HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [IDM confirmer] => wscript.exe //B "C:\ProgramData\IDM confirmer.vbs"

kennst du das?

Hallo Schrauber,

Damit kann ich überhaupt nichts mit anfangen !

Ist das der Bösewicht ?

Gruss Thomas

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [IDM confirmer] => wscript.exe //B "C:\ProgramData\IDM confirmer.vbs" 
C:\ProgramData\IDM confirmer.vbs
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Dann:
http://www.trojaner-board.de/126216-...epair-aio.html
Das laufen lassen.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:20-07-2014
Ran by Thomas at 2014-07-21 16:34:11 Run:1
Running from C:\Users\Thomas\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [IDM confirmer] => wscript.exe //B "C:\ProgramData\IDM confirmer.vbs" 
C:\ProgramData\IDM confirmer.vbs
*****************

HKU\S-1-5-21-315344296-3706468742-1252009507-1000\Software\Microsoft\Windows\CurrentVersion\Run\\IDM confirmer => value deleted successfully.
"C:\ProgramData\IDM confirmer.vbs" => File/Directory not found.

==== End of Fixlog ====
         

dann weiter

Übrigens stimmt die Anleitung mit der Steps nicht mehr überein mit Windows Repair AIO
nur mal so angemerkt. Wer nicht aufpasst macht evtl etwas falsch.

AIO
Check Disk lief normal durch
System file hat wieder bei 43% aufgehört wegen eines unerwarteten Fehlers.
Soll ich trotzdem weiter die Steps durchführen ?

das log file ist damit auch nicht vorhanden ? !

das steht nur drin:

Running Repair Under Current User Account

Ja weiter machen, vor allem der letzte Step ist wichtig wo du die Haken setzt.

Alle Schritte durchgeführt, nun habe ich folgendes Dokument auch dem Desktop, keine Ahnung ob gut, schlecht oder gefährlich ist.

~WRL0005.tmp

Vor Tagen haben wir dieses Thema gehabt:

Zitat:
HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [IDM confirmer] => wscript.exe //B "C:\ProgramData\IDM confirmer.vbs"
kennst du das?

Ich hatte danach Probleme ins Internet zu gelangen, habe dem aber keine Bedeutung beigemessen evtl ist da ja auch kein Zusammenhang.

Jetzt nachdem das Repair Programm lief konnte ich keinerlei Internet Verbindung mehr herstellen. Für mein Internetzugang benutze ich einen Mobilen USB Flash Stick. Evtl. ist der USB Internet Flash Stick ja das Probleme. Ich habe diesen jetzt erstmal zur Seite gelegt.

Mit einen anderen Provider habe ich jetzt wieder Internetzugang.

Evtl. ist das ja eine wichtige Information ?

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-07-2014 01
Ran by ***** (administrator) on *****-PC on 25-07-2014 01:34:10
Running from C:\Users\*****\Desktop
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
() C:\Program Files\Mobile Genie\MobileMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
() C:\Program Files\Mobile Genie\Mobile Genie.exe
(Google Inc.) C:\Users\*****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\*****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\*****\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\*****\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [HW_OPENEYE_OUC_airtel mobile broadband] => C:\Program Files\airtel mobile broadband\UpdateDog\ouc.exe [246112 2014-07-24] ()
HKU\S-1-5-21-315344296-3706468742-1252009507-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
ShortcutTarget: Adobe Acrobat Speed Launcher.lnk -> C:\Windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
ShortcutTarget: Adobe Acrobat Synchronizer.lnk -> C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://translate.google.de/#
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Samsung BHO Class -> {AA609D72-8482-4076-8991-8CDAE5B93BCB} -> C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [94208] (Apple Computer, Inc.)
Tcpip\Parameters: [DhcpNameServer] 41.138.213.40 8.8.8.8
Tcpip\..\Interfaces\{6EF3DF91-8470-4F58-B9C8-EAC64C268BA2}: [NameServer] 

FireFox:
========
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.65.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\*****\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\*****\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\*****\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-07-16]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome: 
=======
CHR HomePage: 
CHR Extension: (RealDownloader) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-07-16]
CHR Extension: (Google Wallet) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-24]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR StartMenuInternet: Google Chrome - C:\Users\*****\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

ATTENTION: => Could not perform signature verification. Cryptographic Service is not running.

