![]() |
|
Log-Analyse und Auswertung: Habe ich Probleme mit Laptop, scannen - richtig gemacht? auswertung!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
![]() | ![]() Habe ich Probleme mit Laptop, scannen - richtig gemacht? auswertung! letzter Schritt: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014 Ran by Andreas Malek (administrator) on WOHNZIMMER on 02-07-2014 17:59:02 Running from C:\Users\Andreas Malek\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMCONFIG.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe (UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMProcess.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [InstantUpdate] => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-07] () HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [576376 2012-02-02] (Alps Electric Co., Ltd.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-08] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations) HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-07-18] (Intel Corporation) HKLM-x32\...\Run: [KMCONFIG] => C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-3056362503-760093752-123523836-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-05-14] (Glarysoft Ltd) HKU\S-1-5-21-3056362503-760093752-123523836-1004\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [162408 2011-09-13] () HKU\S-1-5-21-3056362503-760093752-123523836-1004\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -update plugin ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) BootExecute: autocheck autochk * BootDefrag.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Andreas Malek\AppData\Roaming\Mozilla\Firefox\Profiles\wlx2c3zf.default FF NewTab: hxxp://www.google.com/ FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: FoxTrick - C:\Users\Andreas Malek\AppData\Roaming\Mozilla\Firefox\Profiles\wlx2c3zf.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba} [2014-07-01] FF Extension: Deutsch (DE) Language Pack - C:\Users\Andreas Malek\AppData\Roaming\Mozilla\Firefox\Profiles\wlx2c3zf.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-10-05] FF Extension: Adblock Plus - C:\Users\Andreas Malek\AppData\Roaming\Mozilla\Firefox\Profiles\wlx2c3zf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-03-10] FF Extension: Download Statusbar - C:\Users\Andreas Malek\AppData\Roaming\Mozilla\Firefox\Profiles\wlx2c3zf.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2013-07-30] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-09-01] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Andreas Malek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-03-30] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-31] (AVAST Software) S4 DCDhcpService; C:\Program Files (x86)\Acer\WDAgent\DCDhcpService.exe [111776 2012-02-10] (Atheros Communication Inc.) [File not signed] R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] () S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 KMWDSERVICE; C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe [1821184 2009-08-31] (UASSOFT.COM) [File not signed] S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099512 2013-08-30] (AVG) S4 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [203088 2011-03-10] (X-Rite Inc.) S4 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-31] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-31] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-31] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-31] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-31] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-31] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-31] () R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-05-16] (Glarysoft Ltd) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [442368 2013-05-08] (Intel(R) Corporation) [File not signed] R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [128200 2014-03-30] (Qualcomm Atheros Co., Ltd.) S3 MAUSBFASTTRACKPRO; C:\Windows\System32\DRIVERS\MAudioFastTrackPro.sys [187912 2010-12-07] (Avid Technology, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-02] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-06-27] (Intel Corporation) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2011-06-22] (Nicomsoft Ltd.) R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2011-06-22] (Nicomsoft Ltd.) [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-02 17:56 - 2014-07-02 17:56 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\FRST-OlderVersion 2014-07-02 17:51 - 2014-07-02 17:51 - 00854367 _____ () C:\Users\Andreas Malek\Downloads\SecurityCheck.exe 2014-07-01 21:57 - 2014-07-01 21:57 - 00000000 ___HD () C:\ProgramData\CanonIJEGV 2014-07-01 18:36 - 2014-07-01 18:36 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu 2014-07-01 18:36 - 2014-07-01 18:36 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\Canon 2014-07-01 18:26 - 2014-07-01 18:26 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-07-01 18:25 - 2014-07-01 18:25 - 00000000 ____D () C:\Windows\system32\STRING 2014-07-01 18:25 - 2014-07-01 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5500 series Benutzerregistrierung 2014-07-01 18:25 - 2013-02-04 15:10 - 00321536 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_BUL.dll 2014-07-01 18:25 - 2013-01-24 09:24 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL 2014-07-01 18:25 - 