12:57 - 00707584 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxmsw28u_adv_vc_rny.dll
2010-12-12 12:57 - 2010-12-12 12:57 - 02633216 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxmsw28u_core_vc_rny.dll
2010-12-12 12:57 - 2010-12-12 12:57 - 00485376 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxmsw28u_html_vc_rny.dll
2010-12-12 12:58 - 2010-12-12 12:58 - 00502784 _____ (wxWidgets development team) C:\Program Files\Rainlendar2\wxmsw28u_xrc_vc_rny.dll
2011-02-04 15:24 - 2011-02-04 15:24 - 00195584 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2011-02-04 15:25 - 2011-02-04 15:25 - 00244224 _____ () C:\Program Files\Rainlendar2\plugins\GooglePlugin.dll
2010-05-23 20:20 - 2010-05-23 20:20 - 00012288 _____ () C:\Program Files\Rainlendar2\lfs.dll
2009-01-20 22:51 - 2009-01-20 22:51 - 00007168 _____ ( ) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2010-05-27 21:40 - 2010-05-27 21:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-09-09 15:26 - 2013-09-09 15:26 - 00611640 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUKernel.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00153912 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUBasic.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00816440 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\MainControls.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00067384 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUTransl.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00161592 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\PerlRegEx.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00211256 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\XMLComponents.bpl
2013-09-09 15:28 - 2013-09-09 15:28 - 00606520 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\tulic.dll
2013-09-09 15:26 - 2013-09-09 15:26 - 00450360 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\GR32_D6.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00130360 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\SchedAgent_2007.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00336184 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUCompression.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00308024 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\DEC.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00493880 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\Html.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00308024 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\ntrtl60.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00457016 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\PowerManager.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00468792 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\SysInfo.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00656696 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\MSI_D6.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00143672 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUIcoEngineerDirTree.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00077624 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUShell.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00068920 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\SysControls.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00213816 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\ProgramRating.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00419640 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\VisControls.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00033592 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUBase.bpl
2013-09-09 15:29 - 2013-09-09 15:29 - 01146168 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxBarD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00045368 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxCoreD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00016696 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxComnD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00056120 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxThemeD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00853304 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\cxLibraryD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00070968 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxGDIPlusD12.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00155448 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\cefcomponent.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00270136 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\AppInitialization.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00107832 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUShredder.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00629560 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUDiskCleanerClass.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00092984 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUApps.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00043320 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TURar.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00490296 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\Traces.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00083768 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUOperaClass.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00048952 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUApplications.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00043320 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUSafariClass.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00140088 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\CommonForms.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00599352 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\VirtualTreesR.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00066872 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUIECacheClass.bpl
2013-09-09 15:29 - 2013-09-09 15:29 - 00222520 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpRPC32.dll
2013-09-09 15:27 - 2013-09-09 15:27 - 00103224 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUDefragClient.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00953656 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuningWizard.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00107320 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\Internet.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00208696 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\dxBarExtItemsD12.bpl
2013-09-09 15:27 - 2013-09-09 15:27 - 00290104 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\RegCleaner.bpl
2013-09-09 15:26 - 2013-09-09 15:26 - 00024376 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\IEControl.bpl
2013-09-09 15:29 - 2013-09-09 15:29 - 00610104 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUSqlDB32.dll
2013-09-09 15:29 - 2013-09-09 15:29 - 00132920 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUParams.dll
2013-09-09 15:29 - 2013-09-09 15:29 - 00904504 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUPSAPI.dll
2013-09-09 15:29 - 2013-09-09 15:29 - 00715064 _____ (TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUTuningIndex.dll
2013-08-18 11:21 - 2013-08-18 11:21 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
==================== Faulty Device Manager Devices =============
Name: VMLite Host-Only Ethernet Adapter
Description: VMLite Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMLite Inc.
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: VMLite Host-Only Ethernet Adapter #2
Description: VMLite Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMLite Inc.
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/23/2013 05:58:07 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service COMODO Internet Security Helper Service since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:58:07 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Helper Driver.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:58:07 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Sandbox Driver.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:37:23 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service COMODO Internet Security Helper Service since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:37:23 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Helper Driver.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:37:23 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Sandbox Driver.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (09/23/2013 05:27:24 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-698496875-2777538895-85250870-1001}/">.
Error: (09/23/2013 02:30:53 PM) (Source: Application Hang) (User: )
Description: Programm CCleaner.exe, Version 4.3.0.4151 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 14e8
Startzeit: 01ceb857d84f0d1d
Endzeit: 16
Anwendungspfad: C:\Program Files\CCleaner\CCleaner.exe
Berichts-ID: f9d1d178-244b-11e3-8d11-6c626d8adb3f
Error: (09/22/2013 07:18:49 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {a8ff2fb3-4f2d-4975-9015-bfcd1a31d63f}
Error: (09/20/2013 02:26:42 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 6b0
Startzeit: 01ceb5fba3eef57d
Endzeit: 31
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID: dee5ee45-21ef-11e3-8dd4-6c626d8adb3f
System errors:
=============
Error: (09/24/2013 05:41:18 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (09/24/2013 05:41:14 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (09/24/2013 05:33:17 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (09/24/2013 05:29:15 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (09/24/2013 04:59:36 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
Error: (09/24/2013 04:58:40 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
Error: (09/24/2013 03:00:19 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
qpxvu
Error: (09/24/2013 03:00:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ICM_UpdaterService Disp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (09/23/2013 06:00:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TuneUp Designerweiterung" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1083
Error: (09/23/2013 06:00:18 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Microsoft Office Sessions:
=========================
Error: (09/18/2012 04:35:53 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
Error: (08/06/2012 04:53:58 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/04/2012 06:15:52 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2011-10-17 09:09:05.304
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-17 08:52:50.774
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 16:45:48.303
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 16:35:10.473
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 15:22:22.204
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 13:10:30.970
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 12:45:31.176
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 11:39:18.733
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 11:22:43.913
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2011-10-16 11:14:47.567
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 48%
Total physical RAM: 3063.11 MB
Available physical RAM: 1592.73 MB
Total Pagefile: 4061.4 MB
Available Pagefile: 2333.79 MB
Total Virtual: 2047.88 MB
Available Virtual: 1879.76 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:767.71 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:22.41 GB) NTFS
Drive i: (HDDRIVE2GO) (Fixed) (Total:931.28 GB) (Free:746.81 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 1397 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-742852132864) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 8AF11F85)
Partition 1: (Not Active) - (Size=932 GB) - (Type=0C)
==================== End Of Log ============================
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2013
Ran by Die Schauertes (administrator) on NEWBIE2010 on 24-09-2013 18:06:19
Running from C:\Users\Die Schauertes\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\exefiles\dsksve8\DeskSave.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\OneClick.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUDefragBackend32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKCU\...\Run: [DeskSave] - C:\exefiles\dsksve8\DeskSave.exe [82944 2008-07-26] ()
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2346496 2011-02-04] ()
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [] - [x]
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Jo & Marion\...\Policies\system: [LogonHoursAction] 2
HKU\Jo & Marion\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lili & Pauline\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Lili & Pauline\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Lili & Pauline\...\Policies\system: [LogonHoursAction] 2
HKU\Lili & Pauline\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {22E33AC7-D3B6-4205-B11B-69B619F66958} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://startsear.ch/?aff=3&src=sp&cf=fffe90ae-0076-11e1-bc6e-6c626d8adb3f&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=d5ea55b8-5eb6-4650-aaf2-73047ee35276&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {01FC1BE1-51AD-4017-9393-66FB2941B153} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ATU2&o=100000080&src=crm&q={searchTerms}&locale=&apn_ptnrs=JM&apn_dtid=YYYYYYYYDE&apn_uid=3e591632-555e-4037-9cdd-4984b8301946&apn_sauid=1AEA3416-CD6C-44B9-95CC-19783AD3E57D
SearchScopes: HKCU - {22E33AC7-D3B6-4205-B11B-69B619F66958} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
SearchScopes: HKCU - {A5BFA6C2-F708-419E-B45C-E2617A3235D4} URL = hxxp://startsear.ch/?aff=3&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://startsear.ch/?aff=3&src=sp&cf=fffe90ae-0076-11e1-bc6e-6c626d8adb3f&q={searchTerms}
SearchScopes: HKCU - {DC0B0A85-10AC-449A-8F43-57CA5EB93515} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=827316&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @canon.com/MycameraPlugin - C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll No File
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\Die Schauertes\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF SearchPlugin: C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\searchplugins\startsear.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Grooveshark Proxy - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\groovesharkProxy@DannieDarko
FF Extension: Bitdefender QuickScan - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: autofillForms - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\autofillForms@blueimp.net.xpi
FF Extension: firefox - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\firefox@ghostery.com.xpi
FF Extension: secureLogin - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\secureLogin@blueimp.net.xpi
FF Extension: No Name - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [71832 2008-08-29] (SiSoftware)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-09-09] (TuneUp Software)
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [455784 2010-08-21] (VMLite, Inc.)