S3 Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [153792 2007-03-20] (Adobe Systems Incorporated)
S2 airtel mobile broadband. RunOuc; C:\Program Files\airtel mobile broadband\UpdateDog\ouc.exe [246112 2014-07-24] ()
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 androidusb; C:\windows\System32\Drivers\androidusb.sys [25088 2012-08-30] (Google Inc)
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [116008 2010-11-13] (ELAN Microelectronics Corp.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [95616 2014-07-24] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\windows\System32\DRIVERS\ew_juextctrl.sys [27520 2014-07-24] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\windows\System32\DRIVERS\ew_juwwanecm.sys [202752 2014-07-24] (Huawei Technologies Co., Ltd.)
S3 ivusb; C:\windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R3 qciusbnet; C:\windows\System32\DRIVERS\qciusbnet.sys [133120 2012-09-05] (Quanta Computer Inc.)
R3 qciusbser; C:\windows\System32\DRIVERS\qciusbser.sys [107776 2012-09-05] (Quanta Computer Inc.)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2011-08-10] (Windows (R) 2003 DDK 3790 provider)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\*****\AppData\Local\Temp\catchme.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-25 01:34 - 2014-07-25 01:34 - 00013271 _____ () C:\Users\*****\Desktop\FRST.txt
2014-07-25 01:34 - 2014-07-25 01:34 - 00000000 ____D () C:\Users\*****\Desktop\FRST-OlderVersion
2014-07-25 01:33 - 2014-07-25 01:34 - 01084416 _____ (Farbar) C:\Users\*****\Desktop\FRST.exe
2014-07-25 01:29 - 2014-07-25 01:29 - 00000780 _____ () C:\Users\*****\Desktop\GetFile.aspx
2014-07-24 19:36 - 2014-07-24 19:36 - 00001105 _____ () C:\Users\Public\Desktop\airtel.lnk
2014-07-24 19:36 - 2014-07-24 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\airtel mobile broadband
2014-07-24 19:35 - 2014-07-24 19:33 - 00861696 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00377856 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbwwan.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00202752 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00199168 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00095616 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00076544 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00070016 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00027520 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00025856 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00019200 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwupgrade.sys
2014-07-24 19:35 - 2014-07-24 19:33 - 00011136 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys
2014-07-24 19:33 - 2014-07-24 19:36 - 00000000 ____D () C:\Program Files\airtel mobile broadband
2014-07-24 17:51 - 2014-07-24 23:19 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE
2014-07-18 22:04 - 2014-07-18 22:31 - 00002115 _____ () C:\windows\epplauncher.mif
2014-07-18 14:48 - 2014-07-18 14:48 - 00000000 ____D () C:\0ee6a3afa6d87e027543f9b4ba125e
2014-07-18 13:31 - 2014-07-18 22:06 - 00019749 _____ () C:\windows\IE11_main.log
2014-07-18 13:30 - 2014-03-04 12:20 - 03969984 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2014-07-18 13:30 - 2014-03-04 12:20 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-07-18 13:30 - 2014-03-04 12:17 - 00538112 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-07-18 13:30 - 2014-03-04 12:17 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-07-18 13:30 - 2014-03-04 12:17 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2014-07-18 13:29 - 2014-06-07 03:05 - 12353024 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-18 13:29 - 2014-06-07 02:25 - 09711616 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-18 13:29 - 2014-06-07 02:12 - 01810432 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-18 13:29 - 2014-06-07 02:04 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-18 13:29 - 2014-06-07 02:03 - 01427968 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-18 13:29 - 2014-06-07 02:02 - 01129472 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-18 13:29 - 2014-06-07 02:00 - 00231936 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2014-07-18 13:29 - 2014-06-07 01:58 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-18 13:29 - 2014-06-07 01:57 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-18 13:29 - 2014-06-07 01:56 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-07-18 13:29 - 2014-06-07 01:56 - 00421376 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-18 13:29 - 2014-06-07 01:54 - 00607744 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-18 13:29 - 2014-06-07 01:54 - 00353792 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-18 13:29 - 2014-06-07 01:54 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-18 13:29 - 2014-06-07 01:54 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2014-07-18 13:29 - 2014-06-07 01:53 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-18 13:29 - 2014-06-07 01:53 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-18 13:29 - 2014-06-07 01:53 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2014-07-18 13:29 - 2014-06-07 01:52 - 02382848 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-18 13:29 - 2014-06-07 01:51 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2014-07-18 13:29 - 2014-06-07 01:47 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-18 13:29 - 2014-05-30 10:52 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-18 13:29 - 2013-10-19 04:36 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2014-07-18 13:28 - 2014-02-04 05:07 - 00234432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2014-07-18 13:28 - 2014-02-04 05:07 - 00149440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2014-07-18 13:28 - 2014-02-04 05:07 - 00027072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2014-07-18 13:28 - 2014-02-04 05:00 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2014-07-18 00:08 - 2014-07-18 00:08 - 00000207 _____ () C:\windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Starter-(32-bit).dat
2014-07-18 00:08 - 2014-07-18 00:08 - 00000000 ____D () C:\RegBackup
2014-07-17 22:45 - 2014-07-17 22:45 - 00016680 _____ () C:\bootsqm.dat
2014-07-17 22:12 - 2014-07-17 22:12 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-07-17 21:53 - 2014-07-17 21:53 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-07-17 21:53 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-17 21:52 - 2014-07-11 03:02 - 00096680 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2014-07-17 21:52 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-17 21:52 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 16:46 - 2014-07-16 16:56 - 00016384 _____ () C:\Users\*****\Desktop\EA Attraction.xls
2014-07-16 14:56 - 2014-07-25 01:00 - 00000380 _____ () C:\windows\Tasks\RNUpgradeHelperLogonPrompt_*****.job
2014-07-16 14:05 - 2014-07-16 14:05 - 00000000 ____D () C:\windows\ERUNT
2014-07-16 13:34 - 2014-07-16 13:36 - 00000000 ____D () C:\AdwCleaner
2014-07-16 12:40 - 2014-07-24 15:02 - 00000370 _____ () C:\windows\Tasks\ReclaimerUpdateXML_*****.job
2014-07-16 12:40 - 2014-07-23 12:58 - 00000374 _____ () C:\windows\Tasks\ReclaimerUpdateFiles_*****.job
2014-07-16 11:51 - 2014-07-16 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 01:14 - 2014-07-16 01:14 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RealNetworks
2014-07-16 01:13 - 2014-07-16 01:13 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-07-16 01:13 - 2014-07-16 01:13 - 00000000 ____D () C:\Program Files\RealNetworks
2014-07-16 01:12 - 2014-07-16 01:12 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-07-16 01:11 - 2014-07-16 01:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2014-07-15 18:01 - 2014-07-15 18:10 - 00000977 _____ () C:\Users\*****\Desktop\NewsLetter Pro.lnk
2014-07-15 18:01 - 2014-07-15 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewsLetter Pro
2014-07-15 18:01 - 2014-07-15 18:10 - 00000000 ____D () C:\Program Files\NewsLetter Pro
2014-07-15 18:01 - 2014-07-15 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Bouncer
2014-07-15 12:52 - 2014-07-15 17:14 - 00083456 _____ () C:\Users\*****\Desktop\linked contacts tw.xls
2014-07-14 18:07 - 2014-07-16 00:06 - 00124416 _____ () C:\Users\*****\Desktop\DEUTSCH ENGLISH.xls
2014-07-11 17:51 - 2014-07-11 17:51 - 00015521 _____ () C:\ComboFix.txt
2014-07-11 17:41 - 2014-07-25 01:00 - 00019896 _____ () C:\windows\setupact.log
2014-07-11 17:41 - 2014-07-11 17:41 - 00000000 _____ () C:\windows\setuperr.log
2014-07-11 17:39 - 2014-07-24 23:21 - 00080486 _____ () C:\windows\PFRO.log
2014-07-11 17:13 - 2011-06-26 09:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-11 17:13 - 2010-11-07 20:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-11 17:13 - 2009-04-20 07:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-11 17:13 - 2000-08-31 03:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-11 17:13 - 2000-08-31 03:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-11 17:13 - 2000-08-31 03:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-11 17:13 - 2000-08-31 03:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-11 17:13 - 2000-08-31 03:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-11 17:12 - 2014-07-11 17:51 - 00000000 ____D () C:\ComboFix