2013-01-24 09:24 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL 2014-07-01 18:25 - 2013-01-24 09:23 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL 2014-07-01 18:25 - 2012-11-26 12:24 - 00095744 _____ () C:\Windows\SysWOW64\CNC1771D.TBL 2014-07-01 18:25 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-07-01 18:23 - 2014-07-01 18:23 - 00001985 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk 2014-07-01 18:23 - 2014-07-01 18:23 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-07-01 18:18 - 2014-07-01 18:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5500 series Manual 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ____D () C:\Program Files\Canon 2014-07-01 18:16 - 2014-07-01 18:17 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-07-01 18:16 - 2013-04-04 05:00 - 00391168 _____ (CANON INC.) C:\Windows\system32\CNMLMBU.DLL 2014-07-01 18:12 - 2014-07-01 21:57 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-07-01 18:12 - 2014-07-01 18:12 - 00000000 ___HD () C:\ProgramData\CanonIJETV 2014-07-01 18:11 - 2014-07-01 18:35 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-06-30 21:59 - 2014-06-30 21:43 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-06-30 21:44 - 2014-06-30 22:01 - 00013173 _____ () C:\zoek-results.log 2014-06-30 21:43 - 2014-06-30 21:55 - 00000000 ____D () C:\zoek_backup 2014-06-30 21:42 - 2014-06-30 21:43 - 01285120 _____ () C:\Users\Andreas Malek\Downloads\zoek(1).exe 2014-06-30 21:41 - 2014-06-30 21:42 - 01285120 _____ () C:\Users\Andreas Malek\Downloads\zoek.exe 2014-06-30 21:41 - 2014-06-30 21:41 - 00000000 _____ () C:\Users\Andreas Malek\Desktop\zoek.exe 2014-06-30 21:39 - 2014-06-30 21:39 - 00001159 _____ () C:\Users\Andreas Malek\Desktop\mbam.txt 2014-06-30 21:19 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-06-30 21:17 - 2014-06-30 21:21 - 00000000 ____D () C:\AdwCleaner 2014-06-30 20:39 - 2014-06-30 20:39 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\Intel_Corporation 2014-06-29 20:59 - 2014-06-29 21:34 - 105000000 _____ () C:\Users\Andreas Malek\Downloads\Regina Regenbogen - Der Film.part1.rar 2014-06-29 14:05 - 2014-06-29 14:05 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Homefront_REPACK 2014-06-29 12:59 - 2014-06-29 14:05 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Böhse Onkelz Hockenheimring 2014 2014-06-28 19:32 - 2014-06-28 19:34 - 00000114 _____ () C:\Users\Andreas Malek\Documents\filmliste haben wollen.txt 2014-06-28 18:43 - 2014-06-28 18:43 - 00029170 _____ () C:\ComboFix.txt 2014-06-28 18:30 - 2014-06-28 18:43 - 00000000 ____D () C:\ComboFix 2014-06-28 18:30 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-06-28 18:30 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-06-28 18:30 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-06-28 18:30 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-06-28 18:30 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-06-28 18:30 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-06-28 18:30 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-06-28 18:30 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-06-28 18:27 - 2014-06-28 18:43 - 00000000 ____D () C:\Qoobox 2014-06-28 18:26 - 2014-06-28 18:42 - 00000000 ____D () C:\Windows\erdnt 2014-06-28 08:22 - 2014-07-02 15:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-27 22:30 - 2014-07-02 14:26 - 00001469 _____ () C:\Windows\setupact.log 2014-06-27 22:30 - 2014-07-01 21:58 - 00004048 _____ () C:\Windows\PFRO.log 2014-06-27 22:30 - 2014-06-27 22:30 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-27 22:21 - 2014-07-02 17:59 - 00016384 _____ () C:\Users\Andreas Malek\Downloads\FRST.txt 2014-06-27 22:21 - 2014-07-02 17:59 - 00000000 ____D () C:\FRST 2014-06-27 22:21 - 2014-07-02 17:57 - 00033121 _____ () C:\Users\Andreas Malek\Downloads\Addition.txt 2014-06-27 22:19 - 2014-07-02 17:56 - 02083840 _____ (Farbar) C:\Users\Andreas Malek\Downloads\FRST64.exe 2014-06-27 18:41 - 2014-06-27 18:41 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\ProductData 2014-06-27 18:36 - 2014-06-27 18:36 - 00100312 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-06-26 22:30 - 2014-06-29 13:30 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Homefront.2013.DUAL.COMPLETE.BLURAY.REPACK-SharpHD 2014-06-26 20:22 - 2014-06-26 22:30 - 1012388580 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part36.rar 2014-06-26 20:10 - 2014-06-26 22:28 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part34.rar 2014-06-26 20:10 - 2014-06-26 22:26 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part35.rar 2014-06-26 18:11 - 2014-06-26 20:22 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part33.rar 2014-06-26 18:03 - 2014-06-26 20:10 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part32.rar 2014-06-26 17:51 - 2014-06-26 20:10 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part31.rar 2014-06-25 21:52 - 2014-06-26 18:11 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part30.rar 2014-06-25 21:33 - 2014-06-26 18:03 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part29.rar 2014-06-25 21:18 - 2014-06-26 17:51 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part28.rar 2014-06-25 19:44 - 2014-06-25 21:52 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part27.rar 2014-06-25 19:25 - 2014-06-25 21:33 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part26.rar 