Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 23.11.2013, 19:33   #6
ASDFGHj3
 
Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren - Standard

Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren



FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013 03
Ran by Martinh (administrator) on RONJA-PC on 23-11-2013 17:55:47
Running from C:\Users\Martinh\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Akamai Technologies, Inc.) C:\Users\Ronja Heider\AppData\Local\Akamai\netsession_win.exe
(Acebyte) C:\Program Files (x86)\CleanGenius 3\CleanGeniusTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Akamai Technologies, Inc.) C:\Users\Ronja Heider\AppData\Local\Akamai\netsession_win.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Martinh\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2108200 2010-04-01] (Synaptics Incorporated)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9317F871F5E2CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = 
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR HomePage:    "homepage": null,
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119828&tt=gc_&babsrc=HP_ss&mntrId=960638EAA7D62A7B"
CHR Extension: (AdBlock) - C:\Users\Martinh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (Whilokii) - C:\Users\Martinh\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaimhpklononapfjngelgdokckfjekfc\1.0.0_0
CHR Extension: (Google Wallet) - C:\Users\Martinh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 SearchAnonymizer; C:\Users\Ronja\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [40960 2013-05-08] ()
S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-10-20] ()

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-23 17:55 - 2013-11-23 17:55 - 01958396 _____ (Farbar) C:\Users\Martinh\Downloads\FRST64 (1).exe
2013-11-23 17:54 - 2013-11-23 17:55 - 00005858 _____ C:\Users\Martinh\Downloads\FRST.txt
2013-11-23 17:54 - 2013-11-23 17:54 - 01958396 _____ (Farbar) C:\Users\Martinh\Downloads\FRST64.exe
2013-11-18 16:32 - 2013-11-18 16:36 - 00000000 ____D C:\AdwCleaner
2013-11-18 16:32 - 2013-11-18 16:32 - 01085542 _____ C:\Users\Ronja Heider\Desktop\adwcleaner.exe
2013-11-17 17:58 - 2013-11-17 17:58 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\Malwarebytes
2013-11-16 18:59 - 2013-11-16 18:59 - 00000000 ____H C:\Users\Martinh\Documents\Default.rdp
2013-11-16 18:56 - 2013-11-16 18:56 - 00000000 ____D C:\Users\Martinh\AppData\Local\Freemium
2013-11-16 18:49 - 2013-11-16 18:49 - 00891184 _____ C:\Users\Martinh\Downloads\SecurityCheck.exe
2013-11-16 17:57 - 2013-11-16 17:57 - 00000000 ____D C:\Users\Martinh\AppData\Local\Software_Updater
2013-11-16 15:08 - 2013-11-16 15:08 - 02347384 _____ (ESET) C:\Users\Martinh\Downloads\esetsmartinstaller_enu.exe
2013-11-16 14:54 - 2013-11-16 14:54 - 02347384 _____ (ESET) C:\Users\Ronja Heider\Downloads\esetsmartinstaller_enu.exe
2013-11-15 07:26 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-15 07:26 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-15 07:26 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-15 07:26 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-15 07:26 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-15 07:26 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-15 07:26 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-15 07:26 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-15 07:26 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-15 07:26 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-15 07:26 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 07:26 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 09:34 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 09:34 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 09:34 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 09:34 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 09:34 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 09:33 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 09:33 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 09:33 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 09:33 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 09:33 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 09:33 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 09:33 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 09:33 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 09:33 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 09:33 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 09:33 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 09:33 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 09:33 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 09:33 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 