S2 ICM_UpdaterService; C:\Program Files\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [x]
==================== Drivers (Whitelisted) ====================
R2 ACEDRV09; C:\Windows\system32\drivers\ACEDRV09.sys [110304 2012-06-09] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-28] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299144 2012-11-10] (EldoS Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [61952 2009-12-21] (CSR, plc)
R3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-19] (Siliten)
R3 MouFilter_Mou_FlexDef4; C:\Windows\System32\DRIVERS\MouFilter_FlexDef4.sys [11776 2010-10-20] (Siliten)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 sscebus; C:\Windows\System32\DRIVERS\sscebus.sys [98560 2010-12-21] (MCCI Corporation)
S3 sscemdfl; C:\Windows\System32\DRIVERS\sscemdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 sscemdm; C:\Windows\System32\DRIVERS\sscemdm.sys [123648 2010-12-21] (MCCI Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2010-12-21] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-12-21] (MCCI Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [143848 2010-08-11] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [100264 2010-08-11] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [111208 2010-08-11] (VMLite, Inc.)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [15464 2010-06-29] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\System32\DRIVERS\vmlitestor.sys [140392 2010-08-18] (VMLite, Inc.)
S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [135272 2010-08-18] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [127080 2010-08-18] (VMLite, Inc.)
S3 ZSMC303; C:\Windows\System32\Drivers\usbVM303.sys [391300 2006-02-23] (Vimicro Corporation)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [x]
S3 MEMSWEEP2; \??\C:\Windows\system32\162F.tmp [x]
S0 qpxvu; System32\drivers\yhde.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 18:05 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:03 - 2013-09-24 18:03 - 01088653 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-23 18:01 - 2013-09-24 14:59 - 00000056 _____ C:\Windows\setupact.log
2013-09-23 18:01 - 2013-09-23 18:01 - 00000000 _____ C:\Windows\setuperr.log
2013-09-23 18:00 - 2013-09-09 15:29 - 00036152 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-09-23 17:59 - 2013-09-09 15:29 - 00036664 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-09-23 17:59 - 2013-09-09 15:29 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-09-23 17:58 - 2013-09-23 18:01 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 17:58 - 2013-09-23 18:00 - 00000000 ____D C:\Program Files\TuneUp Utilities 2014
2013-09-23 17:58 - 2013-09-23 17:58 - 00002203 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00002183 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:56 - 2013-09-23 17:57 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:38 - 2013-09-23 17:43 - 13758464 _____ C:\Users\Die Schauertes\AppData\Roaming\Sandra.mdb
2013-09-23 17:38 - 2013-09-23 17:38 - 00001375 _____ C:\Users\Public\Desktop\SiSoftware Sandra Lite 2013.SP5.lnk
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:37 - 2013-09-23 17:37 - 00000000 ____D C:\Program Files\SiSoftware
2013-09-23 17:36 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-19 09:17 - 2013-09-23 14:27 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-09-19 09:17 - 2013-09-23 14:27 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-19 09:17 - 2012-11-10 10:56 - 00223592 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-09-19 09:17 - 2012-11-10 10:55 - 00158056 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-09-19 09:17 - 2012-11-10 10:50 - 00299144 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:03 - 2013-09-19 09:04 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:37 - 2013-09-18 16:43 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:56 - 2013-09-18 13:05 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:50 - 2013-09-18 13:09 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 12:50 - 2013-09-18 12:50 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\OpenCandy
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:48 - 2013-09-18 12:49 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-17 19:07 - 2013-09-17 19:07 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:03 - 2013-09-17 19:04 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:02 - 2013-09-17 19:02 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-09-17 19:00 - 2013-09-17 19:01 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-16 16:45 - 2013-09-16 16:54 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-15 17:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-15 17:15 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-15 17:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-15 17:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-15 17:14 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-15 17:14 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
==================== One Month Modified Files and Folders =======
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 18:05 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:05 - 2010-11-29 16:44 - 00000000 ____D C:\Users\Die Schauertes
2013-09-24 18:03 - 2013-09-24 18:03 - 01088653 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-24 18:02 - 2013-08-23 09:57 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-24 17:53 - 2011-02-07 09:45 - 01095474 _____ C:\Windows\WindowsUpdate.log
2013-09-24 17:30 - 2012-04-12 08:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-24 16:45 - 2011-09-21 17:51 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-24 15:10 - 2013-08-23 09:57 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-24 15:07 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-24 15:07 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-24 15:01 - 2011-07-01 10:26 - 00000000 ____D C:\Users\Die Schauertes\.rainlendar2
2013-09-24 15:00 - 2011-02-17 11:01 - 00000436 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-24 14:59 - 2013-09-23 18:01 - 00000056 _____ C:\Windows\setupact.log
2013-09-24 14:59 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-23 18:05 - 2013-08-18 11:20 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-23 18:05 - 2013-01-09 19:51 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-09-23 18:01 - 2013-09-23 18:01 - 00000000 _____ C:\Windows\setuperr.log
2013-09-23 18:01 - 2013-09-23 17:58 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 18:00 - 2013-09-23 17:58 - 00000000 ____D C:\Program Files\TuneUp Utilities 2014
2013-09-23 17:58 - 2013-09-23 17:58 - 00002203 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00002183 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:57 - 2013-09-23 17:56 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:43 - 2013-09-23 17:38 - 13758464 _____ C:\Users\Die Schauertes\AppData\Roaming\Sandra.mdb
2013-09-23 17:38 - 2013-09-23 17:38 - 00001375 _____ C:\Users\Public\Desktop\SiSoftware Sandra Lite 2013.SP5.lnk
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:37 - 2013-09-23 17:37 - 00000000 ____D C:\Program Files\SiSoftware
2013-09-23 17:37 - 2013-09-23 17:36 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-23 17:35 - 2013-06-28 11:59 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\QuickScan
2013-09-23 17:29 - 2011-06-28 09:00 - 00000000 ____D C:\Users\Die Schauertes\Hörbücher
2013-09-23 17:24 - 2011-01-17 19:24 - 00000000 ____D C:\Users\Die Schauertes\Documents\2011-01-17
2013-09-23 14:27 - 2013-09-19 09:17 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-09-23 14:27 - 2013-09-19 09:17 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-22 20:28 - 2010-12-02 14:01 - 00000000 ____D C:\Users\Die Schauertes\!MARYS
2013-09-20 14:30 - 2012-04-12 08:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 14:30 - 2011-07-26 08:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-19 17:21 - 2010-12-04 19:06 - 00204288 ___SH C:\Users\Die Schauertes\Documents\Thumbs.db
2013-09-19 09:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:07 - 2010-08-28 02:49 - 01598970 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-19 09:04 - 2013-09-19 09:03 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:45 - 2012-02-23 18:04 - 00000000 ____D C:\Users\Die Schauertes\Scans
2013-09-18 16:43 - 2013-09-18 16:37 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:09 - 2013-09-18 12:50 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 13:05 - 2013-09-18 12:56 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:50 - 2013-09-18 12:50 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\OpenCandy
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:49 - 2013-09-18 12:48 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 12:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-18 11:09 - 2010-12-02 14:18 - 00000000 ____D C:\Users\Die Schauertes\.gimp-2.6
2013-09-18 09:02 - 2010-12-06 18:31 - 00000000 ____D C:\Users\Die Schauertes\VMLites
2013-09-18 08:18 - 2010-12-02 17:33 - 00000000 ____D C:\Users\Die Schauertes\Pauline
2013-09-18 08:18 - 2010-12-02 13:43 - 00000000 ___RD C:\Users\Die Schauertes\Gerd und Mary
2013-09-17 19:30 - 2010-12-30 13:51 - 00000000 ___SD C:\Users\Die Schauertes\Documents\Sticky Passwords
2013-09-17 19:30 - 2010-12-06 12:47 - 00000000 ____D C:\Program Files\KeePass-2.13
2013-09-17 19:07 - 2013-09-17 19:07 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:04 - 2013-09-17 19:03 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:02 - 2013-09-17 19:02 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-09-17 19:01 - 2013-09-17 19:00 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-17 18:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\schemas
2013-09-16 16:54 - 2013-09-16 16:45 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-16 13:16 - 2012-10-24 13:34 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Canon Easy-PhotoPrint EX
2013-09-16 13:12 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-16 12:42 - 2010-12-06 12:12 - 00030208 _____ C:\Users\Die Schauertes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-15 18:01 - 2012-12-12 20:30 - 00000000 ___RD C:\Users\Die Schauertes\Podcasts
2013-09-15 18:00 - 2009-07-14 06:33 - 01334440 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-15 17:58 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-09-15 17:48 - 2011-09-12 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-15 17:45 - 2013-08-01 18:00 - 00000000 ____D C:\Windows\system32\MRT
2013-09-15 17:39 - 2010-08-30 18:47 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-10 15:09 - 2011-05-15 11:30 - 00002124 _____ C:\Users\Public\Desktop\Video Search.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
2013-09-09 15:29 - 2013-09-23 18:00 - 00036152 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-09-09 15:29 - 2013-09-23 17:59 - 00036664 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-09-09 15:29 - 2013-09-23 17:59 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
Some content of TEMP:
====================
C:\Users\Die Schauertes\AppData\Local\Temp\bitdefender_isecurity_[quickscan].exe
C:\Users\Die Schauertes\AppData\Local\Temp\cis7C7F.exe
C:\Users\Gast\AppData\Local\Temp\AskSLib.dll
C:\Users\Jo & Marion\AppData\Local\Temp\AskSLib.dll
C:\Users\Lili & Pauline\AppData\Local\Temp\AskSLib.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 11:57
==================== End Of Log ============================
Gmer habe ich versucht: total Einfrierung. Im abgesicherten Modus kommt folgende Fehlermeldung: "Es befindet sich kein Datenträger im Laufwerk Device/Harddisk2/DR2" und bleibt stehen. Ich habe wie empfohlen bei device den Haken entfernt. Ich hoffe, ich habe mein Problem genügend beschrieben Danke schonmal für eure Hilfe T |
|
24.09.2013, 19:58
| #2 | |
| /// the machine /// TB-Ausbilder    | Win 7, häufige Hänger in allen Programmen hi,
__________________Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
25.09.2013, 07:30
| #3 |
| | Win 7, häufige Hänger in allen Programmen Hallo, danke für deine schnelle nachricht.