2014-06-25 18:59 - 2014-06-25 21:18 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part25.rar 2014-06-25 17:26 - 2014-06-25 19:44 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part24.rar 2014-06-24 15:03 - 2014-06-24 15:03 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\Adobe 2014-06-23 22:00 - 2014-06-26 23:06 - 00197229 _____ () C:\Users\Andreas Malek\Documents\filme 23.6.2014.script 2014-06-23 22:00 - 2014-06-26 23:06 - 00000089 _____ () C:\Users\Andreas Malek\Documents\filme 23.6.2014.properties 2014-06-23 22:00 - 2014-06-26 23:06 - 00000000 ____D () C:\Users\Andreas Malek\Documents\filme 23.6.2014.pics 2014-06-23 20:06 - 2014-06-25 19:25 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part23.rar 2014-06-23 19:49 - 2014-06-25 18:59 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part22.rar 2014-06-23 18:05 - 2014-06-25 17:26 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part21.rar 2014-06-23 17:48 - 2014-06-23 19:49 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part20.rar 2014-06-23 17:47 - 2014-06-23 20:06 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part19.rar 2014-06-23 16:00 - 2014-06-23 18:05 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part18.rar 2014-06-22 22:12 - 2014-06-23 17:48 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part17.rar 2014-06-22 21:55 - 2014-06-23 17:46 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part16.rar 2014-06-22 20:16 - 2014-06-23 16:00 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part15.rar 2014-06-22 19:58 - 2014-06-22 22:12 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part14.rar 2014-06-22 19:47 - 2014-06-22 21:55 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part13.rar 2014-06-22 17:58 - 2014-06-22 20:16 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part12.rar 2014-06-22 17:44 - 2014-06-22 19:57 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part11.rar 2014-06-22 17:39 - 2014-06-22 19:47 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part10.rar 2014-06-22 15:17 - 2014-06-22 17:58 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part09.rar 2014-06-22 15:17 - 2014-06-22 17:44 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part08.rar 2014-06-22 15:16 - 2014-06-22 17:39 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part07.rar 2014-06-22 13:09 - 2014-06-22 15:17 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part06.rar 2014-06-22 13:07 - 2014-06-22 15:16 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part05.rar 2014-06-22 12:58 - 2014-06-22 15:17 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part04.rar 2014-06-22 10:54 - 2014-06-22 13:09 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part01.rar 2014-06-22 10:54 - 2014-06-22 13:07 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part03.rar 2014-06-22 10:54 - 2014-06-22 12:58 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part02.rar 2014-06-21 23:37 - 2014-06-21 23:37 - 00000000 ____D () C:\Program Files\NetSpeedMonitor 2014-06-21 23:26 - 2014-06-21 23:26 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\1255 2014-06-20 20:32 - 2014-07-02 17:59 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\NetSpeedMonitor 2014-06-14 17:41 - 2014-06-14 17:41 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-12 22:30 - 2014-06-12 22:30 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\NANC1606 2014-06-12 21:21 - 2014-06-12 21:22 - 00001448 _____ () C:\Users\Andreas Malek\Desktop\jMovieManager - Verknüpfung.lnk 2014-06-12 20:46 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-06-12 20:46 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-06-12 20:46 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-06-12 20:46 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-06-12 20:45 - 2014-06-12 20:46 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log 2014-06-12 17:38 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-12 17:38 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-12 17:38 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-12 17:38 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-12 17:38 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-12 17:38 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-12 17:38 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-12 17:38 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-12 17:38 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-12 17:38 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-12 17:38 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-12 17:38 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-12 17:38 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-12 17:38 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-12 17:38 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-12 17:38 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-12 17:38 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-12 17:38 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-12 17:38 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-12 17:38 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-12 17:38 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-12 17:38 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-12 17:38 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-12 17:38 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-12 17:38 