2014-07-11 17:03 - 2014-07-11 17:51 - 00000000 ____D () C:\Qoobox
2014-07-11 17:02 - 2014-07-11 17:47 - 00000000 ____D () C:\windows\erdnt
2014-07-11 16:13 - 2014-07-18 13:01 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-11 12:58 - 2014-07-15 11:17 - 00018432 _____ () C:\Users\*****\Desktop\messebauer.xls
2014-07-11 12:26 - 2014-07-11 12:26 - 00014336 _____ () C:\Users\*****\Documents\Mappe1.xls
2014-07-11 00:43 - 2014-07-25 01:32 - 00000000 ____D () C:\Users\*****\Desktop\virus problem 10 july 2014
2014-07-10 23:23 - 2014-07-11 17:06 - 00000000 ____D () C:\windows\Minidump
2014-07-10 11:07 - 2014-07-25 01:34 - 00000000 ____D () C:\FRST
2014-07-10 11:02 - 2014-07-10 11:02 - 00000000 _____ () C:\Users\*****\defogger_reenable
2014-07-10 03:58 - 2014-07-10 03:58 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 03:15 - 2013-05-10 07:56 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2014-07-10 03:15 - 2013-05-10 07:56 - 11410432 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2014-07-10 03:08 - 2014-06-30 04:40 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-10 03:08 - 2014-06-30 04:36 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-10 03:08 - 2014-06-18 04:51 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-10 03:08 - 2014-06-18 03:52 - 02350080 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-10 03:08 - 2014-03-25 05:09 - 12874240 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-07-10 03:08 - 2014-03-04 12:17 - 00868352 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-07-10 03:08 - 2014-01-29 05:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-07-10 03:08 - 2013-11-12 05:07 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-07-10 03:07 - 2014-06-06 12:44 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-10 03:07 - 2014-05-30 09:36 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-10 03:07 - 2014-04-05 05:25 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-07-10 03:07 - 2014-04-05 05:24 - 00187840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-07-10 03:07 - 2014-03-26 17:27 - 01389056 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2014-07-10 03:07 - 2014-03-26 17:27 - 01237504 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-07-10 03:07 - 2014-03-26 17:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2014-07-10 03:07 - 2014-03-26 17:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-07-10 03:07 - 2014-01-28 05:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-07-10 03:07 - 2014-01-24 05:18 - 01212352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-07-10 03:07 - 2014-01-01 02:05 - 00420008 _____ () C:\windows\system32\locale.nls
2014-07-10 03:07 - 2013-11-26 14:11 - 00240576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-07-10 03:07 - 2013-10-30 05:19 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2014-07-10 03:07 - 2013-10-12 05:04 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2014-07-10 03:07 - 2013-10-12 05:03 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2014-07-10 03:07 - 2013-10-12 04:15 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2014-07-10 03:07 - 2013-10-12 04:15 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2014-07-10 03:07 - 2013-10-04 04:49 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2014-07-10 03:07 - 2013-10-04 04:17 - 00177152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2014-07-10 03:01 - 2014-04-25 05:06 - 00626688 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2014-07-10 02:50 - 2013-12-04 05:03 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll
2014-07-10 02:50 - 2013-12-04 05:03 - 00423936 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll
2014-07-10 02:50 - 2013-12-04 05:03 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll
2014-07-10 02:50 - 2013-12-04 05:03 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll
2014-07-10 02:50 - 2013-12-04 05:02 - 00390144 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-07-10 02:50 - 2013-12-04 04:54 - 00594944 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe
2014-07-10 02:50 - 2013-12-04 04:54 - 00572416 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe
2014-07-10 02:50 - 2013-12-04 04:54 - 00510976 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe
2014-07-10 02:50 - 2013-12-04 04:54 - 00508928 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe
2014-07-10 02:08 - 2014-06-05 17:26 - 01059840 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-10 02:08 - 2014-04-12 05:15 - 00136640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-07-10 02:08 - 2014-04-12 05:15 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-07-10 02:08 - 2014-04-12 05:12 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-07-10 02:08 - 2014-04-12 05:12 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2014-07-10 02:08 - 2014-04-12 05:12 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-07-10 02:08 - 2014-04-12 05:11 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-07-10 02:08 - 2013-11-27 04:14 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2014-07-10 02:08 - 2013-11-27 04:13 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-07-10 01:50 - 2014-07-10 11:23 - 00000000 ____D () C:\ProgramData\F-Secure
2014-07-04 16:14 - 2014-07-04 16:18 - 00000000 ____D () C:\Users\*****\Desktop\Reisen Hamburg
2014-07-04 16:10 - 2014-07-04 16:15 - 00000000 ____D () C:\Users\*****\Desktop\free 2015
2014-07-04 16:07 - 2014-07-07 13:38 - 00000000 ____D () C:\Users\*****\Desktop\CMT 2014
2014-07-03 19:09 - 2014-07-05 13:34 - 00000000 ____D () C:\Users\*****\Desktop\Reiselust 2014
2014-07-03 17:33 - 2014-07-04 16:03 - 00014848 _____ () C:\Users\*****\Desktop\Road To Germany Part 2.xls
2014-07-03 09:59 - 2014-07-03 13:16 - 00014848 _____ () C:\Users\*****\Desktop\Road To Germany Part 1.xls
2014-07-01 17:21 - 2014-07-24 16:51 - 00000000 ____D () C:\Users\*****\Desktop\LinkedIn Kontakte
2014-06-29 19:00 - 2014-07-04 11:55 - 00000000 ____D () C:\Users\*****\Desktop\AUTO
2014-06-29 11:32 - 2014-06-30 13:34 - 00000000 ____D () C:\Users\*****\Desktop\KATO
2014-06-28 22:07 - 2014-06-28 22:34 - 00000675 _____ () C:\Users\*****\Desktop\dubai events.txt
2014-06-28 18:21 - 2014-07-01 11:42 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-25 01:34 - 2014-07-25 01:34 - 00013271 _____ () C:\Users\*****\Desktop\FRST.txt
2014-07-25 01:34 - 2014-07-25 01:34 - 00000000 ____D () C:\Users\*****\Desktop\FRST-OlderVersion
2014-07-25 01:34 - 2014-07-25 01:33 - 01084416 _____ (Farbar) C:\Users\*****\Desktop\FRST.exe
2014-07-25 01:34 - 2014-07-10 11:07 - 00000000 ____D () C:\FRST
2014-07-25 01:32 - 2014-07-11 00:43 - 00000000 ____D () C:\Users\*****\Desktop\virus problem 10 july 2014
2014-07-25 01:29 - 2014-07-25 01:29 - 00000780 _____ () C:\Users\*****\Desktop\GetFile.aspx
2014-07-25 01:25 - 2011-12-06 21:51 - 00001124 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-315344296-3706468742-1252009507-1000UA.job
2014-07-25 01:10 - 2010-11-21 00:01 - 00781966 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-25 01:08 - 2009-07-14 07:34 - 00016160 _____ () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-25 01:08 - 2009-07-14 07:34 - 00016160 _____ () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-25 01:00 - 2014-07-16 14:56 - 00000380 _____ () C:\windows\Tasks\RNUpgradeHelperLogonPrompt_*****.job
2014-07-25 01:00 - 2014-07-11 17:41 - 00019896 _____ () C:\windows\setupact.log
2014-07-25 01:00 - 2012-01-05 18:02 - 00001094 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-25 01:00 - 2009-07-14 07:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-25 00:59 - 2014-06-21 13:35 - 01170125 _____ () C:\windows\WindowsUpdate.log
2014-07-25 00:45 - 2012-01-05 18:02 - 00001098 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-24 23:45 - 2013-01-01 13:40 - 00000932 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-315344296-3706468742-1252009507-1000UA.job
2014-07-24 23:26 - 2011-12-06 21:36 - 00134264 _____ () C:\Users\*****\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-24 23:23 - 2009-07-14 07:33 - 01792752 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-24 23:21 - 2014-07-11 17:39 - 00080486 _____ () C:\windows\PFRO.log
2014-07-24 23:19 - 2014-07-24 17:51 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE
2014-07-24 20:18 - 2013-10-13 02:57 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-07-24 19:58 - 2012-01-09 19:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Skype
2014-07-24 19:36 - 2014-07-24 19:36 - 00001105 _____ () C:\Users\Public\Desktop\airtel.lnk
2014-07-24 19:36 - 2014-07-24 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\airtel mobile broadband
2014-07-24 19:36 - 2014-07-24 19:33 - 00000000 ____D () C:\Program Files\airtel mobile broadband
2014-07-24 19:36 - 2012-05-19 11:50 - 00000000 ____D () C:\ProgramData\DatacardService
2014-07-24 19:33 - 2014-07-24 19:35 - 00861696 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00377856 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbwwan.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00202752 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00199168 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00095616 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00076544 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00070016 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00027520 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00025856 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00019200 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwupgrade.sys
