![]() |
| |||||||
Log-Analyse und Auswertung: Download Protect 2.2.1 unter Firefox/Windows 8.1Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
| |
| | #1 |
| /// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | Download Protect 2.2.1 unter Firefox/Windows 8.1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter FF HKLM-x32\...\Firefox\Extensions: [{0EB76B06-2587-43A4-B867-6C54A691E426}] - C:\WINDOWS\Installer\{9FFDE68B-1BE1-4FF9-9394-0BC2DEAC0885}\{0EB76B06-2587-43A4-B867-6C54A691E426}.xpi
FF Extension: Download Protect - C:\WINDOWS\Installer\{9FFDE68B-1BE1-4FF9-9394-0BC2DEAC0885}\{0EB76B06-2587-43A4-B867-6C54A691E426}.xpi [2014-06-19]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
ESET Online Scanner
Downloade Dir bitte
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
| | #2 |
| | Download Protect 2.2.1 unter Firefox/Windows 8.1 Leider ja
__________________![]() Logs: Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by Mimi at 2014-08-06 19:57:26 Run:1
Running from C:\Users\Mimi\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
FF HKLM-x32\...\Firefox\Extensions: [{0EB76B06-2587-43A4-B867-6C54A691E426}] - C:\WINDOWS\Installer\{9FFDE68B-1BE1-4FF9-9394-0BC2DEAC0885}\{0EB76B06-2587-43A4-B867-6C54A691E426}.xpi
FF Extension: Download Protect - C:\WINDOWS\Installer\{9FFDE68B-1BE1-4FF9-9394-0BC2DEAC0885}\{0EB76B06-2587-43A4-B867-6C54A691E426}.xpi [2014-06-19]
*****************
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{0EB76B06-2587-43A4-B867-6C54A691E426} => value deleted successfully.
C:\WINDOWS\Installer\{9FFDE68B-1BE1-4FF9-9394-0BC2DEAC0885}\{0EB76B06-2587-43A4-B867-6C54A691E426}.xpi => Moved successfully.
==== End of Fixlog ====
ESET Online Scanner liefert gleich nach Akzeptieren der AGB's folgendes: "Updates funktionieren nicht. Ist ein Proxy eingerichtet?" Proxy ist keiner da. Macht vielleicht die doppelte Fritzbox Probleme? (Eine Internetanschluss vom Haus, die andere danach an einem Switch angeschlossen und nur für WLAN zuständig.) und der Log der checkup.txt Code:
ATTFilter Results of screen317's Security Check version 0.99.86
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Defender
Norton 360
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Adobe Flash Player 14.0.0.145
Adobe Reader 10.1.10 Adobe Reader out of Date!
Mozilla Firefox 29.0.1 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
frischer FRST Log FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by Mimi (administrator) on MIRIAM on 06-08-2014 20:53:35
Running from C:\Users\Mimi\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe
() C:\Users\Mimi\Desktop\SecurityCheck.exe
() C:\Users\Mimi\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213328 2012-10-18] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2872176 2012-10-08] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Bitcasa] => C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-27] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4177645711-3970229063-862042014-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Mimi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: 1EldosIconOverlay -> {C23D6939-E330-4ADB-880A-EE89BA989460} => C:\windows\SYSTEM32\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: EldosIconOverlay -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: OverlayExcluded -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: OverlayPending -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers: OverlayProtected -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\buShell.dll (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: 1EldosIconOverlay -> {C23D6939-E330-4ADB-880A-EE89BA989460} => C:\windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: EldosIconOverlay -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - {46D999B3-558C-44C1-8EE0-08750C5C29D1} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM-x32 - {46D999B3-558C-44C1-8EE0-08750C5C29D1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - {46D999B3-558C-44C1-8EE0-08750C5C29D1} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\..\Interfaces\{D6F005BC-183A-40F1-AC1B-A3D51D5BFE34}: [NameServer]192.168.0.100
FireFox:
========
FF ProfilePath: C:\Users\Mimi\AppData\Roaming\Mozilla\Firefox\Profiles\ebxpazlm.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de?hl=de&gl=de
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn [2014-07-14]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171664 2012-11-06] (Adobe Systems Incorporated)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2878152 2012-12-21] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-12-13] (Advanced Micro Devices, Inc.)