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-12 17:38 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-12 17:38 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-12 17:38 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-12 17:38 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-12 17:38 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-12 17:38 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-12 17:38 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-12 17:38 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-12 17:38 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-12 17:38 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-12 17:38 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-12 17:38 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-12 17:38 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-12 17:38 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-12 17:38 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-12 17:38 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-12 17:38 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-12 17:38 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-12 17:38 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-12 17:38 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-12 17:38 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-12 17:38 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-12 17:38 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-12 17:38 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-12 17:38 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-12 17:38 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-12 17:38 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-12 17:35 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-12 17:35 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-12 17:35 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-12 17:35 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-06-12 17:35 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-12 17:35 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 17:35 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-12 17:35 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-12 17:35 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-12 17:35 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-12 17:35 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-06-12 17:35 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-06-12 17:35 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-06-12 17:35 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-06-12 17:34 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-12 17:34 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-10 22:16 - 2014-06-10 22:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird ==================== One Month Modified Files and Folders ======= 2014-07-02 17:59 - 2014-06-27 22:21 - 00016384 _____ () C:\Users\Andreas Malek\Downloads\FRST.txt 2014-07-02 17:59 - 2014-06-27 22:21 - 00000000 ____D () C:\FRST 2014-07-02 17:59 - 2014-06-20 20:32 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\NetSpeedMonitor 2014-07-02 17:57 - 2014-06-27 22:21 - 00033121 _____ () C:\Users\Andreas Malek\Downloads\Addition.txt 2014-07-02 17:56 - 2014-07-02 17:56 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\FRST-OlderVersion 2014-07-02 17:56 - 2014-06-27 22:19 - 02083840 _____ (Farbar) C:\Users\Andreas Malek\Downloads\FRST64.exe 2014-07-02 17:51 - 2014-07-02 17:51 - 00854367 _____ () C:\Users\Andreas Malek\Downloads\SecurityCheck.exe 2014-07-02 17:29 - 2014-04-05 16:19 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-02 17:10 - 2012-04-10 14:15 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-02 15:45 - 2014-06-28 08:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-02 15:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-07-02 14:33 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-02 14:33 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-02 14:31 - 2013-09-27 19:16 - 01439685 _____ () C:\Windows\WindowsUpdate.log 2014-07-02 14:31 - 2012-04-29 00:27 - 03316714 _____ () C:\Windows\system32\perfh007.dat 2014-07-02 14:31 - 2012-04-29 00:27 - 00986652 _____ () C:\Windows\system32\perfc007.dat 2014-07-02 14:31 - 2009-07-14 07:13 - 00006476 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-02 14:26 - 2014-06-27 22:30 - 00001469 _____ () C:\Windows\setupact.log 2014-07-02 14:26 - 2013-08-04 00:10 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-07-02 14:26 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-01 21:58 - 2014-06-27 22:30 - 00004048 _____ () C:\Windows\PFRO.log 2014-07-01 21:58 - 2014-04-06 20:05 - 00000000 ____D () C:\Users\Andreas Malek\Desktop\Sicherheit 2014-07-01 21:58 - 2014-03-30 11:36 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-07-01 21:57 - 2014-07-01 21:57 - 00000000 ___HD () C:\ProgramData\CanonIJEGV 2014-07-01 21:57 - 2014-07-01 18:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-07-01 18:36 - 2014-07-01 18:36 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu 2014-07-01 18:36 - 2014-07-01 18:36 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\Canon 2014-07-01 18:35 - 2014-07-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-07-01 18:26 - 2014-07-01 18:26 - 00000000 ____D () C:\ProgramData\Canon IJ Network Tool 