2014-07-24 19:33 - 2014-07-24 19:35 - 00011136 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys
2014-07-24 19:33 - 2012-05-19 11:51 - 01112288 _____ (Microsoft Corporation) C:\windows\system32\WdfCoInstaller01007.dll
2014-07-24 19:33 - 2012-05-19 11:51 - 01112288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfCoInstaller01007.dll
2014-07-24 18:39 - 2009-07-14 05:04 - 00000855 _____ () C:\windows\system32\Drivers\etc\hosts_bak_329
2014-07-24 16:51 - 2014-07-01 17:21 - 00000000 ____D () C:\Users\*****\Desktop\LinkedIn Kontakte
2014-07-24 16:23 - 2011-12-06 21:51 - 00001072 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-315344296-3706468742-1252009507-1000Core.job
2014-07-24 15:07 - 2011-12-29 00:48 - 00000000 ____D () C:\Program Files\Yahoo!
2014-07-24 15:02 - 2014-07-16 12:40 - 00000370 _____ () C:\windows\Tasks\ReclaimerUpdateXML_*****.job
2014-07-24 11:45 - 2013-01-01 13:40 - 00000910 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-315344296-3706468742-1252009507-1000Core.job
2014-07-24 09:51 - 2011-12-09 20:27 - 00005141 _____ () C:\windows\ULEAD32.INI
2014-07-23 20:10 - 2014-02-11 18:48 - 00000000 ____D () C:\Users\*****\Documents\Mobile Genie
2014-07-23 12:58 - 2014-07-16 12:40 - 00000374 _____ () C:\windows\Tasks\ReclaimerUpdateFiles_*****.job
2014-07-21 00:37 - 2011-12-09 22:31 - 00000030 _____ () C:\windows\Iedit.INI
2014-07-19 16:01 - 2009-07-14 05:37 - 00000000 ____D () C:\windows\rescache
2014-07-19 02:03 - 2009-07-14 05:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-07-18 22:31 - 2014-07-18 22:04 - 00002115 _____ () C:\windows\epplauncher.mif
2014-07-18 22:06 - 2014-07-18 13:31 - 00019749 _____ () C:\windows\IE11_main.log
2014-07-18 14:48 - 2014-07-18 14:48 - 00000000 ____D () C:\0ee6a3afa6d87e027543f9b4ba125e
2014-07-18 14:03 - 2013-08-30 00:19 - 00000000 ____D () C:\windows\system32\MRT
2014-07-18 13:01 - 2014-07-11 16:13 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-18 00:40 - 2009-07-14 05:04 - 00000855 _____ () C:\windows\system32\Drivers\etc\hosts_bak_917
2014-07-18 00:08 - 2014-07-18 00:08 - 00000207 _____ () C:\windows\tweaking.com-regbackup-*****-PC-Microsoft-Windows-7-Starter-(32-bit).dat
2014-07-18 00:08 - 2014-07-18 00:08 - 00000000 ____D () C:\RegBackup
2014-07-17 22:45 - 2014-07-17 22:45 - 00016680 _____ () C:\bootsqm.dat
2014-07-17 22:12 - 2014-07-17 22:12 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-07-17 21:54 - 2013-10-19 12:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-17 21:53 - 2014-07-17 21:53 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-07-17 21:52 - 2011-12-08 01:06 - 00000000 ____D () C:\Program Files\Java
2014-07-16 16:56 - 2014-07-16 16:46 - 00016384 _____ () C:\Users\*****\Desktop\EA Attraction.xls
2014-07-16 14:05 - 2014-07-16 14:05 - 00000000 ____D () C:\windows\ERUNT
2014-07-16 13:36 - 2014-07-16 13:34 - 00000000 ____D () C:\AdwCleaner
2014-07-16 12:34 - 2011-03-30 14:12 - 00000000 ____D () C:\windows\es
2014-07-16 11:51 - 2014-07-16 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 09:55 - 2011-12-07 00:33 - 00000000 ____D () C:\ProgramData\Real
2014-07-16 09:55 - 2011-12-07 00:32 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Real
2014-07-16 01:14 - 2014-07-16 01:14 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RealNetworks
2014-07-16 01:13 - 2014-07-16 01:13 - 00000000 ____D () C:\ProgramData\RealNetworks
2014-07-16 01:13 - 2014-07-16 01:13 - 00000000 ____D () C:\Program Files\RealNetworks
2014-07-16 01:13 - 2014-07-16 01:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2014-07-16 01:12 - 2014-07-16 01:12 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2014-07-16 01:12 - 2011-12-07 00:18 - 00201872 _____ (RealNetworks, Inc.) C:\windows\system32\rmoc3260.dll
2014-07-16 01:12 - 2011-12-07 00:18 - 00000000 ____D () C:\Program Files\Real
2014-07-16 01:11 - 2012-12-13 07:20 - 00499712 _____ (Microsoft Corporation) C:\windows\system32\msvcp71.dll
2014-07-16 01:11 - 2012-12-13 07:20 - 00348160 _____ (Microsoft Corporation) C:\windows\system32\msvcr71.dll
2014-07-16 01:11 - 2011-12-07 00:18 - 00006656 _____ (RealNetworks, Inc.) C:\windows\system32\pndx5016.dll
2014-07-16 01:11 - 2011-12-07 00:18 - 00005632 _____ (RealNetworks, Inc.) C:\windows\system32\pndx5032.dll
2014-07-16 00:06 - 2014-07-14 18:07 - 00124416 _____ () C:\Users\*****\Desktop\DEUTSCH ENGLISH.xls
2014-07-15 18:10 - 2014-07-15 18:01 - 00000977 _____ () C:\Users\*****\Desktop\NewsLetter Pro.lnk