__________________Hier der combofix LOG: Code:
ATTFilter ComboFix 13-09-24.02 - Die Schauertes 25.09.2013 7:59.1.4 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3063.1669 [GMT 2:00]
ausgeführt von:: c:\users\Die Schauertes\Downloads\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\autorun.inf
C:\Internet Explorer
c:\internet explorer\Custom\eBay.ico
c:\program files\StartSearch plugin
c:\program files\StartSearch plugin\StartBar.dll
c:\program files\StartSearch plugin\uninst.exe
c:\users\Die Schauertes\AppData\Local\bloson.bmp
c:\users\Die Schauertes\AppData\Local\dealply.bmp
c:\users\Die Schauertes\AppData\Local\facemoods.bmp
c:\users\Die Schauertes\AppData\Local\lateral1.bmp
c:\users\Die Schauertes\AppData\Local\lateral2.bmp
c:\users\Die Schauertes\AppData\Local\lateral3.bmp
c:\users\Die Schauertes\AppData\Roaming\.#
c:\windows\IsUn0407.exe
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\System32\MASetupCleaner.exe
c:\windows\system32\System32\muzapp.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-08-25 bis 2013-09-25 ))))))))))))))))))))))))))))))
.
.
2013-09-25 06:25 . 2013-09-25 06:25 -------- d-----w- c:\users\Die Schauertes\AppData\Local\temp
2013-09-24 16:06 . 2013-09-24 16:06 -------- d-----w- C:\FRST
2013-09-23 16:00 . 2013-09-09 13:29 36152 ----a-w- c:\windows\system32\uxtuneup.dll
2013-09-23 15:59 . 2013-09-09 13:29 36664 ----a-w- c:\windows\system32\TURegOpt.exe
2013-09-23 15:59 . 2013-09-09 13:29 25400 ----a-w- c:\windows\system32\authuitu.dll
2013-09-23 15:58 . 2013-09-23 15:58 -------- d-----w- c:\users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 15:58 . 2013-09-23 16:00 -------- d-----w- c:\program files\TuneUp Utilities 2014
2013-09-23 15:58 . 2013-09-23 16:01 -------- d-----w- c:\programdata\TuneUp Software
2013-09-23 15:57 . 2013-09-23 15:57 -------- d-sh--w- c:\programdata\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 15:57 . 2013-09-23 15:57 -------- d--h--w- c:\programdata\Common Files
2013-09-23 15:37 . 2013-09-23 15:37 -------- d-----w- c:\program files\SiSoftware
2013-09-23 15:36 . 2013-09-23 15:36 -------- d-----w- c:\program files\Common Files\Bitdefender
2013-09-19 07:17 . 2013-09-23 12:27 -------- d-sh--w- c:\windows\system32\AI_RecycleBin
2013-09-19 07:17 . 2012-11-10 08:55 158056 ----a-w- c:\windows\system32\CbFsMntNtf3.dll
2013-09-19 07:17 . 2012-11-10 08:56 223592 ----a-w- c:\windows\system32\CbFsNetRdr3.dll
2013-09-19 07:17 . 2012-11-10 08:50 299144 ----a-w- c:\windows\system32\drivers\cbfs3.sys
2013-09-19 07:17 . 2013-09-23 12:27 -------- d-----w- c:\users\Die Schauertes\AppData\Local\Livedrive
2013-09-18 10:57 . 2013-09-18 10:57 -------- d-----w- c:\users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 10:56 . 2013-09-18 11:05 -------- d-----w- c:\program files\CheckDrive
2013-09-18 10:50 . 2013-09-18 11:09 -------- d-----w- c:\program files\CrystalDiskMark
2013-09-18 10:50 . 2013-09-18 10:50 -------- d-----w- c:\users\Die Schauertes\AppData\Roaming\OpenCandy
2013-09-17 17:06 . 2013-09-17 17:06 -------- d-----w- c:\program files\Seagate
2013-09-17 17:02 . 2013-09-17 17:02 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-09-17 16:53 . 2013-09-05 05:02 7328304 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9C5A1025-A697-471D-8D4A-EF9FE2076C2D}\mpengine.dll
2013-09-16 14:45 . 2013-09-16 14:54 -------- d-----w- c:\users\Die Schauertes\AppData\Roaming\U3
2013-09-15 15:15 . 2013-08-08 01:03 2348544 ----a-w- c:\windows\system32\win32k.sys
2013-09-15 15:15 . 2013-08-05 01:56 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-20 12:30 . 2012-04-12 06:15 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-09-20 12:30 . 2011-07-26 06:15 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-30 07:48 . 2013-06-28 12:33 369584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-08-30 07:48 . 2013-06-28 12:33 56080 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-08-30 07:48 . 2013-06-28 12:33 177864 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-08-30 07:48 . 2013-06-28 12:33 61680 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-08-30 07:48 . 2013-06-28 12:33 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-08-30 07:48 . 2013-06-28 12:33 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-08-30 07:48 . 2013-06-28 12:33 29816 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-08-30 07:48 . 2013-06-28 12:33 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-08-30 07:47 . 2013-06-28 12:33 41664 ----a-w- c:\windows\avastSS.scr
2013-08-30 07:47 . 2013-06-28 12:33 229648 ----a-w- c:\windows\system32\aswBoot.exe
2013-08-16 07:08 . 2013-08-16 07:08 293192 ----a-w- c:\program files\iTunesOutlookAddIn.dll
2013-08-16 07:07 . 2013-08-16 07:07 9789256 ----a-w- c:\program files\iTunes.exe
2013-08-16 07:07 . 2013-08-16 07:07 412488 ----a-w- c:\program files\iTunesAdmin.dll
2013-08-16 07:07 . 2013-08-16 07:07 152392 ----a-w- c:\program files\iTunesHelper.exe
2013-08-16 07:07 . 2013-08-16 07:07 148808 ----a-w- c:\program files\iTunesHelper.dll
2013-08-16 07:07 . 2013-08-16 07:07 117576 ----a-w- c:\program files\iTunesMiniPlayer.dll
2013-08-16 07:07 . 2013-08-16 07:07 23415624 ----a-w- c:\program files\iTunes.dll
2013-08-16 07:07 . 2013-08-16 07:07 776216 ----a-w- c:\program files\gnsdk_sdkmanager.dll
2013-08-16 07:07 . 2013-08-16 07:07 650056 ----a-w- c:\program files\iPodUpdaterExt.dll
2013-08-16 07:07 . 2013-08-16 07:07 3008536 ----a-w- c:\program files\gnsdk_dsp.dll
2013-08-16 07:07 . 2013-08-16 07:07 262680 ----a-w- c:\program files\gnsdk_submit.dll
2013-08-16 07:07 . 2013-08-16 07:07 219672 ----a-w- c:\program files\gnsdk_musicid.dll
2013-08-07 02:22 . 2010-08-30 16:46 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-07-25 08:57 . 2013-08-18 07:59 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-19 01:41 . 2013-08-18 07:59 2048 ----a-w- c:\windows\system32\tzres.dll
2013-07-12 11:42 . 2013-07-12 11:42 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-12 11:42 . 2012-09-20 09:32 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-12 11:42 . 2010-08-30 10:05 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-09 05:03 . 2013-08-18 08:00 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-09 05:03 . 2013-08-18 08:00 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-07-09 04:53 . 2013-08-18 08:00 1289096 ----a-w- c:\windows\system32\ntdll.dll
2013-07-09 04:52 . 2013-08-18 08:00 175104 ----a-w- c:\windows\system32\wintrust.dll
2013-07-09 04:50 . 2013-08-18 08:00 652800 ----a-w- c:\windows\system32\rpcrt4.dll
2013-07-09 04:46 . 2013-08-18 08:00 1166848 ----a-w- c:\windows\system32\crypt32.dll
2013-07-09 04:46 . 2013-08-18 08:00 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-09 04:46 . 2013-08-18 08:00 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-06 05:05 . 2013-08-18 08:00 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-04-08 01:31 . 2013-04-08 01:31 112968 ----a-w- c:\program files\ITDetector.ocx
2013-01-21 18:00 . 2013-01-21 17:59 11681632 ----a-w- c:\program files\aTube_Catcher.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 121968 ------w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
@="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
[HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
2012-11-10 08:55 158056 ----a-w- c:\windows\System32\CbFsMntNtf3.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DeskSave"="c:\exefiles\dsksve8\DeskSave.exe" [2008-07-26 82944]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2011-02-04 2346496]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-27 98304]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"iTunesHelper"="c:\program files\iTunesHelper.exe" [2013-08-16 152392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"aswAhAScr.dll"="c:\program files\AVAST Software\Avast\aswRegSvr.exe" [2013-08-30 51880]
"aswasOutExt.dll"="c:\program files\AVAST Software\Avast\aswRegSvr.exe" [2013-08-30 51880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
backup=c:\windows\pss\Bluetooth Manager.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
backup=c:\windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-03 07:35 946352 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2012-12-19 14:39 41208 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2013-04-21 19:43 59720 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2011-03-15 01:09 2565520 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx]
2011-08-04 15:06 1612920 ----a-w- c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
2009-11-02 21:21 103720 ------w- c:\program files\CyberLink\Power2Go\CLMLSvc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-26 17:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
2010-03-04 03:16 284696 ----a-w- c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch SilverCrest MTS2219-SLN-K]
2010-10-29 16:56 1424384 ----a-w- c:\program files\SilverCrest MTS2219-SLN Driver\KbClient_FD2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch SilverCrest MTS2219-SLN-M]
2010-10-29 16:56 862720 ----a-w- c:\program files\SilverCrest MTS2219-SLN Driver\MouClient_FD2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
2010-04-27 17:09 113288 ----a-w- c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFPrint]
2013-03-20 12:38 162856 ----a-w- c:\program files\PDF24\pdf24.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 01:59 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2010-06-14 15:46 9288296 ------w- c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2013-02-28 16:50 18642024 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
2011-08-05 11:29 159456 ----a-w- c:\program files\Zune\ZuneLauncher.exe
.