09:33 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 09:33 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 09:33 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 09:33 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 09:33 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 09:33 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 09:33 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 09:33 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 09:33 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 09:33 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 09:33 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 18:41 - 2013-11-13 18:49 - 00000000 ____D C:\ProgramData\HitmanPro
2013-11-13 18:40 - 2013-11-13 18:41 - 10264904 _____ (SurfRight B.V.) C:\Users\Ronja Heider\Downloads\HitmanPro_x64.exe
2013-11-13 18:33 - 2013-11-13 18:33 - 01957610 _____ (Farbar) C:\Users\Ronja Heider\Downloads\FRST64.exe
2013-11-11 16:17 - 2013-11-11 16:17 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64 (2).exe
2013-11-11 14:58 - 2013-11-11 14:58 - 53635584 _____ C:\Users\Ronja Heider\Downloads\wz175-64gev.msi
2013-11-11 14:57 - 2013-11-11 14:57 - 00385073 _____ C:\Users\Ronja Heider\Downloads\hyper_brushes (1).rar
2013-11-11 14:56 - 2013-11-11 14:56 - 07899006 _____ C:\Users\Ronja Heider\Downloads\Heads_Up_Display.rar
2013-11-11 14:56 - 2013-11-11 14:56 - 01517572 _____ C:\Users\Ronja Heider\Downloads\Double_Grunge_Circles.rar
2013-11-11 14:56 - 2013-11-11 14:56 - 00385073 _____ C:\Users\Ronja Heider\Downloads\hyper_brushes.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00068539 _____ C:\Users\Ronja Heider\Downloads\Brushed.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00027773 _____ C:\Users\Ronja Heider\Downloads\LaneHumouresque.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00015600 _____ C:\Users\Ronja Heider\Downloads\lastninja.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00004791 _____ C:\Users\Ronja Heider\Downloads\ARCADE.rar
2013-11-10 13:11 - 2013-11-18 18:18 - 38753792 _____ C:\Users\Ronja Heider\Ökosystem Fließgewässer - PPP.ppt
2013-11-08 15:38 - 2013-11-08 15:38 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64 (1).exe
2013-11-07 18:14 - 2013-11-11 16:17 - 00000334 _____ C:\Users\Ronja Heider\Downloads\SystemLook.txt
2013-11-07 18:12 - 2013-11-07 18:12 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64.exe
2013-11-07 18:10 - 2013-11-07 18:10 - 00053935 _____ C:\Users\Ronja Heider\Downloads\FRST.txt
2013-11-07 16:06 - 2013-11-07 16:06 - 00000000 ____D C:\Users\Ronja Heider\AppData\Local\Software_Updater
2013-11-06 17:55 - 2013-11-06 17:55 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\Malwarebytes
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-06 17:55 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-06 17:54 - 2013-11-06 17:54 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Martinh\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-06 17:38 - 2013-11-06 17:38 - 01034531 _____ (Thisisu) C:\Users\Martinh\Downloads\JRT.exe
2013-11-06 17:38 - 2013-11-06 17:38 - 00000000 ____D C:\Windows\ERUNT
2013-11-05 20:19 - 2013-11-05 20:19 - 00000000 ____D C:\Users\Martinh\AppData\Local\VirtualStore
2013-11-05 10:23 - 2013-11-05 11:19 - 00362496 ____H C:\Users\Ronja Heider\Documents\~WRL0001.tmp
2013-11-02 16:37 - 2013-11-02 16:37 - 01033335 _____ (Thisisu) C:\Users\Ronja Heider\Downloads\JRT.exe
2013-11-02 16:17 - 2013-11-02 16:17 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\TuneUp Software
2013-11-01 20:25 - 2013-11-01 20:25 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\TuneUp Software
2013-11-01 20:23 - 2013-11-01 20:33 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-11-01 20:23 - 2013-11-01 20:30 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-11-01 20:22 - 2013-11-01 20:23 - 83809808 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio (1).exe
2013-11-01 20:18 - 2013-11-01 20:19 - 83809808 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio.exe
2013-11-01 20:14 - 2013-11-01 20:15 - 83692608 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio_6.2.0.1029.exe
2013-11-01 20:08 - 2013-08-04 14:42 - 00001377 _____ C:\Free Studio.lnk
2013-11-01 20:04 - 2013-11-01 20:04 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-01 20:03 - 2013-11-01 20:35 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\DVDVideoSoft
2013-11-01 20:03 - 2013-11-01 20:03 - 00000000 ____D C:\Users\Martinh\Documents\DVDVideoSoft
2013-10-27 08:12 - 2013-11-07 18:10 - 00015163 _____ C:\Users\Ronja Heider\Downloads\Addition.txt
2013-10-27 08:09 - 2013-11-13 18:35 - 00000000 ____D C:\FRST
2013-10-24 16:36 - 2013-10-24 16:36 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