2014-07-15 18:10 - 2014-07-15 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewsLetter Pro
2014-07-15 18:10 - 2014-07-15 18:01 - 00000000 ____D () C:\Program Files\NewsLetter Pro
2014-07-15 18:01 - 2014-07-15 18:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Bouncer
2014-07-15 18:01 - 2014-02-11 19:46 - 00000000 ____D () C:\Users\*****\AppData\Roaming\NewsLetter Pro
2014-07-15 17:14 - 2014-07-15 12:52 - 00083456 _____ () C:\Users\*****\Desktop\linked contacts tw.xls
2014-07-15 11:17 - 2014-07-11 12:58 - 00018432 _____ () C:\Users\*****\Desktop\messebauer.xls
2014-07-12 10:10 - 2009-07-14 07:53 - 00032608 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-07-11 17:51 - 2014-07-11 17:51 - 00015521 _____ () C:\ComboFix.txt
2014-07-11 17:51 - 2014-07-11 17:12 - 00000000 ____D () C:\ComboFix
2014-07-11 17:51 - 2014-07-11 17:03 - 00000000 ____D () C:\Qoobox
2014-07-11 17:51 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Public
2014-07-11 17:51 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Default
2014-07-11 17:47 - 2014-07-11 17:02 - 00000000 ____D () C:\windows\erdnt
2014-07-11 17:42 - 2009-07-14 05:04 - 00000215 _____ () C:\windows\system.ini
2014-07-11 17:42 - 2009-07-14 05:04 - 00000027 _____ () C:\windows\system32\Drivers\etc\hosts_bak_979
2014-07-11 17:41 - 2014-07-11 17:41 - 00000000 _____ () C:\windows\setuperr.log
2014-07-11 17:38 - 2009-07-14 05:03 - 49807360 _____ () C:\windows\system32\config\SOFTWARE.bak
2014-07-11 17:38 - 2009-07-14 05:03 - 19922944 _____ () C:\windows\system32\config\SYSTEM.bak
2014-07-11 17:38 - 2009-07-14 05:03 - 01048576 _____ () C:\windows\system32\config\DEFAULT.bak
2014-07-11 17:38 - 2009-07-14 05:03 - 00262144 _____ () C:\windows\system32\config\SECURITY.bak
2014-07-11 17:38 - 2009-07-14 05:03 - 00262144 _____ () C:\windows\system32\config\SAM.bak
2014-07-11 17:09 - 2011-12-20 15:20 - 00000000 ____D () C:\Users\*****\AppData\Roaming\FileZilla
2014-07-11 17:06 - 2014-07-10 23:23 - 00000000 ____D () C:\windows\Minidump
2014-07-11 14:06 - 2014-05-27 13:41 - 00000000 ____D () C:\Users\*****\Desktop\Messe infos
2014-07-11 12:26 - 2014-07-11 12:26 - 00014336 _____ () C:\Users\*****\Documents\Mappe1.xls
2014-07-11 03:02 - 2014-07-17 21:52 - 00096680 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2014-07-11 02:56 - 2014-07-17 21:53 - 00272808 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-11 02:56 - 2014-07-17 21:52 - 00175528 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-11 02:55 - 2014-07-17 21:52 - 00175528 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-10 21:07 - 2013-07-28 23:23 - 00000000 ____D () C:\Users\*****\AppData\Roaming\rining
2014-07-10 11:23 - 2014-07-10 01:50 - 00000000 ____D () C:\ProgramData\F-Secure
2014-07-10 11:02 - 2014-07-10 11:02 - 00000000 _____ () C:\Users\*****\defogger_reenable
2014-07-10 11:02 - 2011-12-06 21:21 - 00000000 ____D () C:\Users\*****
2014-07-10 10:20 - 2011-03-30 13:53 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-10 03:58 - 2014-07-10 03:58 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-10 03:15 - 2011-03-30 13:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-07 13:38 - 2014-07-04 16:07 - 00000000 ____D () C:\Users\*****\Desktop\CMT 2014
2014-07-05 13:34 - 2014-07-03 19:09 - 00000000 ____D () C:\Users\*****\Desktop\Reiselust 2014
2014-07-04 16:18 - 2014-07-04 16:14 - 00000000 ____D () C:\Users\*****\Desktop\Reisen Hamburg
2014-07-04 16:15 - 2014-07-04 16:10 - 00000000 ____D () C:\Users\*****\Desktop\free 2015
2014-07-04 16:03 - 2014-07-03 17:33 - 00014848 _____ () C:\Users\*****\Desktop\Road To Germany Part 2.xls
2014-07-04 12:11 - 2014-05-16 11:28 - 00000000 ____D () C:\Users\*****\Desktop\TW Project
2014-07-04 11:55 - 2014-06-29 19:00 - 00000000 ____D () C:\Users\*****\Desktop\AUTO
2014-07-03 13:16 - 2014-07-03 09:59 - 00014848 _____ () C:\Users\*****\Desktop\Road To Germany Part 1.xls
2014-07-01 18:26 - 2012-10-13 23:32 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-07-01 11:42 - 2014-06-28 18:21 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-30 13:34 - 2014-06-29 11:32 - 00000000 ____D () C:\Users\*****\Desktop\KATO
2014-06-30 04:40 - 2014-07-10 03:08 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:36 - 2014-07-10 03:08 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-28 22:34 - 2014-06-28 22:07 - 00000675 _____ () C:\Users\*****\Desktop\dubai events.txt
2014-06-27 21:26 - 2014-05-27 12:47 - 00000000 ____D () C:\Users\*****\Desktop\EATTM
2014-06-26 17:38 - 2011-12-09 22:15 - 93585272 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-25 20:28 - 2014-06-11 13:23 - 00000698 _____ () C:\Users\*****\Desktop\east africa contacts.txt