R0 qpxvu;qpxvu;c:\windows\System32\drivers\yhde.sys [x]
R2 ICM_UpdaterService;ICM_UpdaterService Disp;c:\program files\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 22528]
R3 csr_a2dp;Bluetooth-AV-Profil;c:\windows\system32\drivers\bthav.sys [2009-12-21 61952]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-06-04 84248]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [x]
R3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\162F.tmp [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [2008-08-29 71832]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2010-12-21 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2010-12-21 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2010-12-21 123648]
R3 sscebus;SAMSUNG USB Composite Device V2 driver (WDM);c:\windows\system32\DRIVERS\sscebus.sys [2010-12-21 98560]
R3 sscemdfl;SAMSUNG Mobile Modem V2 Filter;c:\windows\system32\DRIVERS\sscemdfl.sys [2010-12-21 14848]
R3 sscemdm;SAMSUNG Mobile Modem V2 Drivers;c:\windows\system32\DRIVERS\sscemdm.sys [2010-12-21 123648]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-06-04 181912]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 VBoxNetAdp;VMLite Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2010-08-11 100264]
R3 VMLiteUSB;VMLite USB;c:\windows\system32\Drivers\VMLiteUSB.sys [2010-08-18 135272]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys [2012-11-10 299144]
S1 VBoxDrv;VBoxDrv;c:\windows\system32\drivers\VBoxDrv.sys [2010-08-11 143848]
S1 vmlitedrv;vmlitedrv;c:\windows\system32\drivers\vmlitedrv.sys [2010-06-29 15464]
S1 VMLiteUSBMon;VMLiteUSBMon;c:\windows\system32\drivers\vmliteusbmon.sys [2010-08-18 127080]
S2 ACEDRV09;ACEDRV09;c:\windows\system32\drivers\ACEDRV09.sys [2012-06-09 110304]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-05-27 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-08-30 66336]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [2013-09-09 1740600]
S2 VMLiteService;VMLiteService;c:\program files\VMLite\VMLite Workstation\VMLiteService.exe [2010-08-21 455784]
S3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service;c:\windows\system32\DRIVERS\InputFilter_FlexDef2b.sys [2010-06-19 14848]
S3 MouFilter_Mou_FlexDef4;HID Mouse(FlexDef4) Driver Service;c:\windows\system32\DRIVERS\MouFilter_FlexDef4.sys [2010-10-20 11776]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-05-31 267880]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 603240]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [2013-08-21 12320]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2010-08-11 111208]
S3 vmlitestor;vmlitestor;c:\windows\system32\DRIVERS\vmlitestor.sys [2010-08-18 140392]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 12:30]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-23 07:57]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-08-23 07:57]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - ExtSQL: 2013-09-23 17:35; {e001c731-5e37-4538-a5cb-8168736a2360}; c:\users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-BsScanner
MSConfigStartUp-CanonSolutionMenu - c:\program files\Canon\SolutionMenu\CNSLMAIN.exe
MSConfigStartUp-FlashPlayerUpdate - c:\windows\system32\Macromed\Flash\FlashUtil10i_Plugin.exe
MSConfigStartUp-ITSecMng - c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
MSConfigStartUp-NokiaOviSuite2 - c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
MSConfigStartUp-OpwareSE2 - c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
MSConfigStartUp-Spotify - c:\users\Die Schauertes\AppData\Roaming\Spotify\Spotify.exe
MSConfigStartUp-Spotify Web Helper - c:\users\Die Schauertes\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
MSConfigStartUp-STAMPIT-Tray - c:\program files\STAMPIT\BINARY\STRAY.EXE
AddRemove-StartSearch Toolbar - c:\program files\StartSearch plugin\uninst.exe
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-12_Symbian_USB_Download_Driver - c:\program files\SAMSUNG\USB Drivers\12_Symbian_USB_Download_Driver\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\SAMSUNG\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\162F.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-25 08:29:16
ComboFix-quarantined-files.txt 2013-09-25 06:29
.
Vor Suchlauf: 14 Verzeichnis(se), 823.583.748.096 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 823.508.832.256 Bytes frei
.
- - End Of File - - E7F7CD844789D7B1B731FF3A3960F671
5D949EEA3BEEC2DF38A2D7900AD89A60
|
|
25.09.2013, 18:04
| #4 |
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen Programmen Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.09.2013, 06:47
| #5 |
| | Win 7, häufige Hänger in allen Programmen Erstmal MBM: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.25.06 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 8.0.7601.17514 Die Schauertes :: NEWBIE2010 [Administrator] 25.09.2013 20:27:43 mbam-log-2013-09-25 (20-27-43).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 280344 Laufzeit: 9 Minute(n), 59 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 2 C:\Users\Die Schauertes\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Die Schauertes\AppData\Roaming\OpenCandy\A255F1DDFC3746D4A7C58C92A23234E7 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 1 C:\Users\Die Schauertes\AppData\Roaming\OpenCandy\A255F1DDFC3746D4A7C58C92A23234E7\PCSU_SL_3.1.2.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) So, da in ich wieder...hatte gestern abend kein Internet mehr...ach Kabel... Adwcleaner LOG: Code:
ATTFilter # AdwCleaner v3.005 - Bericht erstellt am 25/09/2013 um 20:47:19
# Updated 22/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Die Schauertes - NEWBIE2010
# Gestartet von : C:\Users\Die Schauertes\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\Local\Deals Plugin
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\Local\OpenCandy
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\LocalLow\ConduitEngine
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\LocalLow\Search Settings
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\LocalLow\softonic-de3
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\jetpack
Datei Gelöscht : C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\searchplugins\Startsear.xml
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\loaalbhdjmjgdckmmeflpmbacffgnmme
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\tracing\askpartnercobrandingtool_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Deals Plugin_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Deals Plugin_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2319825
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2431245
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2613550
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2903601
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_allway-sync_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_allway-sync_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_greenfish-icon-editor-pro_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_greenfish-icon-editor-pro_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-xp-mode_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-xp-mode_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\PIP
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\StartSearch
Schlüssel Gelöscht : HKCU\Software\vShare.tv
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\conduitEngine
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Deals Plugin
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\pdfforge
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\Search Settings
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
***** [ Browser ] *****
-\\ Internet Explorer v0.0.0.0
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\prefs.js ]
[ Datei : C:\Users\Jo & Marion\AppData\Roaming\Mozilla\Firefox\Profiles\e6gkplmi.default\prefs.js ]
[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\haqwie00.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [7569 octets] - [25/09/2013 20:46:25]
AdwCleaner[S0].txt - [7375 octets] - [25/09/2013 20:47:19]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7435 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Home Premium x86
Ran by Die Schauertes on 25.09.2013 at 20:51:15,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550055465537}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660066466637}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440044464437}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550055465537}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660066466637}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440044464437}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011461137}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealsPluginROW_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealsPluginROW_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{01FC1BE1-51AD-4017-9393-66FB2941B153}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{22E33AC7-D3B6-4205-B11B-69B619F66958}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A5BFA6C2-F708-419E-B45C-E2617A3235D4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{22E33AC7-D3B6-4205-B11B-69B619F66958}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{00C33BE6-8818-4E45-B611-6D5C2A8C70F4}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{1683421A-7A4B-462C-AA84-FEA1B6A3AB4E}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{1F17E03A-E4D3-406D-9263-43B0DBD841FE}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{2E3DEA81-BA95-4D56-91DF-568CD8884BE4}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{3BFF77E9-BA0C-452A-BE18-F11C9D591AC1}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{60925714-CCF2-4969-B795-50A133BEEC85}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{6C9EF0B9-3CEF-48FF-8EEA-EB0CBE5CCC9E}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{7594FFD8-64AF-4E0C-92F5-A816D72B820F}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{C168577B-F60E-4153-B847-92CF4FEE8DD4}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{D085CD70-2922-4D2C-B789-3D86F692AFC2}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{D377DFCC-8804-47C8-9648-42BBEA21740F}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{EFBC3232-3082-4DEC-AA17-F9BB252C0B7D}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{F7930A32-2733-4B5D-8BA0-14E32BBB4289}