==================== One Month Modified Files and Folders =======

2013-11-23 17:55 - 2013-11-23 17:55 - 01958396 _____ (Farbar) C:\Users\Martinh\Downloads\FRST64 (1).exe
2013-11-23 17:55 - 2013-11-23 17:54 - 00005858 _____ C:\Users\Martinh\Downloads\FRST.txt
2013-11-23 17:54 - 2013-11-23 17:54 - 01958396 _____ (Farbar) C:\Users\Martinh\Downloads\FRST64.exe
2013-11-23 17:50 - 2013-10-21 14:01 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\TweakNow RegCleaner
2013-11-23 17:50 - 2013-10-21 14:01 - 00000000 ____D C:\Program Files (x86)\TweakNow RegCleaner
2013-11-23 17:46 - 2013-05-08 19:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-23 17:46 - 2013-04-03 10:20 - 01200627 _____ C:\Windows\WindowsUpdate.log
2013-11-23 16:58 - 2013-05-03 20:01 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-23 16:14 - 2013-05-03 20:01 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-23 16:10 - 2009-07-14 05:45 - 00025904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-23 16:10 - 2009-07-14 05:45 - 00025904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-23 16:05 - 2013-10-20 19:42 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater
2013-11-21 19:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-21 16:54 - 2013-10-20 19:43 - 00004202 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-11-21 15:49 - 2013-04-03 20:15 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-11-21 15:49 - 2013-04-03 20:15 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-11-21 15:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-21 15:43 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-21 15:43 - 2009-07-14 05:51 - 00038648 _____ C:\Windows\setupact.log
2013-11-18 18:18 - 2013-11-10 13:11 - 38753792 _____ C:\Users\Ronja Heider\Ökosystem Fließgewässer - PPP.ppt
2013-11-18 16:44 - 2013-10-21 14:09 - 00000061 _____ C:\Users\Ronja Heider\Desktop\Neues Textdokument.txt
2013-11-18 16:36 - 2013-11-18 16:32 - 00000000 ____D C:\AdwCleaner
2013-11-18 16:32 - 2013-11-18 16:32 - 01085542 _____ C:\Users\Ronja Heider\Desktop\adwcleaner.exe
2013-11-17 17:58 - 2013-11-17 17:58 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\Malwarebytes
2013-11-17 15:00 - 2013-04-03 10:55 - 00000000 ____D C:\Users\Ronja Heider
2013-11-17 13:46 - 2013-04-03 10:55 - 00001342 __RSH C:\Users\Ronja Heider\ntuser.pol
2013-11-16 21:19 - 2013-08-04 14:39 - 00000680 __RSH C:\Users\Martinh\ntuser.pol
2013-11-16 21:19 - 2013-08-04 14:39 - 00000000 ____D C:\Users\Martinh
2013-11-16 21:18 - 2010-11-21 04:47 - 00038464 _____ C:\Windows\PFRO.log
2013-11-16 18:59 - 2013-11-16 18:59 - 00000000 ____H C:\Users\Martinh\Documents\Default.rdp
2013-11-16 18:57 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-16 18:56 - 2013-11-16 18:56 - 00000000 ____D C:\Users\Martinh\AppData\Local\Freemium
2013-11-16 18:55 - 2013-10-20 19:43 - 00003668 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-11-16 18:49 - 2013-11-16 18:49 - 00891184 _____ C:\Users\Martinh\Downloads\SecurityCheck.exe
2013-11-16 17:57 - 2013-11-16 17:57 - 00000000 ____D C:\Users\Martinh\AppData\Local\Software_Updater
2013-11-16 15:08 - 2013-11-16 15:08 - 02347384 _____ (ESET) C:\Users\Martinh\Downloads\esetsmartinstaller_enu.exe
2013-11-16 14:54 - 2013-11-16 14:54 - 02347384 _____ (ESET) C:\Users\Ronja Heider\Downloads\esetsmartinstaller_enu.exe
2013-11-15 08:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-15 07:29 - 2013-05-03 20:02 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-15 07:25 - 2013-08-16 14:59 - 00000000 ____D C:\Windows\system32\MRT
2013-11-15 07:23 - 2013-06-22 12:57 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 18:49 - 2013-11-13 18:41 - 00000000 ____D C:\ProgramData\HitmanPro
2013-11-13 18:41 - 2013-11-13 18:40 - 10264904 _____ (SurfRight B.V.) C:\Users\Ronja Heider\Downloads\HitmanPro_x64.exe
2013-11-13 18:39 - 2013-08-06 15:34 - 00000000 ___RD C:\Users\Ronja Heider\Desktop\..ö
2013-11-13 18:35 - 2013-10-27 08:09 - 00000000 ____D C:\FRST
2013-11-13 18:33 - 2013-11-13 18:33 - 01957610 _____ (Farbar) C:\Users\Ronja Heider\Downloads\FRST64.exe
2013-11-11 16:17 - 2013-11-11 16:17 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64 (2).exe