2014-07-01 18:26 - 2014-07-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-07-01 18:26 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-07-01 18:25 - 2014-07-01 18:25 - 00000000 ____D () C:\Windows\system32\STRING 2014-07-01 18:25 - 2014-07-01 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5500 series Benutzerregistrierung 2014-07-01 18:23 - 2014-07-01 18:23 - 00001985 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk 2014-07-01 18:23 - 2014-07-01 18:23 - 00000000 ____D () C:\ProgramData\CanonIJWSpt 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5500 series Manual 2014-07-01 18:17 - 2014-07-01 18:17 - 00000000 ____D () C:\Program Files\Canon 2014-07-01 18:17 - 2014-07-01 18:16 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-07-01 18:12 - 2014-07-01 18:12 - 00000000 ___HD () C:\ProgramData\CanonIJETV 2014-06-30 22:01 - 2014-06-30 21:44 - 00013173 _____ () C:\zoek-results.log 2014-06-30 21:55 - 2014-06-30 21:43 - 00000000 ____D () C:\zoek_backup 2014-06-30 21:55 - 2012-08-30 21:53 - 00000000 ____D () C:\Users\Andreas Malek 2014-06-30 21:43 - 2014-06-30 21:59 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-06-30 21:43 - 2014-06-30 21:42 - 01285120 _____ () C:\Users\Andreas Malek\Downloads\zoek(1).exe 2014-06-30 21:42 - 2014-06-30 21:41 - 01285120 _____ () C:\Users\Andreas Malek\Downloads\zoek.exe 2014-06-30 21:41 - 2014-06-30 21:41 - 00000000 _____ () C:\Users\Andreas Malek\Desktop\zoek.exe 2014-06-30 21:39 - 2014-06-30 21:39 - 00001159 _____ () C:\Users\Andreas Malek\Desktop\mbam.txt 2014-06-30 21:21 - 2014-06-30 21:17 - 00000000 ____D () C:\AdwCleaner 2014-06-30 21:09 - 2014-01-09 19:56 - 01938944 ___SH () C:\Users\Andreas Malek\Downloads\Thumbs.db 2014-06-30 20:39 - 2014-06-30 20:39 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\Intel_Corporation 2014-06-29 21:34 - 2014-06-29 20:59 - 105000000 _____ () C:\Users\Andreas Malek\Downloads\Regina Regenbogen - Der Film.part1.rar 2014-06-29 20:10 - 2014-05-10 09:32 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\JDownloader v2.0 2014-06-29 17:46 - 2012-09-01 22:44 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-06-29 14:05 - 2014-06-29 14:05 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Homefront_REPACK 2014-06-29 14:05 - 2014-06-29 12:59 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Böhse Onkelz Hockenheimring 2014 2014-06-29 13:30 - 2014-06-26 22:30 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\Homefront.2013.DUAL.COMPLETE.BLURAY.REPACK-SharpHD 2014-06-28 19:34 - 2014-06-28 19:32 - 00000114 _____ () C:\Users\Andreas Malek\Documents\filmliste haben wollen.txt 2014-06-28 18:43 - 2014-06-28 18:43 - 00029170 _____ () C:\ComboFix.txt 2014-06-28 18:43 - 2014-06-28 18:30 - 00000000 ____D () C:\ComboFix 2014-06-28 18:43 - 2014-06-28 18:27 - 00000000 ____D () C:\Qoobox 2014-06-28 18:43 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-06-28 18:42 - 2014-06-28 18:26 - 00000000 ____D () C:\Windows\erdnt 2014-06-28 18:39 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-06-28 18:38 - 2009-07-14 04:34 - 61603840 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-06-28 18:38 - 2009-07-14 04:34 - 21233664 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-06-28 18:38 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-06-28 18:38 - 2009-07-14 04:34 - 00028672 _____ () C:\Windows\system32\config\SECURITY.bak 2014-06-28 18:38 - 2009-07-14 04:34 - 00028672 _____ () C:\Windows\system32\config\SAM.bak 2014-06-28 18:34 - 2014-03-02 22:10 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-28 17:51 - 2012-09-01 23:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-27 22:30 - 2014-06-27 22:30 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-27 22:30 - 2014-05-16 16:46 - 00000350 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-27 20:16 - 2012-10-22 22:08 - 00003696 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-06-27 18:41 - 2014-06-27 18:41 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\ProductData 2014-06-27 18:38 - 2014-03-30 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-06-27 18:36 - 2014-06-27 18:36 - 00100312 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-06-27 18:25 - 2014-05-16 16:46 - 00002994 _____ () C:\Windows\System32\Tasks\GU5SkipUAC 2014-06-27 18:25 - 2014-05-16 16:46 - 00002670 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-27 18:24 - 2012-09-01 23:25 - 00002790 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-06-26 23:06 - 2014-06-23 22:00 - 00197229 _____ () C:\Users\Andreas Malek\Documents\filme 23.6.2014.script 2014-06-26 23:06 - 2014-06-23 22:00 - 00000089 _____ () C:\Users\Andreas Malek\Documents\filme 23.6.2014.properties 2014-06-26 23:06 - 2014-06-23 22:00 - 00000000 ____D () C:\Users\Andreas Malek\Documents\filme 23.6.2014.pics 2014-06-26 22:30 - 2014-06-26 20:22 - 1012388580 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part36.rar 2014-06-26 22:28 - 2014-06-26 20:10 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part34.rar 2014-06-26 22:26 - 2014-06-26 20:10 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part35.rar 2014-06-26 20:22 - 2014-06-26 18:11 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part33.rar 2014-06-26 20:10 - 2014-06-26 18:03 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part32.rar 2014-06-26 20:10 - 2014-06-26 17:51 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part31.rar 