S1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-09-26] (Symantec Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20130930.001\IDSVia64.sys [520280 2013-09-24] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20131004.035\ENG64.SYS [126040 2013-10-04] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20131004.035\EX64.SYS [2099288 2013-10-04] (Symantec Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 SRTSP; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\N360x64\1501000.012\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-07-14] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-06 20:11 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-08-06 20:04 - 2014-08-06 20:04 - 00854410 _____ () C:\Users\Mimi\Desktop\SecurityCheck.exe
2014-08-06 20:00 - 2014-08-06 20:00 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-06 20:00 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-08-06 20:00 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-08-06 20:00 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-08-06 20:00 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-08-06 20:00 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-08-06 19:59 - 2014-08-06 19:59 - 02347384 _____ (ESET) C:\Users\Mimi\Desktop\esetsmartinstaller_deu.exe
2014-08-06 09:50 - 2014-08-06 09:50 - 00000810 _____ () C:\Users\Mimi\Desktop\JRT.txt
2014-08-06 09:41 - 2014-08-06 09:41 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-06 09:37 - 2014-08-06 09:37 - 00003236 _____ () C:\Users\Mimi\Desktop\AdwCleaner[S1].txt
2014-08-06 09:33 - 2014-08-06 09:39 - 00000000 ____D () C:\AdwCleaner
2014-08-06 09:17 - 2014-08-06 09:56 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-08-06 09:16 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-08-06 09:16 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-08-06 09:16 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-08-06 09:15 - 2014-08-06 09:11 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mimi\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-06 09:15 - 2014-08-06 09:11 - 01361309 _____ () C:\Users\Mimi\Desktop\adwcleaner_3.302.exe
2014-08-06 09:15 - 2014-08-06 09:11 - 01016261 _____ (Thisisu) C:\Users\Mimi\Desktop\JRT.exe
2014-08-05 23:24 - 2014-08-05 23:24 - 00008188 _____ () C:\Users\Mimi\Desktop\gmer.log
2014-08-05 23:16 - 2014-08-05 23:14 - 00380416 _____ () C:\Users\Mimi\Desktop\Gmer-19357.exe
2014-08-05 23:03 - 2014-08-05 23:03 - 00031898 _____ () C:\Users\Mimi\Desktop\Addition.txt
2014-08-05 23:02 - 2014-08-06 20:53 - 00018952 _____ () C:\Users\Mimi\Desktop\FRST.txt
2014-08-05 23:01 - 2014-08-06 20:53 - 00000000 ____D () C:\FRST
2014-08-05 23:00 - 2014-08-05 23:00 - 02094080 _____ (Farbar) C:\Users\Mimi\Desktop\FRST64.exe
2014-08-05 15:37 - 2014-08-05 15:37 - 00000000 _____ () C:\Recovery.txt
2014-07-14 17:32 - 2014-08-06 20:10 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-14 17:23 - 2014-07-14 17:23 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-07-14 17:23 - 2014-07-14 17:23 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-07-14 17:23 - 2014-07-14 17:23 - 00003206 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-07-14 17:23 - 2014-07-14 17:23 - 00002411 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-07-14 17:23 - 2014-07-14 17:23 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-07-14 17:17 - 2014-08-05 15:59 - 00000000 ____D () C:\WINDOWS\system32\Drivers\N360x64
2014-07-14 17:16 - 2014-08-05 16:10 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-07-14 17:16 - 2014-07-14 17:17 - 00000000 ____D () C:\Program Files (x86)\Norton 360
2014-07-14 17:12 - 2014-07-14 17:12 - 00000000 ____D () C:\ProgramData\PCSettings
2014-07-07 21:16 - 2014-07-07 21:16 - 00000000 ____D () C:\Users\Mimi\AppData\Local\Skype
2014-07-07 21:15 - 2014-08-05 16:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-07 21:15 - 2014-08-05 15:50 - 00000000 ____D () C:\Users\Mimi\AppData\Roaming\Skype
2014-07-07 21:15 - 2014-07-07 21:15 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-07 21:15 - 2014-07-07 21:15 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-07 21:15 - 2014-07-07 21:15 - 00000000 ____D () C:\ProgramData\Skype