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-07-19 15:53

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Ist das nur ein WLAN Stick oder ein richtiger UMTS Internet Stick?

UMTS Internet Stick ist das richtige Wort dafür - sorry für die Verwirrung
Mit meinem neuen Provider des UMTS Internet Stick habe ich keinerlei Probleme bisher.
Das Hoch und runterfahren dauert für mein empfinden noch ein wenig lange aber ich bin bisher sehr zufrieden.
Auch der Seitenaufbau im Internet geht jetzt wieder merklich schneller.
Bin ich bzw. mein laptop bereits geheilt ? :-)

noch kurz Dienste checken.

Downloade dir bitte Farbar Service Scanner

• Starte das Tool mit Doppelklick auf die FSS.exe
• Gehe sicher, dass folgende Optionen angehakt sind.
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender
  • Other Services
• Klicke auf Scan.
• Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Heute habe ich z.B. wieder das *Problem* das der Sound nicht immer funktioniert. das ist nicht wirklich ein Problem aber evtl ein Hinweis ?

Farbar Service Scanner Version: 21-07-2014
Ran by ***** (administrator) on 26-07-2014 at 21:39:43
Running from "C:\Users\*****\Desktop"
Microsoft Windows 7 Starter  Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============
cryptsvc Service is not running. Checking service configuration:
The start type of cryptsvc service is OK.
The ImagePath of cryptsvc service is OK.
The ServiceDll of cryptsvc: "%SystemRoot%\system32\cryptsvc.dll".


Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\windows\system32\nsisvc.dll => MD5 is legit
C:\windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\windows\system32\dhcpcore.dll => MD5 is legit
C:\windows\system32\Drivers\afd.sys
[2014-07-10 03:07] - [2014-05-30 09:36] - 0338944 ____A (Microsoft Corporation) D0B388DA1D111A34366E04EB4A5DD156

C:\windows\system32\Drivers\tdx.sys => MD5 is legit
C:\windows\system32\Drivers\tcpip.sys
[2014-07-10 03:07] - [2014-04-05 05:25] - 1294272 ____A (Microsoft Corporation) 5579DD18546999F5D0EC39D018726C6B

C:\windows\system32\dnsrslvr.dll => MD5 is legit
C:\windows\system32\mpssvc.dll => MD5 is legit
C:\windows\system32\bfe.dll => MD5 is legit
C:\windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\windows\system32\SDRSVC.dll => MD5 is legit
C:\windows\system32\vssvc.exe => MD5 is legit
C:\windows\system32\wscsvc.dll => MD5 is legit
C:\windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\windows\system32\wuaueng.dll => MD5 is legit
C:\windows\system32\qmgr.dll => MD5 is legit
C:\windows\system32\es.dll => MD5 is legit
C:\windows\system32\cryptsvc.dll
[2013-08-29 22:45] - [2013-07-09 07:46] - 0140288 ____A (Microsoft Corporation) 7CA1BECEA5DE2643ADDAD32670E7A4C9

C:\Program Files\Windows Defender\MpSvc.dll
[2013-08-29 21:56] - [2013-05-27 07:57] - 0680960 ____A (Microsoft Corporation) 082CF481F659FAE0DE51AD060881EB47

C:\windows\system32\ipnathlp.dll => MD5 is legit
C:\windows\system32\iphlpsvc.dll => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit


**** End of log ****
         

Hast du beim WIndows All in One Repair auch den letzten Schritt gemacht mit den Häkchen setzen?

Genau wie angegeben alles durchgeführt.
Ich zeige keinerlei Eigeninitiative *haha*

Windows Taste +R, schreibe CMD und drücke Enter.

schreibe nun:

sc start cryptsvc

und drücke Enter.

Frisches FSS Log bitte.