2014-06-26 18:11 - 2014-06-25 21:52 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part30.rar 2014-06-26 18:03 - 2014-06-25 21:33 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part29.rar 2014-06-26 17:51 - 2014-06-25 21:18 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part28.rar 2014-06-25 21:52 - 2014-06-25 19:44 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part27.rar 2014-06-25 21:33 - 2014-06-25 19:25 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part26.rar 2014-06-25 21:18 - 2014-06-25 18:59 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part25.rar 2014-06-25 19:44 - 2014-06-25 17:26 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part24.rar 2014-06-25 19:25 - 2014-06-23 20:06 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part23.rar 2014-06-25 18:59 - 2014-06-23 19:49 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part22.rar 2014-06-25 17:26 - 2014-06-23 18:05 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part21.rar 2014-06-24 15:55 - 2013-06-22 17:32 - 00878080 ___SH () C:\Users\Andreas Malek\Desktop\Thumbs.db 2014-06-24 15:24 - 2012-09-01 22:45 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\Adobe 2014-06-24 15:03 - 2014-06-24 15:03 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\Adobe 2014-06-23 21:11 - 2013-10-21 10:53 - 00000000 ____D () C:\Users\Andreas Malek\Desktop\USB Stick 2014-06-23 20:06 - 2014-06-23 17:47 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part19.rar 2014-06-23 19:49 - 2014-06-23 17:48 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part20.rar 2014-06-23 18:05 - 2014-06-23 16:00 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part18.rar 2014-06-23 17:48 - 2014-06-22 22:12 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part17.rar 2014-06-23 17:46 - 2014-06-22 21:55 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part16.rar 2014-06-23 16:00 - 2014-06-22 20:16 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part15.rar 2014-06-22 22:12 - 2014-06-22 19:58 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part14.rar 2014-06-22 21:55 - 2014-06-22 19:47 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part13.rar 2014-06-22 20:16 - 2014-06-22 17:58 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part12.rar 2014-06-22 19:57 - 2014-06-22 17:44 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part11.rar 2014-06-22 19:47 - 2014-06-22 17:39 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part10.rar 2014-06-22 17:58 - 2014-06-22 15:17 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part09.rar 2014-06-22 17:44 - 2014-06-22 15:17 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part08.rar 2014-06-22 17:39 - 2014-06-22 15:16 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part07.rar 2014-06-22 15:17 - 2014-06-22 13:09 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part06.rar 2014-06-22 15:17 - 2014-06-22 12:58 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part04.rar 2014-06-22 15:16 - 2014-06-22 13:07 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part05.rar 2014-06-22 13:09 - 2014-06-22 10:54 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part01.rar 2014-06-22 13:07 - 2014-06-22 10:54 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part03.rar 2014-06-22 12:58 - 2014-06-22 10:54 - 1049624576 _____ () C:\Users\Andreas Malek\Downloads\Homefront_REPACK.part02.rar 2014-06-21 23:37 - 2014-06-21 23:37 - 00000000 ____D () C:\Program Files\NetSpeedMonitor 2014-06-21 23:26 - 2014-06-21 23:26 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\1255 2014-06-19 09:35 - 2012-11-27 18:08 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler 2014-06-17 19:39 - 2012-04-10 14:15 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-06-17 19:38 - 2012-04-10 14:15 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-17 19:38 - 2012-04-10 14:15 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-14 17:41 - 2014-06-14 17:41 - 00001066 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-14 17:41 - 2014-04-05 16:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-14 17:41 - 2014-04-05 16:19 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-06-13 15:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-12 22:30 - 2014-06-12 22:30 - 00000000 ____D () C:\Users\Andreas Malek\Downloads\NANC1606 2014-06-12 21:22 - 2014-06-12 21:21 - 00001448 _____ () C:\Users\Andreas Malek\Desktop\jMovieManager - Verknüpfung.lnk 2014-06-12 20:52 - 2013-08-16 23:19 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 20:51 - 2012-09-04 14:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-12 20:49 - 2014-05-06 13:33 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-12 20:48 - 2014-01-20 11:54 - 00000000 ____D () C:\ProgramData\Oracle 2014-06-12 20:46 - 2014-06-12 20:45 - 00004132 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_60-b19.log 2014-06-12 20:46 - 2013-03-11 11:11 - 00000000 ____D () C:\Program Files (x86)\Java 2014-06-12 20:38 - 2013-01-09 10:52 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\CrashDumps 2014-06-11 21:21 - 2013-11-05 19:29 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-06-11 21:21 - 2013-11-05 19:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-06-11 21:00 - 2012-09-01 23:29 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Roaming\vlc 2014-06-10 22:18 - 2014-06-10 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-06-10 21:16 - 2012-09-01 23:28 - 00000000 ____D () C:\Users\Andreas Malek\AppData\Local\Thunderbird 2014-06-10 15:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Registration 2014-06-08 11:13 - 2014-06-12 17:34 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 11:08 - 2014-06-12 17:34 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll Some content of TEMP: ==================== C:\Users\Andreas Malek\AppData\Local\Temp\MSETUP4.EXE C:\Users\Andreas Malek\AppData\Local\Temp\uninstall.