Successfully deleted: [Empty Folder] C:\Users\Die Schauertes\appdata\local\{F7AB4767-838A-4E74-BDA3-D05AA1A9E4AB}
~~~ FireFox
Emptied folder: C:\Users\Die Schauertes\AppData\Roaming\mozilla\firefox\profiles\qqc7mnrc.default-1359539111912\minidumps [49 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.09.2013 at 20:53:45,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2013
Ran by Die Schauertes (administrator) on NEWBIE2010 on 25-09-2013 20:54:53
Running from C:\Users\Die Schauertes\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Siliten) C:\Program Files\SilverCrest MTS2219-SLN Driver\MouClient_FD2.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Siliten) C:\Program Files\SilverCrest MTS2219-SLN Driver\KbClient_FD2.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\exefiles\dsksve8\DeskSave.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM\...\Run: [Launch SilverCrest MTS2219-SLN-M] - C:\Program Files\SilverCrest MTS2219-SLN Driver\MouClient_FD2.exe [862720 2010-10-29] (Siliten)
HKLM\...\Run: [Launch SilverCrest MTS2219-SLN-K] - C:\Program Files\SilverCrest MTS2219-SLN Driver\KbClient_FD2.exe [1424384 2010-10-29] (Siliten)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKCU\...\Run: [DeskSave] - C:\exefiles\dsksve8\DeskSave.exe [82944 2008-07-26] ()
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2346496 2011-02-04] ()
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Jo & Marion\...\Policies\system: [LogonHoursAction] 2
HKU\Jo & Marion\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lili & Pauline\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Lili & Pauline\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Lili & Pauline\...\Policies\system: [LogonHoursAction] 2
HKU\Lili & Pauline\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {DC0B0A85-10AC-449A-8F43-57CA5EB93515} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=827316&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @canon.com/MycameraPlugin - C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\Die Schauertes\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Grooveshark Proxy - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\groovesharkProxy@DannieDarko
FF Extension: Bitdefender QuickScan - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: autofillForms - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\autofillForms@blueimp.net.xpi
FF Extension: firefox - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\firefox@ghostery.com.xpi
FF Extension: secureLogin - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\secureLogin@blueimp.net.xpi
FF Extension: No Name - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-09-09] (TuneUp Software)
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [455784 2010-08-21] (VMLite, Inc.)
S2 ICM_UpdaterService; C:\Program Files\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [x]
==================== Drivers (Whitelisted) ====================
R2 ACEDRV09; C:\Windows\system32\drivers\ACEDRV09.sys [110304 2012-06-09] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299144 2012-11-10] (EldoS Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [61952 2009-12-21] (CSR, plc)
R3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-19] (Siliten)
R3 MouFilter_Mou_FlexDef4; C:\Windows\System32\DRIVERS\MouFilter_FlexDef4.sys [11776 2010-10-20] (Siliten)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)
S3 sscebus; C:\Windows\System32\DRIVERS\sscebus.sys [98560 2010-12-21] (MCCI Corporation)
S3 sscemdfl; C:\Windows\System32\DRIVERS\sscemdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 sscemdm; C:\Windows\System32\DRIVERS\sscemdm.sys [123648 2010-12-21] (MCCI Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2010-12-21] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-12-21] (MCCI Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [143848 2010-08-11] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [100264 2010-08-11] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [111208 2010-08-11] (VMLite, Inc.)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [15464 2010-06-29] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\System32\DRIVERS\vmlitestor.sys [140392 2010-08-18] (VMLite, Inc.)
S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [135272 2010-08-18] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [127080 2010-08-18] (VMLite, Inc.)
S3 ZSMC303; C:\Windows\System32\Drivers\usbVM303.sys [391300 2006-02-23] (Vimicro Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\DIESCH~1\AppData\Local\Temp\catchme.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [x]
S3 MEMSWEEP2; \??\C:\Windows\system32\162F.tmp [x]
S0 qpxvu; System32\drivers\yhde.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x86\Sandra.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-25 20:53 - 2013-09-25 20:53 - 00004334 _____ C:\Users\Die Schauertes\Desktop\JRT.txt
2013-09-25 20:51 - 2013-09-25 20:51 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 20:45 - 2013-09-25 20:47 - 00000000 ____D C:\AdwCleaner
2013-09-25 20:35 - 2013-09-25 20:35 - 01030038 _____ (Thisisu) C:\Users\Die Schauertes\Downloads\JRT.exe
2013-09-25 20:34 - 2013-09-25 20:35 - 01042066 _____ C:\Users\Die Schauertes\Downloads\adwcleaner.exe
2013-09-25 20:23 - 2013-09-25 20:49 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-25 20:22 - 2013-09-25 20:48 - 00002230 _____ C:\Windows\PFRO.log
2013-09-25 20:22 - 2013-09-25 20:48 - 00000168 _____ C:\Windows\setupact.log
2013-09-25 20:22 - 2013-09-25 20:22 - 00000000 _____ C:\Windows\setuperr.log
2013-09-25 08:29 - 2013-09-25 08:29 - 00026967 _____ C:\ComboFix.txt
2013-09-25 07:55 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-25 07:55 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-25 07:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-25 07:52 - 2013-09-25 08:29 - 00000000 ____D C:\Qoobox
2013-09-25 07:51 - 2013-09-25 08:28 - 00000000 ____D C:\Windows\erdnt
2013-09-25 07:50 - 2013-09-25 07:51 - 05130004 ____R (Swearware) C:\Users\Die Schauertes\Downloads\ComboFix.exe
2013-09-24 18:06 - 2013-09-24 18:07 - 00040327 _____ C:\Users\Die Schauertes\Downloads\Addition.txt
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 19:46 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:03 - 2013-09-24 18:03 - 01088653 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-23 18:00 - 2013-09-09 15:29 - 00036152 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-09-23 17:59 - 2013-09-09 15:29 - 00036664 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-09-23 17:59 - 2013-09-09 15:29 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-09-23 17:58 - 2013-09-23 18:01 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 17:58 - 2013-09-23 18:00 - 00000000 ____D C:\Program Files\TuneUp Utilities 2014
2013-09-23 17:58 - 2013-09-23 17:58 - 00002203 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00002183 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:56 - 2013-09-23 17:57 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:36 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-19 09:17 - 2013-09-23 14:27 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-19 09:17 - 2012-11-10 10:56 - 00223592 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-09-19 09:17 - 2012-11-10 10:55 - 00158056 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-09-19 09:17 - 2012-11-10 10:50 - 00299144 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:03 - 2013-09-19 09:04 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:37 - 2013-09-18 16:43 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:56 - 2013-09-18 13:05 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:50 - 2013-09-18 13:09 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:48 - 2013-09-18 12:49 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:03 - 2013-09-17 19:04 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:00 - 2013-09-17 19:01 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-16 16:45 - 2013-09-16 16:54 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-15 17:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-15 17:15 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-15 17:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-15 17:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-15 17:14 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-15 17:14 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
==================== One Month Modified Files and Folders =======
2013-09-25 20:53 - 2013-09-25 20:53 - 00004334 _____ C:\Users\Die Schauertes\Desktop\JRT.txt
2013-09-25 20:51 - 2013-09-25 20:51 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 20:49 - 2013-09-25 20:23 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-25 20:49 - 2013-08-23 09:57 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-25 20:49 - 2011-07-01 10:26 - 00000000 ____D C:\Users\Die Schauertes\.rainlendar2
2013-09-25 20:48 - 2013-09-25 20:22 - 00002230 _____ C:\Windows\PFRO.log
2013-09-25 20:48 - 2013-09-25 20:22 - 00000168 _____ C:\Windows\setupact.log
2013-09-25 20:48 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 20:47 - 2013-09-25 20:45 - 00000000 ____D C:\AdwCleaner
2013-09-25 20:47 - 2011-02-07 09:45 - 01179550 _____ C:\Windows\WindowsUpdate.log
2013-09-25 20:47 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 20:47 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 20:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas
2013-09-25 20:35 - 2013-09-25 20:35 - 01030038 _____ (Thisisu) C:\Users\Die Schauertes\Downloads\JRT.exe
2013-09-25 20:35 - 2013-09-25 20:34 - 01042066 _____ C:\Users\Die Schauertes\Downloads\adwcleaner.exe
2013-09-25 20:30 - 2012-04-12 08:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-25 20:28 - 2010-08-28 02:49 - 01622012 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-25 20:22 - 2013-09-25 20:22 - 00000000 _____ C:\Windows\setuperr.log
