Habe ich mir einen Virus eingefangen? Was nun?

suryoyo · 25.09.2014, 12:06

Hallo,

leider hatte ich Probleme neue Programme zu installieren. Nachdem ich nun WIndows Prof. 7 N(deutsch) raufgespielt habe, konnte ich bestimmten Programmen (Antivirus, firefox) wieder nicht installieren. Fehlermeldung: File is corrupt! (auf englisch?!) weshalb ich annehme, dass ich einen Virus habe? Ab und zu war da auch noch ein dll Fehler, aber der Befehl sfc hat nichts gefunden...

Ich habe 2 Partitionen. Auf einer sind meine Daten drauf. Die Parition muss ich auch löschen richtig? Aber wenn ich meine Daten auf eine Externe drauf spiele, wie kann ich sichergehen, dass ich den Virus nicht wieder mit rauf spiele?

Ich habe eine Kasperski und Antivir Rescue Disc gebootet, aber irgendwie lassen diese sich zwar booten und ich sehe das Fenster, aber wenn ich das System starten will passiert nicht bzw. nur ein Reboot. Woran kann das liegen?

Auf einer Website wird folgendes empfohlen:
"Festplatten vollständig löschen
Überschreiben Sie alle Festplatten komplett mit Nullen. Der Befehl:
fdisk -l
zeigt die Kennungen aller Festplatten an (z.B. /dev/sda, /dev/sdb, usw. oder auch /dev/hda, /dev/hdb usw.). Die Ziffern hinter den Kennung sind die Partition auf den Platten. Falls Sie von einem USB-Stick gebootet haben, wird der ebenfalls als Festplatte angezeigt werden. Anhand der Daten wie Größe, Anzahl der Partitionen, etc. können Sie recht gut erkennen, welche Platte welche ist.
Der folgende Befehl löscht alle Daten auf der angegebenen Platte! Wenn Sie noch etwas sichern wollen, müssen Sie das vorher erledigen. Danach sind die Daten unwiederbringlich verloren!
Für jede dieser Platten geben Sie nun ein:
dd if=/dev/zero of=/dev/sda
wobei /dev/sda sukkzessive durch die Kennungen der Platten ersetzt wird. Der Befehl wird die Festplatten komplett überschreiben und alle darauf befindlichen Daten löschen. Den Bootsektor und eventuelle Bootsektorviren mit eingeschlossen. Das kann je nach Größe der Platten eine ganze Weile dauern, während der scheinbar nichts weiter passiert. Lassen Sie sich nicht davon irritieren."

Leider ist mir nicht klar, wann und wo ich das machen soll. Im Eingabefehld nach dem formatieren?

Danke im Vorraus für die Hilfe. Bin echt verzweifelt

schrauber · 25.09.2014, 13:16

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

suryoyo · 25.09.2014, 13:33

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014
Ran by Admin (administrator) on ACER-LAPTOP on 25-09-2014 14:30:54
Running from C:\Users\Admin\Downloads
Platform: Windows 7 Professional N Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKU\S-1-5-21-262693033-2432716068-3683473292-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [1967616 2014-04-17] (AMD)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8332C9E900D8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: No Name -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} ->  No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