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-06 20:54 - 2014-08-05 23:02 - 00018952 _____ () C:\Users\Mimi\Desktop\FRST.txt
2014-08-06 20:53 - 2014-08-05 23:01 - 00000000 ____D () C:\FRST
2014-08-06 20:53 - 2014-03-04 00:15 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4177645711-3970229063-862042014-1001
2014-08-06 20:41 - 2014-03-25 21:04 - 00452608 ___SH () C:\Users\Mimi\Desktop\Thumbs.db
2014-08-06 20:41 - 2014-03-25 20:30 - 00003918 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DBBE89A8-5831-412F-8BAE-855B806DEBD3}
2014-08-06 20:13 - 2014-03-25 17:52 - 01114603 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-06 20:13 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-06 20:12 - 2014-03-05 13:25 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-06 20:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-08-06 20:11 - 2014-03-05 13:24 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-06 20:10 - 2014-07-14 17:32 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-08-06 20:10 - 2013-11-14 09:13 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-06 20:04 - 2014-08-06 20:04 - 00854410 _____ () C:\Users\Mimi\Desktop\SecurityCheck.exe
2014-08-06 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-08-06 20:00 - 2014-08-06 20:00 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-06 19:59 - 2014-08-06 19:59 - 02347384 _____ (ESET) C:\Users\Mimi\Desktop\esetsmartinstaller_deu.exe
2014-08-06 19:58 - 2014-03-25 20:30 - 00000000 __RDO () C:\Users\Mimi\SkyDrive
2014-08-06 19:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-08-06 19:53 - 2014-03-04 00:48 - 00000000 ____D () C:\Users\Mimi\AppData\Local\CrashDumps
2014-08-06 19:51 - 2013-01-03 07:27 - 00000000 ____D () C:\ProgramData\WinClon
2014-08-06 19:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-08-06 09:56 - 2014-08-06 09:17 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-08-06 09:50 - 2014-08-06 09:50 - 00000810 _____ () C:\Users\Mimi\Desktop\JRT.txt
2014-08-06 09:41 - 2014-08-06 09:41 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-08-06 09:39 - 2014-08-06 09:33 - 00000000 ____D () C:\AdwCleaner
2014-08-06 09:38 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-06 09:37 - 2014-08-06 09:37 - 00003236 _____ () C:\Users\Mimi\Desktop\AdwCleaner[S1].txt
2014-08-06 09:37 - 2013-11-14 00:18 - 00969386 _____ () C:\WINDOWS\PFRO.log
2014-08-06 09:28 - 2014-04-08 15:01 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-08-06 09:28 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-08-06 09:28 - 2013-01-03 07:43 - 00000000 ____D () C:\WINDOWS\it
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-06 09:16 - 2014-08-06 09:16 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-08-06 09:11 - 2014-08-06 09:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mimi\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-06 09:11 - 2014-08-06 09:15 - 01361309 _____ () C:\Users\Mimi\Desktop\adwcleaner_3.302.exe
2014-08-06 09:11 - 2014-08-06 09:15 - 01016261 _____ (Thisisu) C:\Users\Mimi\Desktop\JRT.exe
2014-08-05 23:24 - 2014-08-05 23:24 - 00008188 _____ () C:\Users\Mimi\Desktop\gmer.log
2014-08-05 23:14 - 2014-08-05 23:16 - 00380416 _____ () C:\Users\Mimi\Desktop\Gmer-19357.exe
2014-08-05 23:03 - 2014-08-05 23:03 - 00031898 _____ () C:\Users\Mimi\Desktop\Addition.txt
2014-08-05 23:00 - 2014-08-05 23:00 - 02094080 _____ (Farbar) C:\Users\Mimi\Desktop\FRST64.exe
2014-08-05 16:11 - 2014-03-25 17:33 - 00000000 ____D () C:\Users\Mimi
2014-08-05 16:11 - 2014-03-04 00:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-08-05 16:11 - 2013-11-14 09:13 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-08-05 16:11 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-08-05 16:11 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-08-05 16:11 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-05 16:10 - 2014-07-14 17:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-08-05 16:10 - 2014-07-07 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-08-05 16:10 - 2014-04-08 15:01 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-08-05 16:10 - 2014-03-04 00:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-05 16:10 - 2014-03-04 00:32 - 00000000 ____D () C:\Program Files\iTunes