2013-11-11 16:17 - 2013-11-07 18:14 - 00000334 _____ C:\Users\Ronja Heider\Downloads\SystemLook.txt
2013-11-11 14:58 - 2013-11-11 14:58 - 53635584 _____ C:\Users\Ronja Heider\Downloads\wz175-64gev.msi
2013-11-11 14:57 - 2013-11-11 14:57 - 00385073 _____ C:\Users\Ronja Heider\Downloads\hyper_brushes (1).rar
2013-11-11 14:56 - 2013-11-11 14:56 - 07899006 _____ C:\Users\Ronja Heider\Downloads\Heads_Up_Display.rar
2013-11-11 14:56 - 2013-11-11 14:56 - 01517572 _____ C:\Users\Ronja Heider\Downloads\Double_Grunge_Circles.rar
2013-11-11 14:56 - 2013-11-11 14:56 - 00385073 _____ C:\Users\Ronja Heider\Downloads\hyper_brushes.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00068539 _____ C:\Users\Ronja Heider\Downloads\Brushed.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00027773 _____ C:\Users\Ronja Heider\Downloads\LaneHumouresque.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00015600 _____ C:\Users\Ronja Heider\Downloads\lastninja.rar
2013-11-11 14:55 - 2013-11-11 14:55 - 00004791 _____ C:\Users\Ronja Heider\Downloads\ARCADE.rar
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-08 15:38 - 2013-11-08 15:38 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64 (1).exe
2013-11-07 18:12 - 2013-11-07 18:12 - 00165376 _____ C:\Users\Ronja Heider\Downloads\SystemLook_x64.exe
2013-11-07 18:10 - 2013-11-07 18:10 - 00053935 _____ C:\Users\Ronja Heider\Downloads\FRST.txt
2013-11-07 18:10 - 2013-10-27 08:12 - 00015163 _____ C:\Users\Ronja Heider\Downloads\Addition.txt
2013-11-07 16:06 - 2013-11-07 16:06 - 00000000 ____D C:\Users\Ronja Heider\AppData\Local\Software_Updater
2013-11-06 18:13 - 2013-10-20 19:42 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk
2013-11-06 17:55 - 2013-11-06 17:55 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\Malwarebytes
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-06 17:55 - 2013-11-06 17:55 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-06 17:54 - 2013-11-06 17:54 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Martinh\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-06 17:38 - 2013-11-06 17:38 - 01034531 _____ (Thisisu) C:\Users\Martinh\Downloads\JRT.exe
2013-11-06 17:38 - 2013-11-06 17:38 - 00000000 ____D C:\Windows\ERUNT
2013-11-05 20:19 - 2013-11-05 20:19 - 00000000 ____D C:\Users\Martinh\AppData\Local\VirtualStore
2013-11-05 11:19 - 2013-11-05 10:23 - 00362496 ____H C:\Users\Ronja Heider\Documents\~WRL0001.tmp
2013-11-03 12:35 - 2013-04-03 10:55 - 00000000 ____D C:\Users\Ronja Heider\AppData\Local\VirtualStore
2013-11-02 16:37 - 2013-11-02 16:37 - 01033335 _____ (Thisisu) C:\Users\Ronja Heider\Downloads\JRT.exe
2013-11-02 16:17 - 2013-11-02 16:17 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\TuneUp Software
2013-11-02 16:11 - 2013-08-01 19:41 - 00000113 _____ C:\Users\Ronja Heider\AppData\Roaming\WB.CFG
2013-11-02 16:11 - 2013-06-17 16:12 - 00000006 _____ C:\Users\Ronja Heider\AppData\Roaming\WBPU-TTL.DAT
2013-11-01 20:40 - 2013-05-08 19:15 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-01 20:35 - 2013-11-01 20:03 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\DVDVideoSoft
2013-11-01 20:33 - 2013-11-01 20:23 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-11-01 20:30 - 2013-11-01 20:23 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-11-01 20:25 - 2013-11-01 20:25 - 00000000 ____D C:\Users\Martinh\AppData\Roaming\TuneUp Software
2013-11-01 20:23 - 2013-11-01 20:22 - 83809808 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio (1).exe
2013-11-01 20:19 - 2013-11-01 20:18 - 83809808 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio.exe
2013-11-01 20:15 - 2013-11-01 20:14 - 83692608 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeStudio_6.2.0.1029.exe
2013-11-01 20:04 - 2013-11-01 20:04 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Martinh\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-01 20:03 - 2013-11-01 20:03 - 00000000 ____D C:\Users\Martinh\Documents\DVDVideoSoft
2013-10-24 16:36 - 2013-10-24 16:36 - 00000000 ____D C:\Users\Ronja Heider\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