Chrome: 
=======
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-24]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-24]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-24]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-24]
CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-24]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed]
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe [57344 2011-08-10] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-25 14:30 - 2014-09-25 14:31 - 00007356 _____ () C:\Users\Admin\Downloads\FRST.txt
2014-09-25 14:30 - 2014-09-25 14:30 - 02106880 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2014-09-25 14:30 - 2014-09-25 14:30 - 00000000 ____D () C:\FRST
2014-09-25 13:58 - 2014-09-25 13:58 - 06626832 _____ (TeamViewer GmbH) C:\Users\Admin\Downloads\TeamViewer_Setup_de.exe
2014-09-25 13:35 - 2014-09-25 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-09-25 13:29 - 2014-09-25 13:40 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-25 13:29 - 2014-09-25 13:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-09-25 13:27 - 2014-09-25 13:27 - 00000000 __RHD () C:\MSOCache
2014-09-24 19:53 - 2014-09-24 19:56 - 303173632 _____ () C:\Users\Admin\Downloads\kav_rescue_10.iso
2014-09-24 16:43 - 2014-09-24 16:43 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-09-24 16:42 - 2014-09-24 16:42 - 05400864 _____ (Canneverbe Limited ) C:\Users\Admin\Downloads\cdbxp_setup_4.5.4.5067.exe
2014-09-24 16:42 - 2014-09-24 16:42 - 00001155 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-24 16:42 - 2014-09-24 16:42 - 00001105 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-24 16:42 - 2014-09-24 16:42 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited
2014-09-24 16:42 - 2014-09-24 16:42 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-09-24 16:40 - 2014-09-24 16:44 - 641245184 _____ () C:\Users\Admin\Downloads\rescue-system.iso
2014-09-24 16:38 - 2014-09-24 16:38 - 00005653 _____ () C:\Users\Admin\Desktop\hijackthis.log
2014-09-24 16:37 - 2014-09-24 16:37 - 00000000 ____D () C:\Program Files\Hijackthis
2014-09-24 16:36 - 2014-09-24 16:36 - 00388608 _____ (Trend Micro Inc.) C:\Users\Admin\Downloads\HiJackThis204.exe
2014-09-24 16:28 - 2014-09-24 16:30 - 166267560 _____ (AVG Technologies) C:\Users\Admin\Downloads\avg_free_x64_all_2015_5315a8160.exe
2014-09-24 16:26 - 2014-09-24 16:26 - 01101648 _____ () C:\Users\Admin\Downloads\Windows Media Player - CHIP-Installer.exe
2014-09-24 16:14 - 2014-09-25 13:52 - 00108840 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-24 16:14 - 2014-09-24 16:14 - 00000000 ____D () C:\Users\Admin\AppData\Local\AMD
2014-09-24 16:13 - 2014-09-25 14:07 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-24 16:13 - 2014-09-24 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-24 16:12 - 2014-09-25 14:23 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-24 16:12 - 2014-09-25 13:23 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-24 16:12 - 2014-09-25 13:18 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-24 16:12 - 2014-09-25 13:18 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-09-24 16:12 - 2014-09-24 16:20 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ATI
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\ATI
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\ProgramData\ATI
2014-09-24 16:11 - 2014-09-25 14:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-24 16:11 - 2014-09-24 16:13 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-24 16:11 - 2014-09-24 16:11 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-24 16:11 - 2014-09-24 16:11 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-24 16:11 - 2014-09-24 16:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe
2014-09-24 16:09 - 2014-09-24 16:25 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-09-24 16:06 - 2014-09-24 16:06 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-09-24 16:03 - 2014-09-24 16:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-09-24 16:03 - 2010-06-17 17:18 - 09112168 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUStoricon.dll
2014-09-24 16:03 - 2010-06-17 17:18 - 00422504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtsUStor.dll
2014-09-24 16:03 - 2010-06-17 17:18 - 00246376 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUStor.sys
2014-09-24 16:02 - 2014-09-24 16:06 - 00000000 ____D () C:\ProgramData\AMD
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Raptr
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-09-24 16:01 - 2014-09-24 16:02 - 00008286 _____ () C:\Windows\DPINST.LOG
2014-09-24 16:01 - 2014-09-24 16:01 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-24 16:00 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files\AMD
2014-09-24 15:59 - 2014-09-24 15:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-09-24 15:01 - 2014-09-24 14:10 - 00000000 ____D () C:\Windows\Panther