2014-08-05 16:10 - 2014-03-04 00:32 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-08-05 16:10 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-05 16:10 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-05 16:10 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-05 16:10 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-08-05 16:10 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-08-05 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-08-05 16:00 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-08-05 15:59 - 2014-07-14 17:17 - 00000000 ____D () C:\WINDOWS\system32\Drivers\N360x64
2014-08-05 15:56 - 2014-03-04 00:32 - 00000000 ____D () C:\Program Files\iPod
2014-08-05 15:50 - 2014-07-07 21:15 - 00000000 ____D () C:\Users\Mimi\AppData\Roaming\Skype
2014-08-05 15:37 - 2014-08-05 15:37 - 00000000 _____ () C:\Recovery.txt
2014-08-05 15:35 - 2013-11-14 09:27 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-05 15:35 - 2013-11-14 09:11 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-08-05 15:35 - 2013-11-14 09:11 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-08-05 15:32 - 2014-03-14 18:04 - 00266752 ___SH () C:\Users\Mimi\Downloads\Thumbs.db
2014-08-05 15:31 - 2013-08-22 16:46 - 00302552 _____ () C:\WINDOWS\setupact.log
2014-08-05 15:18 - 2014-04-28 08:09 - 00000000 ____D () C:\Users\Mimi\Desktop\sonstiges
2014-08-03 12:38 - 2014-04-28 08:09 - 00000000 ____D () C:\Users\Mimi\Desktop\biochemie
2014-07-22 21:53 - 2014-04-01 08:54 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-07-16 20:20 - 2014-05-06 21:01 - 00000000 ____D () C:\Users\Mimi\Desktop\physiologie
2014-07-16 20:20 - 2014-04-27 20:12 - 00000000 ____D () C:\Users\Mimi\Desktop\uni
2014-07-16 20:20 - 2014-03-14 19:58 - 00000000 ____D () C:\Users\Mimi\Desktop\wp
2014-07-14 17:23 - 2014-07-14 17:23 - 00177752 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-07-14 17:23 - 2014-07-14 17:23 - 00008222 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-07-14 17:23 - 2014-07-14 17:23 - 00003206 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-07-14 17:23 - 2014-07-14 17:23 - 00002411 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-07-14 17:23 - 2014-07-14 17:23 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-07-14 17:17 - 2014-07-14 17:16 - 00000000 ____D () C:\Program Files (x86)\Norton 360
2014-07-14 17:16 - 2013-01-03 07:21 - 00000000 ____D () C:\ProgramData\Norton
2014-07-14 17:12 - 2014-07-14 17:12 - 00000000 ____D () C:\ProgramData\PCSettings
2014-07-09 12:29 - 2014-04-08 15:01 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-08 17:58 - 2014-03-13 15:35 - 00000000 ____D () C:\Users\Mimi\AppData\Local\Microsoft Help
2014-07-07 21:16 - 2014-07-07 21:16 - 00000000 ____D () C:\Users\Mimi\AppData\Local\Skype
2014-07-07 21:15 - 2014-07-07 21:15 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-07 21:15 - 2014-07-07 21:15 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-07 21:15 - 2014-07-07 21:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-07 21:05 - 2014-03-04 00:06 - 00000000 ____D () C:\Users\Mimi\AppData\Local\Packages
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Mimi\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-06 09:50
==================== End Of Log ============================
--- --- --- --- --- --- Gruß, Simon Und direkter Nachtrag: Download Protect taucht nicht mehr bei den Firefox Add-Ons auf ![]() Eine weitere Frage stellt sich mir noch: Es ist wohl Norton und McAfee installiert. Beides zugleich und noch die Windows Firewall drauf ist wohl nicht ratsam. Kann ich da eine Meinung bekommen was behalten und was runterwerfen? Oder komplett umsteigen? Ich nutze seit Jahren Avira und bin hochzufrieden mit. Aber da es sich wie gesagt nicht um mein Laptop handelt, wollte ich hier noch eine Meinung einholen ![]() Gruß, Simon |
![]() |
| Themen zu Download Protect 2.2.1 unter Firefox/Windows 8.1 |
| bildschirm, bluescreen, branding, download protect 2.2.1, flash player, homepage, installation, kein bluescreen, mozilla, problem, pup.optional.crossrider.a, pup.optional.iepluginservice.a, pup.optional.installcore.a, pup.optional.sweetpage.a, realtek, software, svchost.exe, sweet-page, sweet-page entfernen, sweetpage, sweetpage entfernen, symantec, warnung, windowsmangerprotect |