Some content of TEMP:
====================
C:\Users\Ronja Heider\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe
C:\Users\Ronja Heider\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 18:31

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2013 03
Ran by Martinh at 2013-11-23 17:56:47
Running from C:\Users\Martinh\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Canon MG6100 series MP Drivers
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free System Utilities (x32 Version: 1.1.3.0)
Free SystemUtilities (x32 Version: 1.1.3.0)
Free YouTube to MP3 Converter version 3.12.16.1030 (x32 Version: 3.12.16.1030)
Google Chrome (x32 Version: 31.0.1650.57)
Google Update Helper (x32 Version: 1.3.21.165)
IncrediMail (x32 Version: 6.6.0.5273)
IncrediMail 2.5 (x32 Version: 6.6.0.5273)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2000 Professional (x32 Version: 9.00.2816)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Photo Notifier and Animation Creator (x32 Version: 1.0.0.1009)
PriMus SE 1.1 (Build 9970) (x32)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.18.322.2010)
Synaptics Pointing Device Driver (Version: 15.0.15.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

==================== Restore Points  =========================

05-11-2013 09:16:38 Windows Update
08-11-2013 14:35:13 Windows Update
11-11-2013 14:02:57 WinZip 17.5 wird installiert
12-11-2013 15:04:06 Windows Update
15-11-2013 06:22:21 Windows Update
16-11-2013 14:06:30 TuneUp Utilities 2014 wird entfernt
16-11-2013 14:07:27 TuneUp Utilities 2014 (de-DE) wird entfernt
19-11-2013 15:01:54 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {137B3300-AB49-4E89-9423-B41B6F85573D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {3E1BC628-1BD4-4ACF-B042-F7ABB05E67FE} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-11-23] ()
Task: {4ACEAFFA-0BD0-4E50-8EDE-7AAB7E42A4D3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-03] (Google Inc.)
Task: {6065C93B-EB00-4D29-A296-8081A614FBA4} - System32\Tasks\EPUpdater => C:\Users\Ronja\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe
Task: {84FDCDE5-C35F-4478-9D4F-D4BE91B8C2D8} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-11-21] ()
Task: {8657D567-9E56-45E4-A4E3-80D231A0BF05} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-03] (Google Inc.)
Task: {967406AD-B8BF-4DDE-8ACC-E185D38E81B7} - System32\Tasks\Freemium1ClickMaint => C:\Users\Martinh\Downloads\1Click.exe
Task: {C1643B7B-56E2-4887-87DA-293D94DFE2AD} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {EAF96CEB-38D4-427B-BC9A-F5FD23C2FFA0} - System32\Tasks\DSite => C:\Users\RONJAH~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-12 13:55 - 2012-08-28 17:26 - 00080976 _____ () C:\Program Files (x86)\CleanGenius 3\VersionInfo.dll
2013-08-12 13:55 - 2012-08-28 17:27 - 00166992 _____ () C:\Program Files (x86)\CleanGenius 3\NetReg.dll
2013-08-12 13:55 - 2012-11-02 10:06 - 00154704 _____ () C:\Program Files (x86)\CleanGenius 3\mlutil.dll
2013-08-04 12:29 - 2013-08-04 12:29 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll
2013-08-04 12:29 - 2013-08-04 12:29 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll
2013-08-04 12:29 - 2013-08-04 12:29 - 00272808 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll
2013-08-04 12:29 - 2013-08-04 12:29 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll
2013-08-04 12:29 - 2013-08-04 12:29 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll
2013-11-15 07:29 - 2013-11-14 12:29 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-15 07:29 - 2013-11-14 12:29 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-15 07:29 - 2013-11-14 12:28 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
2013-07-18 21:16 - 2013-07-18 21:16 - 00108888 _____ () C:\Program Files (x86)\IncrediMail\Bin\pmc.dll
2013-07-09 14:39 - 2013-07-09 14:39 - 04591616 _____ () C:\Users\Ronja Heider\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2013-07-09 14:39 - 2013-07-09 14:39 - 00112128 _____ () C:\Users\Ronja Heider\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Standard-VGA-Grafikkarte
Description: Standard-VGA-Grafikkarte
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: vga
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/23/2013 05:57:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/23/2013 05:57:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (11/22/2013 02:20:04 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (11/22/2013 08:25:27 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (11/22/2013 08:25:27 AM) (Source: DCOM) (User: )
Description: 109gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (11/21/2013 03:43:34 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SearchAnonymizer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/19/2013 03:50:31 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (11/18/2013 04:37:30 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SearchAnonymizer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/18/2013 01:53:12 PM) (Source: DCOM) (User: )
Description: {F2F6A7B0-0E74-49BF-ABDF-8A0778554472}