2013-09-25 10:47 - 2011-02-04 10:24 - 00000000 ____D C:\Users\Lili & Pauline
2013-09-25 10:37 - 2010-12-01 16:05 - 00000000 ____D C:\Windows\pss
2013-09-25 10:25 - 2012-02-23 18:04 - 00000000 ____D C:\Users\Die Schauertes\Scans
2013-09-25 10:02 - 2013-08-23 09:57 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-25 08:29 - 2013-09-25 08:29 - 00026967 _____ C:\ComboFix.txt
2013-09-25 08:29 - 2013-09-25 07:52 - 00000000 ____D C:\Qoobox
2013-09-25 08:29 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-09-25 08:29 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-09-25 08:28 - 2013-09-25 07:51 - 00000000 ____D C:\Windows\erdnt
2013-09-25 08:25 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-25 07:55 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt
2013-09-25 07:51 - 2013-09-25 07:50 - 05130004 ____R (Swearware) C:\Users\Die Schauertes\Downloads\ComboFix.exe
2013-09-24 19:46 - 2013-09-24 18:05 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 19:29 - 2010-12-30 13:51 - 00000000 ___SD C:\Users\Die Schauertes\Documents\Sticky Passwords
2013-09-24 19:29 - 2010-12-06 12:47 - 00000000 ____D C:\Program Files\KeePass-2.13
2013-09-24 18:07 - 2013-09-24 18:06 - 00040327 _____ C:\Users\Die Schauertes\Downloads\Addition.txt
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:05 - 2010-11-29 16:44 - 00000000 ____D C:\Users\Die Schauertes
2013-09-24 18:03 - 2013-09-24 18:03 - 01088653 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-24 16:45 - 2011-09-21 17:51 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-23 18:05 - 2013-08-18 11:20 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-23 18:05 - 2013-01-09 19:51 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-09-23 18:01 - 2013-09-23 17:58 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 18:00 - 2013-09-23 17:58 - 00000000 ____D C:\Program Files\TuneUp Utilities 2014
2013-09-23 17:58 - 2013-09-23 17:58 - 00002203 _____ C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00002183 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:57 - 2013-09-23 17:56 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:37 - 2013-09-23 17:36 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-23 17:35 - 2013-06-28 11:59 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\QuickScan
2013-09-23 17:29 - 2011-06-28 09:00 - 00000000 ____D C:\Users\Die Schauertes\Hörbücher
2013-09-23 17:24 - 2011-01-17 19:24 - 00000000 ____D C:\Users\Die Schauertes\Documents\2011-01-17
2013-09-23 14:27 - 2013-09-19 09:17 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-22 20:28 - 2010-12-02 14:01 - 00000000 ____D C:\Users\Die Schauertes\!MARYS
2013-09-20 14:30 - 2012-04-12 08:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 14:30 - 2011-07-26 08:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-19 17:21 - 2010-12-04 19:06 - 00204288 ___SH C:\Users\Die Schauertes\Documents\Thumbs.db
2013-09-19 09:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:04 - 2013-09-19 09:03 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:43 - 2013-09-18 16:37 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:09 - 2013-09-18 12:50 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 13:05 - 2013-09-18 12:56 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:49 - 2013-09-18 12:48 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 12:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-18 11:09 - 2010-12-02 14:18 - 00000000 ____D C:\Users\Die Schauertes\.gimp-2.6
2013-09-18 09:02 - 2010-12-06 18:31 - 00000000 ____D C:\Users\Die Schauertes\VMLites
2013-09-18 08:18 - 2010-12-02 17:33 - 00000000 ____D C:\Users\Die Schauertes\Pauline
2013-09-18 08:18 - 2010-12-02 13:43 - 00000000 ___RD C:\Users\Die Schauertes\Gerd und Mary
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:04 - 2013-09-17 19:03 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:01 - 2013-09-17 19:00 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-17 18:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\schemas
2013-09-16 16:54 - 2013-09-16 16:45 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-16 13:16 - 2012-10-24 13:34 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Canon Easy-PhotoPrint EX
2013-09-16 13:12 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-16 12:42 - 2010-12-06 12:12 - 00030208 _____ C:\Users\Die Schauertes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-15 18:01 - 2012-12-12 20:30 - 00000000 ___RD C:\Users\Die Schauertes\Podcasts
2013-09-15 18:00 - 2009-07-14 06:33 - 01334440 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-15 17:58 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-09-15 17:48 - 2011-09-12 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-15 17:45 - 2013-08-01 18:00 - 00000000 ____D C:\Windows\system32\MRT
2013-09-15 17:39 - 2010-08-30 18:47 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-10 15:09 - 2011-05-15 11:30 - 00002124 _____ C:\Users\Public\Desktop\Video Search.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
2013-09-09 15:29 - 2013-09-23 18:00 - 00036152 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-09-09 15:29 - 2013-09-23 17:59 - 00036664 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-09-09 15:29 - 2013-09-23 17:59 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-08-30 09:48 - 2013-06-28 14:33 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00177864 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-06-28 14:33 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-06-28 14:33 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
Some content of TEMP:
====================
C:\Users\Die Schauertes\AppData\Local\temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 11:57
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Etwas besser läuft er schon meine PC, aber jetzt ist das Startmenue voll mit IntelRapid Storage, Maus und Tastaturtreiber So, nachdem ich nun gerade auf die Programme im Startmenue geklickt hatte um zu schauen, welches das sind, gab´s nochmal den Totalfreezer... ausschalten ging noch, konnte aber nichts mehr schreiben. Nach Neustart wieder alles im grüneren Bereich Gerade hängt er wieder hin und wieder... Geändert von torimaniac (26.09.2013 um 06:43 Uhr) Grund: Neustart |
|
26.09.2013, 09:30
| #6 |
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen ProgrammenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Win 7, häufige Hänger in allen Programmen |
|
26.09.2013, 15:24
| #7 |
| | Win 7, häufige Hänger in allen Programmen So, nach fast 4Std. der ESET Log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=c300a75f03cb204281ca5ff56bfc9d72
# engine=15266
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=false
# utc_time=2013-09-26 02:06:13
# local_time=2013-09-26 04:06:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 71050 156914245 0 0
# compatibility_mode=5893 16776573 100 94 22128 131835564 0 0
# scanned=525565
# found=1
# cleaned=0
# scan_time=17090
sh=9436D0284EAD00411D0939BC09C7E61255A1A21D ft=1 fh=589a4aded9e43a01 vn="Win32/Adware.Linkular application" ac=I fn="C:\exefiles\sumo_nork214.exe"
 Na, das ging ja schnell, Security Check log: Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x86 (UAC is enabled) ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Sophos Anti-Rootkit 1.5.0 Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java 7 Update 25 Adobe Flash Player 11.8.800.168 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox (23.0.1) Mozilla Thunderbird (17.0.7) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-09-2013
Ran by Die Schauertes (administrator) on NEWBIE2010 on 26-09-2013 16:22:08
Running from C:\Users\Die Schauertes\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Siliten) C:\Program Files\SilverCrest MTS2219-SLN Driver\MouClient_FD2.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Siliten) C:\Program Files\SilverCrest MTS2219-SLN Driver\KbClient_FD2.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\exefiles\dsksve8\DeskSave.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM\...\Run: [Launch SilverCrest MTS2219-SLN-M] - C:\Program Files\SilverCrest MTS2219-SLN Driver\MouClient_FD2.exe [862720 2010-10-29] (Siliten)
HKLM\...\Run: [Launch SilverCrest MTS2219-SLN-K] - C:\Program Files\SilverCrest MTS2219-SLN Driver\KbClient_FD2.exe [1424384 2010-10-29] (Siliten)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKCU\...\Run: [DeskSave] - C:\exefiles\dsksve8\DeskSave.exe [82944 2008-07-26] ()
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2346496 2011-02-04] ()
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Default User\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Jo & Marion\...\Policies\system: [LogonHoursAction] 2
HKU\Jo & Marion\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Lili & Pauline\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Lili & Pauline\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
HKU\Lili & Pauline\...\Policies\system: [LogonHoursAction] 2
HKU\Lili & Pauline\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {DC0B0A85-10AC-449A-8F43-57CA5EB93515} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=827316&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @canon.com/MycameraPlugin - C:\Program Files\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper - C:\Users\Die Schauertes\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Grooveshark Proxy - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\groovesharkProxy@DannieDarko
FF Extension: Bitdefender QuickScan - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: autofillForms - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\autofillForms@blueimp.net.xpi
FF Extension: firefox - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\firefox@ghostery.com.xpi
FF Extension: secureLogin - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\secureLogin@blueimp.net.xpi
FF Extension: No Name - C:\Users\Die Schauertes\AppData\Roaming\Mozilla\Firefox\Profiles\qqc7mnrc.default-1359539111912\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [455784 2010-08-21] (VMLite, Inc.)