2014-09-24 14:27 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-09-24 14:27 - 2014-09-24 14:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-24 14:22 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-24 14:22 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-24 14:22 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-09-24 14:22 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-24 14:22 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-24 14:22 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-24 14:22 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-09-24 14:22 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-24 14:22 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-24 14:22 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-09-24 14:22 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-24 14:22 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-09-24 14:22 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-24 14:22 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-09-24 14:20 - 2014-09-24 14:20 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2014-09-24 14:20 - 2014-09-24 14:20 - 00000000 ____D () C:\Program Files\Broadcom
2014-09-24 14:19 - 2014-09-24 14:19 - 01559112 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-24 14:17 - 2014-09-24 14:18 - 00000000 ____D () C:\OETemp
2014-09-24 14:16 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-09-24 14:16 - 2014-09-24 14:16 - 00000000 ____D () C:\Program Files\ATI
2014-09-24 14:14 - 2014-09-24 14:14 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect
2014-09-24 14:14 - 2014-09-24 14:14 - 00000000 ____D () C:\AMD
2014-09-24 14:14 - 2011-08-10 07:51 - 00067685 _____ () C:\Windows\system32\athrextx.cat
2014-09-24 14:14 - 2011-08-05 16:33 - 02768384 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys
2014-09-24 14:14 - 2011-08-05 16:33 - 02768384 _____ (Atheros Communications, Inc.) C:\Windows\system32\athrx.sys
2014-09-24 14:13 - 2014-09-24 14:13 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-09-24 14:12 - 2014-09-24 16:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-24 14:12 - 2014-09-24 14:12 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-09-24 14:11 - 2014-09-24 14:11 - 00001439 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-24 14:11 - 2014-09-24 14:11 - 00001405 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-09-24 14:10 - 2014-09-24 14:11 - 00000000 ____D () C:\Users\Admin
2014-09-24 14:10 - 2014-09-24 14:10 - 00000020 ___SH () C:\Users\Admin\ntuser.ini
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 __SHD () C:\Recovery
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2014-09-24 14:10 - 2009-07-14 06:59 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-24 14:10 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-09-24 14:05 - 2014-09-25 14:06 - 01626035 _____ () C:\Windows\WindowsUpdate.log
2014-09-24 14:05 - 2014-09-24 14:05 - 00001355 _____ () C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-25 14:31 - 2014-09-25 14:30 - 00007356 _____ () C:\Users\Admin\Downloads\FRST.txt
2014-09-25 14:30 - 2014-09-25 14:30 - 02106880 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2014-09-25 14:30 - 2014-09-25 14:30 - 00000000 ____D () C:\FRST
2014-09-25 14:27 - 2014-09-24 16:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-25 14:23 - 2014-09-24 16:12 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-25 14:09 - 2011-04-12 10:14 - 00698926 _____ () C:\Windows\system32\perfh007.dat
2014-09-25 14:09 - 2011-04-12 10:14 - 00149034 _____ () C:\Windows\system32\perfc007.dat
2014-09-25 14:09 - 2009-07-14 07:12 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-25 14:07 - 2014-09-24 16:13 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-25 14:06 - 2014-09-24 14:05 - 01626035 _____ () C:\Windows\WindowsUpdate.log
2014-09-25 13:58 - 2014-09-25 13:58 - 06626832 _____ (TeamViewer GmbH) C:\Users\Admin\Downloads\TeamViewer_Setup_de.exe
2014-09-25 13:52 - 2014-09-24 16:14 - 00108840 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-25 13:40 - 2014-09-25 13:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-25 13:36 - 2009-07-14 04:34 - 00000167 _____ () C:\Windows\win.ini
2014-09-25 13:35 - 2014-09-25 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Windows\PCHEALTH
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-09-25 13:32 - 2014-09-25 13:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-09-25 13:32 - 2014-09-25 13:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-09-25 13:32 - 2011-04-12 10:24 - 00000000 ____D () C:\Windows\ShellNew
2014-09-25 13:32 - 2009-07-14 07:38 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-09-25 13:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-09-25 13:29 - 2014-09-25 13:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-09-25 13:27 - 2014-09-25 13:27 - 00000000 __RHD () C:\MSOCache
2014-09-25 13:23 - 2014-09-24 16:12 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-25 13:18 - 2014-09-24 16:12 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-09-25 13:18 - 2014-09-24 16:12 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-09-25 12:26 - 2009-07-14 06:50 - 00019920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-25 12:26 - 2009-07-14 06:50 - 00019920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-25 12:18 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-25 12:18 - 2009-07-14 06:56 - 00022793 _____ () C:\Windows\setupact.log
2014-09-24 19:56 - 2014-09-24 19:53 - 303173632 _____ () C:\Users\Admin\Downloads\kav_rescue_10.iso
2014-09-24 16:44 - 2014-09-24 16:40 - 641245184 _____ () C:\Users\Admin\Downloads\rescue-system.iso