Error: (11/18/2013 01:53:08 PM) (Source: DCOM) (User: )
Description: {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5}

Error: (11/18/2013 01:52:42 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (11/18/2013 01:52:28 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (11/23/2013 05:57:03 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:03 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:03 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:02 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:01 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL

Error: (11/23/2013 05:57:00 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3554.27 MB
Available physical RAM: 1982.66 MB
Total Pagefile: 7106.73 MB
Available Pagefile: 5065.31 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:448.57 GB) (Free:365.61 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.42 GB) (Free:2.1 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: B726B7B9)

Partition: GPT Partition Type
==================== End Of Log ============================
         
--- --- ---

Bei SystemLook passiert immernoch nichts, und ich habe keine Anzeichen von Malware festgestellt.
Mein Laptop läuft ganz in Ordnung.

 

Themen zu Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren
benötigte, deinstalliere, entfernen, gebrauch, google, klicken, mögliche, programm, pup.optional.bonanzadeals.a, pup.optional.delta.a, pup.optional.domaiq, pup.optional.iminent.a, pup.optional.opencandy, pup.optional.plushd.a, pup.optional.regcleanerpro, pup.optional.softonic, pup.optional.solimba.mr




Ähnliche Themen: Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren


  1. Kann Programm "Sweet Page" nicht deinstalieren
    Plagegeister aller Art und deren Bekämpfung - 07.06.2014 (14)
  2. Kann die Software "Snap.do" nicht deinstallieren?
    Plagegeister aller Art und deren Bekämpfung - 08.03.2013 (41)
  3. "Programm kann Website nicht anzeigen" Trojaner
    Plagegeister aller Art und deren Bekämpfung - 12.02.2013 (12)
  4. "Dieses Programm kann die Webseite nicht anzeigen" Windows 7
    Plagegeister aller Art und deren Bekämpfung - 02.12.2012 (16)
  5. "Dieses Programm kann die Website nicht anzeigen"-Virus
    Plagegeister aller Art und deren Bekämpfung - 19.11.2012 (31)
  6. "Dieses Programm kann die Webseite nicht anzeigen" auch bei mir...
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (7)
  7. "Programm kann nicht geöffnet werden"-Virus
    Plagegeister aller Art und deren Bekämpfung - 21.10.2012 (17)
  8. "Dieses Programm kann die Webseite nicht anzeigen"
    Plagegeister aller Art und deren Bekämpfung - 18.10.2012 (7)
  9. "Dieses Programm kann die Webseite nicht anzeigen" Windows 7
    Plagegeister aller Art und deren Bekämpfung - 11.10.2012 (1)
  10. "Dieses Programm kann die Webseite nicht anzeigen"
    Plagegeister aller Art und deren Bekämpfung - 09.10.2012 (21)
  11. "Dieses Programm kann die Webseite nicht anzeigen" Windows 7
    Log-Analyse und Auswertung - 03.10.2012 (3)
  12. "Dieses Programm kann die Webseite nicht anzeigen"
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (10)
  13. "Dieses Programm kann nicht die Webseite anzeigen" Windows 7
    Plagegeister aller Art und deren Bekämpfung - 22.08.2012 (3)
  14. "Dieses Programm kann die Webseite nicht anzeigen"
    Log-Analyse und Auswertung - 20.08.2012 (9)
  15. "Dieses Programm kann nicht die Webseite anzeigen" Virus
    Plagegeister aller Art und deren Bekämpfung - 15.08.2012 (9)
  16. "Dieses Programm kann die Website nicht anzeigen" Problem
    Plagegeister aller Art und deren Bekämpfung - 03.08.2012 (3)
  17. Trojaner "Dieses Programm kann Webseite nicht anzeigen"
    Log-Analyse und Auswertung - 13.05.2012 (15)

Zum Thema Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren - FRST Logfile: FRST Logfile: FRST Logfile: Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013 03 Ran by Martinh (administrator) on RONJA-PC on - Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren...
Archiv
Du betrachtest: Ich kann das Programm "Plus-HD-3.8" nicht deinstallieren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.