S2 ICM_UpdaterService; C:\Program Files\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [x]
==================== Drivers (Whitelisted) ====================
R2 ACEDRV09; C:\Windows\system32\drivers\ACEDRV09.sys [110304 2012-06-09] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [299144 2012-11-10] (EldoS Corporation)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [61952 2009-12-21] (CSR, plc)
R3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-19] (Siliten)
R3 MouFilter_Mou_FlexDef4; C:\Windows\System32\DRIVERS\MouFilter_FlexDef4.sys [11776 2010-10-20] (Siliten)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)
S3 sscebus; C:\Windows\System32\DRIVERS\sscebus.sys [98560 2010-12-21] (MCCI Corporation)
S3 sscemdfl; C:\Windows\System32\DRIVERS\sscemdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 sscemdm; C:\Windows\System32\DRIVERS\sscemdm.sys [123648 2010-12-21] (MCCI Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2010-12-21] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-12-21] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-12-21] (MCCI Corporation)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [143848 2010-08-11] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [100264 2010-08-11] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [111208 2010-08-11] (VMLite, Inc.)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [15464 2010-06-29] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\System32\DRIVERS\vmlitestor.sys [140392 2010-08-18] (VMLite, Inc.)
S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [135272 2010-08-18] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [127080 2010-08-18] (VMLite, Inc.)
S3 ZSMC303; C:\Windows\System32\Drivers\usbVM303.sys [391300 2006-02-23] (Vimicro Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\DIESCH~1\AppData\Local\Temp\catchme.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S3 FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [x]
S3 MEMSWEEP2; \??\C:\Windows\system32\162F.tmp [x]
S0 qpxvu; System32\drivers\yhde.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x86\Sandra.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-26 16:21 - 2013-09-26 16:21 - 01089329 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-26 11:14 - 2013-09-26 11:14 - 00891144 _____ C:\Users\Die Schauertes\Downloads\SecurityCheck.exe
2013-09-26 11:11 - 2013-09-26 11:11 - 02347384 _____ (ESET) C:\Users\Die Schauertes\Downloads\esetsmartinstaller_enu.exe
2013-09-25 20:53 - 2013-09-25 20:53 - 00004334 _____ C:\Users\Die Schauertes\Desktop\JRT.txt
2013-09-25 20:51 - 2013-09-25 20:51 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 20:45 - 2013-09-25 20:47 - 00000000 ____D C:\AdwCleaner
2013-09-25 20:35 - 2013-09-25 20:35 - 01030038 _____ (Thisisu) C:\Users\Die Schauertes\Downloads\JRT.exe
2013-09-25 20:34 - 2013-09-25 20:35 - 01042066 _____ C:\Users\Die Schauertes\Downloads\adwcleaner.exe
2013-09-25 20:23 - 2013-09-26 11:08 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-25 20:22 - 2013-09-26 11:08 - 00000336 _____ C:\Windows\setupact.log
2013-09-25 20:22 - 2013-09-25 20:48 - 00002230 _____ C:\Windows\PFRO.log
2013-09-25 20:22 - 2013-09-25 20:22 - 00000000 _____ C:\Windows\setuperr.log
2013-09-25 08:29 - 2013-09-25 08:29 - 00026967 _____ C:\ComboFix.txt
2013-09-25 07:55 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-25 07:55 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-25 07:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-25 07:55 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-25 07:52 - 2013-09-25 08:29 - 00000000 ____D C:\Qoobox
2013-09-25 07:51 - 2013-09-25 08:28 - 00000000 ____D C:\Windows\erdnt
2013-09-25 07:50 - 2013-09-25 07:51 - 05130004 ____R (Swearware) C:\Users\Die Schauertes\Downloads\ComboFix.exe
2013-09-24 18:06 - 2013-09-24 18:07 - 00040327 _____ C:\Users\Die Schauertes\Downloads\Addition.txt
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 19:46 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-23 17:58 - 2013-09-23 18:01 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:56 - 2013-09-23 17:57 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:36 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-19 09:17 - 2013-09-23 14:27 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-19 09:17 - 2012-11-10 10:56 - 00223592 _____ (EldoS Corporation) C:\Windows\system32\CbFsNetRdr3.dll
2013-09-19 09:17 - 2012-11-10 10:55 - 00158056 _____ (EldoS Corporation) C:\Windows\system32\CbFsMntNtf3.dll
2013-09-19 09:17 - 2012-11-10 10:50 - 00299144 _____ (EldoS Corporation) C:\Windows\system32\Drivers\cbfs3.sys
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:03 - 2013-09-19 09:04 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:37 - 2013-09-18 16:43 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:56 - 2013-09-18 13:05 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:50 - 2013-09-18 13:09 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:48 - 2013-09-18 12:49 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:03 - 2013-09-17 19:04 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:00 - 2013-09-17 19:01 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-16 16:45 - 2013-09-16 16:54 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-15 17:15 - 2013-08-08 03:03 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-15 17:15 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-15 17:15 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-15 17:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-15 17:14 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-15 17:14 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-15 17:14 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-15 17:14 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
==================== One Month Modified Files and Folders =======
2013-09-26 16:21 - 2013-09-26 16:21 - 01089329 _____ (Farbar) C:\Users\Die Schauertes\Downloads\FRST.exe
2013-09-26 16:02 - 2013-08-23 09:57 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-26 15:50 - 2010-12-02 14:01 - 00000000 ____D C:\Users\Die Schauertes\!MARYS
2013-09-26 15:30 - 2012-04-12 08:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-26 14:56 - 2011-02-07 09:45 - 01216700 _____ C:\Windows\WindowsUpdate.log
2013-09-26 11:16 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-26 11:16 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-26 11:14 - 2013-09-26 11:14 - 00891144 _____ C:\Users\Die Schauertes\Downloads\SecurityCheck.exe
2013-09-26 11:11 - 2013-09-26 11:11 - 02347384 _____ (ESET) C:\Users\Die Schauertes\Downloads\esetsmartinstaller_enu.exe
2013-09-26 11:10 - 2013-08-23 09:57 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-26 11:10 - 2011-07-01 10:26 - 00000000 ____D C:\Users\Die Schauertes\.rainlendar2
2013-09-26 11:08 - 2013-09-25 20:23 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-09-26 11:08 - 2013-09-25 20:22 - 00000336 _____ C:\Windows\setupact.log
2013-09-26 11:08 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-26 09:00 - 2010-12-30 14:10 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\KeePass
2013-09-26 09:00 - 2010-12-30 13:51 - 00000000 ___SD C:\Users\Die Schauertes\Documents\Sticky Passwords
2013-09-25 20:58 - 2010-08-28 02:49 - 01622012 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-25 20:53 - 2013-09-25 20:53 - 00004334 _____ C:\Users\Die Schauertes\Desktop\JRT.txt
2013-09-25 20:51 - 2013-09-25 20:51 - 00000000 ____D C:\Windows\ERUNT
2013-09-25 20:48 - 2013-09-25 20:22 - 00002230 _____ C:\Windows\PFRO.log
2013-09-25 20:47 - 2013-09-25 20:45 - 00000000 ____D C:\AdwCleaner
2013-09-25 20:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas
2013-09-25 20:35 - 2013-09-25 20:35 - 01030038 _____ (Thisisu) C:\Users\Die Schauertes\Downloads\JRT.exe
2013-09-25 20:35 - 2013-09-25 20:34 - 01042066 _____ C:\Users\Die Schauertes\Downloads\adwcleaner.exe
2013-09-25 20:22 - 2013-09-25 20:22 - 00000000 _____ C:\Windows\setuperr.log
2013-09-25 10:47 - 2011-02-04 10:24 - 00000000 ____D C:\Users\Lili & Pauline
2013-09-25 10:37 - 2010-12-01 16:05 - 00000000 ____D C:\Windows\pss
2013-09-25 10:25 - 2012-02-23 18:04 - 00000000 ____D C:\Users\Die Schauertes\Scans
2013-09-25 08:29 - 2013-09-25 08:29 - 00026967 _____ C:\ComboFix.txt
2013-09-25 08:29 - 2013-09-25 07:52 - 00000000 ____D C:\Qoobox
2013-09-25 08:29 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-09-25 08:29 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-09-25 08:28 - 2013-09-25 07:51 - 00000000 ____D C:\Windows\erdnt
2013-09-25 08:25 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-25 07:55 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt
2013-09-25 07:51 - 2013-09-25 07:50 - 05130004 ____R (Swearware) C:\Users\Die Schauertes\Downloads\ComboFix.exe