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-28 09:09 ==================== End Of Log ============================ --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-07-2014 Ran by Andreas Malek at 2014-07-02 17:59:26 Running from C:\Users\Andreas Malek\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation) Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2108.00 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.5.2108.00 - CyberLink Corp.) Hidden Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3508 - Acer Incorporated) Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 13.0.0.83 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.109.2020.209 - Alps Electric) Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.8.8 - Atheros Communications Inc.) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software) AVG PC TuneUp 2014 (de-DE) (x32 Version: 14.0.1001.147 - AVG) Hidden AVG PC TuneUp 2014 (HKLM-x32\...\AVG PC TuneUp 2014) (Version: 14.0.1001.147 - AVG) AVG PC TuneUp 2014 (x32 Version: 14.0.1001.147 - AVG) Hidden Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.1.0 - Canon Inc.) Canon MG5500 series Benutzerregistrierung (HKLM-x32\...\Canon MG5500 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MG5500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5500_series) (Version: 1.01 - Canon Inc.) Canon MG5500 series On-screen Manual (HKLM-x32\...\Canon MG5500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP) clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated) CrystalDiskInfo 6.1.9a (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.1.9a - Crystal Dew World) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.4 - IObit) DriverEasy 4.6.7 (HKLM\...\DriverEasy_is1) (Version: 4.6.7.0 - Easeware) DVDFab 9.1.2.5 (22/01/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - ) EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation) Glary Utilities 5.0 (HKLM-x32\...\Glary Utilities 5) (Version: 5.0.0.1 - Glarysoft Ltd) Google Update Helper (x32 Version: 1.3.23.0 - BonanzaDeals) Hidden <==== ATTENTION Harmony Browser Plug-in (HKLM-x32\...\{634F79E1-2A41-4C40-9E8D-89EC740AC9D6}) (Version: 2.0 - Logitech) HCFR (HKLM-x32\...\HCFR Calibration_is1) (Version: - ) i1Diagnostics (HKLM-x32\...\i1Diagnostics_is1) (Version: - X-Rite) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3165 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.9.254 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle) Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Keyboard & Mouse Driver (HKLM-x32\...\InstallShield_{B910DD1A-49B1-4068-9C08-E3C3AEC0C30A}) (Version: 5.1 - Driver Builder) Keyboard & Mouse Driver (x32 Version: 5.1 - Driver Builder) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) M-Audio FastTrackPro Driver 6.0.7 (x64) (HKLM\...\{73089240-023C-11E0-9AE3-2BA1DFD72085}) (Version: 6.0.7 - M-Audio) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 31.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla) Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles) NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) Qualcomm Atheros Direct Connect (x32 Version: 3.1 - Qualcomm Atheros) Hidden Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.1 - Qualcomm Atheros) QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.85 - Realtek Semiconductor Corp.) Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel) VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) XRD i1d3 (x32 Version: 1.0.135 - X-Rite) Hidden X-Rite Device Services Manager (HKLM-x32\...\{943F411D-E3C0-43C4-9A3D-B6CE92E93395}) (Version: 1.0.115 - X-Rite) ==================== Restore Points ========================= 30-06-2014 15:46:28 Geplanter Prüfpunkt 30-06-2014 19:44:47 zoek.exe restore point 01-07-2014 12:40:57 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-06-28 18:39 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {23917D7D-7C3B-43B5-9CD5-5A08FA517746} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-17] (Adobe Systems Incorporated) Task: {326F7F5C-4FFB-4B4D-BFDF-965B27ED738F} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2014-05-14] (Glarysoft Ltd) Task: {3611117B-9857-4458-BA22-D9BFDCA47A96} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [2014-04-02] (Easeware) Task: {437B7662-AB60-49BE-B93E-5A390448D022} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {4A0C4EDA-EB4B-48FA-81EB-90042B1B6F9D} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated) Task: {6B534112-9F2A-41AB-B5E0-AF3B77B4FDC5} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2014-05-14] (Glarysoft Ltd) Task: {746AB092-A358-420A-8200-0E5B5F6EDEEB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {87035820-B4A3-4175-9EEF-5F279E3B67E7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-03-31] (AVAST Software) Task: {A5E8082F-6B27-4630-9574-93C57A6FB173} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd) Task: {D1EFFF29-617D-4229-9875-175A888EA16D} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-05-07] (Oracle Corporation) Task: {DB9F6C8F-8562-4C67-8183-FC958339522C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2013-08-30] (AVG) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-06 17:38 - 2013-08-30 00:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-07-01 18:27 - 2013-05-14 11:50 - 00140936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2013-08-30 12:40 - 2013-08-30 12:40 - 00757048 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\avgrepliba.dll 2012-04-12 10:09 - 2012-03-26 11:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-06-30 21:14 - 2014-06-30 21:14 - 02789376 _____ () C:\Program Files\AVAST Software\Avast\defs\14063001\algo.dll 2014-07-02 14:27 - 2014-07-02 14:27 - 02789888 _____ () C:\Program Files\AVAST Software\Avast\defs\14070200\algo.dll 2007-03-29 12:17 - 2007-03-29 12:17 - 00106496 _____ () C:\Program Files (x86)\Keyboard & Mouse Driver\keydll.dll 2008-06-16 09:06 - 2008-06-16 09:06 - 00053248 _____ () C:\Program Files (x86)\Keyboard & Mouse Driver\MouseHook.dll 2014-06-28 08:22 - 2014-06-28 08:22 - 03763312 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Event log errors: ========================= Application errors: ================== Error: (07/02/2014 05:46:46 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich. Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich. Error: (07/02/2014 02:31:10 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/02/2014 02:31:05 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/02/2014 02:31:04 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/02/2014 02:27:28 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2014 10:15:33 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/01/2014 10:14:51 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (07/02/2014 02:27:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/02/2014 02:27:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/02/2014 02:27:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/02/2014 02:27:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/02/2014 02:27:32 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/02/2014 02:27:32 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/02/2014 02:27:24 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/02/2014 02:27:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/02/2014 02:27:24 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/01/2014 10:55:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Microsoft Office Sessions: ========================= Error: (07/02/2014 05:46:46 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT) Description: WmiApRplWmiApRpl8F20300004D070000 Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (07/02/2014 02:31:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT) Description: Performance1637070000000000000000000009030000 Error: (07/02/2014 02:31:10 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Andreas Malek\Downloads\esetsmartinstaller_deu.exe Error: (07/02/2014 02:31:05 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Andreas Malek\Downloads\esetsmartinstaller_deu.exe Error: (07/02/2014 02:31:04 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Andreas Malek\Downloads\esetsmartinstaller_deu.exe Error: (07/02/2014 02:27:28 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/01/2014 10:15:33 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Andreas Malek\Downloads\esetsmartinstaller_deu.exe Error: (07/01/2014 10:14:51 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Andreas Malek\Downloads\esetsmartinstaller_deu.exe CodeIntegrity Errors: =================================== Date: 2014-06-28 18:37:02.145 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-06-28 18:37:02.067 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 5982.36 MB Available physical RAM: 3457.66 MB Total Pagefile: 11962.89 MB Available Pagefile: 9242.4 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:450.16 GB) (Free:179.09 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 9DDED8F8) Partition 1: (Not Active) - (Size=16 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Hy, ich werde naher die letzten Schritte machen, danach werde ich eine Rezession schreiben...danke erstmal... ich nutzte bisher immer: Avast free antivirus AVG PC Tune Up ccleaner driver booster driver easy Malewarebytes glary utilities diese habe ich viele drüber gejagt...dazu einmal die Woche die Festplatte defragmentiert.. was meinste zu den Programmen oben, oder sollte ich diese komplett weglassen?? |
![]() | #2 | |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Habe ich Probleme mit Laptop, scannen - richtig gemacht? auswertung!Zitat:
Alle anderen Tools brauchst du nicht. ![]() Ich bin froh, dass wir helfen konnten ![]() In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! ![]() Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
![]() |
Themen zu Habe ich Probleme mit Laptop, scannen - richtig gemacht? auswertung! |
absoluter, andreas, auswertung, bereit, brauche, erbitte, gescannt, laptop, neuling, probleme, programme, scanne, scannen, schädlinge, schädlingen, sweet-page, sweet-page entfernen, tuneup, win32/adware.yontoo.b, win32/dealply.b, win32/thinknice.b, win32/toolbar.searchsuite.q |