2013-09-24 19:46 - 2013-09-24 18:05 - 00000490 _____ C:\Users\Die Schauertes\Downloads\defogger_disable.log
2013-09-24 19:29 - 2010-12-06 12:47 - 00000000 ____D C:\Program Files\KeePass-2.13
2013-09-24 18:07 - 2013-09-24 18:06 - 00040327 _____ C:\Users\Die Schauertes\Downloads\Addition.txt
2013-09-24 18:06 - 2013-09-24 18:06 - 00000000 ____D C:\FRST
2013-09-24 18:05 - 2013-09-24 18:05 - 00000000 _____ C:\Users\Die Schauertes\defogger_reenable
2013-09-24 18:05 - 2010-11-29 16:44 - 00000000 ____D C:\Users\Die Schauertes
2013-09-24 18:03 - 2013-09-24 18:03 - 00377856 _____ C:\Users\Die Schauertes\Downloads\gmer_2.1.19163.exe
2013-09-24 18:03 - 2013-09-24 18:03 - 00050477 _____ C:\Users\Die Schauertes\Downloads\Defogger.exe
2013-09-24 16:45 - 2011-09-21 17:51 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-23 18:05 - 2013-08-18 11:20 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-23 18:05 - 2013-01-09 19:51 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-09-23 18:01 - 2013-09-23 17:58 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-09-23 17:58 - 2013-09-23 17:58 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\TuneUp Software
2013-09-23 17:57 - 2013-09-23 17:57 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-09-23 17:57 - 2013-09-23 17:56 - 32555432 _____ (TuneUp Software) C:\Users\Die Schauertes\Downloads\TuneUpUtilities2014_de-DE.exe
2013-09-23 17:37 - 2013-09-23 17:37 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958(1).exe
2013-09-23 17:37 - 2013-09-23 17:36 - 61622856 _____ (SiSoftware ) C:\Users\Die Schauertes\Downloads\san1958.exe
2013-09-23 17:36 - 2013-09-23 17:36 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2013-09-23 17:35 - 2013-06-28 11:59 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\QuickScan
2013-09-23 17:29 - 2011-06-28 09:00 - 00000000 ____D C:\Users\Die Schauertes\Hörbücher
2013-09-23 17:24 - 2011-01-17 19:24 - 00000000 ____D C:\Users\Die Schauertes\Documents\2011-01-17
2013-09-23 14:27 - 2013-09-19 09:17 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Livedrive
2013-09-20 14:30 - 2012-04-12 08:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 14:30 - 2011-07-26 08:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-19 17:21 - 2010-12-04 19:06 - 00204288 ___SH C:\Users\Die Schauertes\Documents\Thumbs.db
2013-09-19 09:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-19 09:15 - 2013-09-19 09:15 - 11072664 _____ (Livedrive Internet Ltd) C:\Users\Die Schauertes\Downloads\Livedrive-Setup.exe
2013-09-19 09:04 - 2013-09-19 09:03 - 32966136 _____ (Dropbox, Inc.) C:\Users\Die Schauertes\Downloads\Dropbox 2.0.26.exe
2013-09-18 16:43 - 2013-09-18 16:37 - 00000000 ____D C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2
2013-09-18 16:26 - 2013-09-18 16:26 - 01253687 _____ C:\Users\Die Schauertes\Downloads\crystaldiskinfo5_6_2.zip
2013-09-18 13:09 - 2013-09-18 12:50 - 00000000 ____D C:\Program Files\CrystalDiskMark
2013-09-18 13:07 - 2013-09-18 13:07 - 01853960 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskInfo5_6_2-en.exe
2013-09-18 13:05 - 2013-09-18 12:56 - 00000000 ____D C:\Program Files\CheckDrive
2013-09-18 12:57 - 2013-09-18 12:57 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Abelssoft
2013-09-18 12:55 - 2013-09-18 12:55 - 14536560 _____ (Abelssoft ) C:\Users\Die Schauertes\Downloads\checkdrive2014.exe
2013-09-18 12:51 - 2013-09-18 12:51 - 00005809 _____ C:\Users\Die Schauertes\Downloads\index.html
2013-09-18 12:49 - 2013-09-18 12:49 - 01657424 _____ (Crystal Dew World ) C:\Users\Die Schauertes\Downloads\CrystalDiskMark3_0_2f-en.exe
2013-09-18 12:49 - 2013-09-18 12:48 - 37529872 _____ (Intel Corporation) C:\Users\Die Schauertes\Downloads\Intel SSD Toolbox - v3.1.8.exe
2013-09-18 12:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-09-18 11:09 - 2013-09-18 11:09 - 00000852 _____ C:\Users\Die Schauertes\.recently-used.xbel
2013-09-18 11:09 - 2010-12-02 14:18 - 00000000 ____D C:\Users\Die Schauertes\.gimp-2.6
2013-09-18 09:02 - 2010-12-06 18:31 - 00000000 ____D C:\Users\Die Schauertes\VMLites
2013-09-18 08:18 - 2010-12-02 17:33 - 00000000 ____D C:\Users\Die Schauertes\Pauline
2013-09-18 08:18 - 2010-12-02 13:43 - 00000000 ___RD C:\Users\Die Schauertes\Gerd und Mary
2013-09-17 19:06 - 2013-09-17 19:06 - 00000000 ____D C:\Program Files\Seagate
2013-09-17 19:04 - 2013-09-17 19:03 - 50449456 _____ (Microsoft Corporation) C:\Users\Die Schauertes\Downloads\dotNetFx40_Full_x86_x64.exe
2013-09-17 19:01 - 2013-09-17 19:00 - 21700280 _____ C:\Users\Die Schauertes\Downloads\SeaToolsforWindowsSetup-1208.exe
2013-09-17 18:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\schemas
2013-09-16 16:54 - 2013-09-16 16:45 - 00000000 ____D C:\Users\Die Schauertes\AppData\Roaming\U3
2013-09-16 13:16 - 2012-10-24 13:34 - 00000000 ____D C:\Users\Die Schauertes\AppData\Local\Canon Easy-PhotoPrint EX
2013-09-16 13:12 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-16 12:42 - 2010-12-06 12:12 - 00030208 _____ C:\Users\Die Schauertes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-15 18:01 - 2012-12-12 20:30 - 00000000 ___RD C:\Users\Die Schauertes\Podcasts
2013-09-15 18:00 - 2009-07-14 06:33 - 01334440 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-15 17:58 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-09-15 17:48 - 2011-09-12 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-15 17:45 - 2013-08-01 18:00 - 00000000 ____D C:\Windows\system32\MRT
2013-09-15 17:39 - 2010-08-30 18:47 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-10 15:09 - 2013-09-10 15:09 - 00001192 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2013-09-10 15:09 - 2011-05-15 11:30 - 00002124 _____ C:\Users\Public\Desktop\Video Search.lnk
2013-09-09 20:30 - 2013-09-09 20:30 - 04454952 _____ (Piriform Ltd) C:\Users\Die Schauertes\Downloads\ccsetup405.exe
2013-08-30 09:48 - 2013-06-28 14:33 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00177864 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-08-30 09:48 - 2013-06-28 14:33 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-08-30 09:47 - 2013-06-28 14:33 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-08-30 09:47 - 2013-06-28 14:33 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr
Some content of TEMP:
====================
C:\Users\Die Schauertes\AppData\Local\temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-11 11:57
==================== End Of Log ============================
--- --- --- Momentan läuft er ein bisschen stabiler...muß mal abwarten  |
|
26.09.2013, 20:06
| #8 | ||
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen ProgrammenZitat:
Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.09.2013, 08:08
| #9 |
| | Win 7, häufige Hänger in allen Programmen o.k. mach ich. Desksave ist ein Programm zum fixierten der Icons auf dem Desktop bei Win 7. Habe ich schon ein paar Jahre. Ansonsten war es heute Abend nachdem der PC 8 St. gelaufen ist, wieder schlechter. Brauchst du noch was von mir? Ich habe meinen pc gerade hochgefahren.Leider hast er sich sofort nach dem Startmenue aufgehängt. Gestern lief er eigentlich zwischendurch ...Ach, Menno Sollte dir noch was einfallen, wäre ich sehr dankbar Mittlerweile glaube ich doch an einen Hardware Fehler. |
|
27.09.2013, 10:24
| #10 |
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen Programmen Ich würd Daten sichern, sauber formatieren und neu aufsetzen. Und dann nur AV installieren und testen, ohne sonstige Programme.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.09.2013, 10:41
| #11 |
| | Win 7, häufige Hänger in allen Programmen Danke schrauber, für deine Hilfe...hab auch was gespendet für euch In anderen Foren habe ich über Probleme mit avast und win7 gelesen. Das werde ich noch versuchen, danach ist neu aufsetzen angesagt. Danke nochmal...ihr seid unverzichtbar Liebe Grüße T |
|
27.09.2013, 17:25
| #12 |
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen Programmen Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.10.2013, 11:34
| #13 |
| | Win 7, häufige Hänger in allen Programmen Hi, ich wollte dir nur kurz mitteilen, dass sich meine Festplatte tatsächlich gecrasht hat. Auch nach Ausbau und als externe Festplatte keine Reaktion. Shit happens LG.... |
|
02.10.2013, 21:34
| #14 |
| /// the machine /// TB-Ausbilder | Win 7, häufige Hänger in allen Programmen ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win 7, häufige Hänger in allen Programmen |
| 32 bit, 4d36e972-e325-11ce-bfc1-08002be10318, abelssoft, antivirus, ccsetup, converter, crystaldiskinfo, desktop, email, farbar, farbar recovery scan tool, festplatte, firefox, flash player, help, homepage, hängen, maus, plug-in, problem, pup.optional.opencandy, pup.optional.pcspeedup.a, security, sekunden, software, svchost.exe, tracker, vista, win32/adware.linkular, windows |
Linear-Darstellung