2014-09-24 16:43 - 2014-09-24 16:43 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-09-24 16:42 - 2014-09-24 16:42 - 05400864 _____ (Canneverbe Limited ) C:\Users\Admin\Downloads\cdbxp_setup_4.5.4.5067.exe
2014-09-24 16:42 - 2014-09-24 16:42 - 00001155 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-09-24 16:42 - 2014-09-24 16:42 - 00001105 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-09-24 16:42 - 2014-09-24 16:42 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Canneverbe Limited
2014-09-24 16:42 - 2014-09-24 16:42 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-09-24 16:38 - 2014-09-24 16:38 - 00005653 _____ () C:\Users\Admin\Desktop\hijackthis.log
2014-09-24 16:37 - 2014-09-24 16:37 - 00000000 ____D () C:\Program Files\Hijackthis
2014-09-24 16:36 - 2014-09-24 16:36 - 00388608 _____ (Trend Micro Inc.) C:\Users\Admin\Downloads\HiJackThis204.exe
2014-09-24 16:33 - 2010-11-21 05:47 - 00004918 _____ () C:\Windows\PFRO.log
2014-09-24 16:30 - 2014-09-24 16:28 - 166267560 _____ (AVG Technologies) C:\Users\Admin\Downloads\avg_free_x64_all_2015_5315a8160.exe
2014-09-24 16:26 - 2014-09-24 16:26 - 01101648 _____ () C:\Users\Admin\Downloads\Windows Media Player - CHIP-Installer.exe
2014-09-24 16:25 - 2014-09-24 16:09 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-09-24 16:20 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Google
2014-09-24 16:14 - 2014-09-24 16:14 - 00000000 ____D () C:\Users\Admin\AppData\Local\AMD
2014-09-24 16:13 - 2014-09-24 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-24 16:13 - 2014-09-24 16:11 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ATI
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\ATI
2014-09-24 16:12 - 2014-09-24 16:12 - 00000000 ____D () C:\ProgramData\ATI
2014-09-24 16:11 - 2014-09-24 16:11 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-24 16:11 - 2014-09-24 16:11 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-24 16:11 - 2014-09-24 16:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-24 16:11 - 2014-09-24 16:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe
2014-09-24 16:06 - 2014-09-24 16:06 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-09-24 16:06 - 2014-09-24 16:02 - 00000000 ____D () C:\ProgramData\AMD
2014-09-24 16:03 - 2014-09-24 16:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-09-24 16:03 - 2014-09-24 14:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Raptr
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-09-24 16:02 - 2014-09-24 16:02 - 00000000 ____D () C:\Program Files (x86)\AMD
2014-09-24 16:02 - 2014-09-24 16:01 - 00008286 _____ () C:\Windows\DPINST.LOG
2014-09-24 16:02 - 2014-09-24 16:00 - 00000000 ____D () C:\Program Files\AMD
2014-09-24 16:02 - 2014-09-24 14:27 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-09-24 16:02 - 2014-09-24 14:16 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-09-24 16:01 - 2014-09-24 16:01 - 00000000 ____D () C:\Program Files\Synaptics
2014-09-24 15:59 - 2014-09-24 15:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-09-24 15:01 - 2009-07-14 07:43 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-09-24 15:01 - 2009-07-14 07:38 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-09-24 14:27 - 2014-09-24 14:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-24 14:20 - 2014-09-24 14:20 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2014-09-24 14:20 - 2014-09-24 14:20 - 00000000 ____D () C:\Program Files\Broadcom
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\th-TH
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\he-IL
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\et-EE
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-09-24 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-09-24 14:19 - 2014-09-24 14:19 - 01559112 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-24 14:18 - 2014-09-24 14:17 - 00000000 ____D () C:\OETemp
2014-09-24 14:16 - 2014-09-24 14:16 - 00000000 ____D () C:\Program Files\ATI
2014-09-24 14:14 - 2014-09-24 14:14 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect
2014-09-24 14:14 - 2014-09-24 14:14 - 00000000 ____D () C:\AMD
2014-09-24 14:13 - 2014-09-24 14:13 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2014-09-24 14:12 - 2014-09-24 14:12 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2014-09-24 14:11 - 2014-09-24 14:11 - 00001439 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-24 14:11 - 2014-09-24 14:11 - 00001405 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-09-24 14:11 - 2014-09-24 14:10 - 00000000 ____D () C:\Users\Admin
2014-09-24 14:11 - 2009-07-14 07:38 - 00000000 ____D () C:\Windows\system32\restore
2014-09-24 14:10 - 2014-09-24 15:01 - 00000000 ____D () C:\Windows\Panther
2014-09-24 14:10 - 2014-09-24 14:10 - 00000020 ___SH () C:\Users\Admin\ntuser.ini
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 __SHD () C:\Recovery
2014-09-24 14:10 - 2014-09-24 14:10 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2014-09-24 14:10 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-09-24 14:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery
2014-09-24 14:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-09-24 14:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-24 14:07 - 2009-07-14 06:50 - 00266688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-24 14:06 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-09-24 14:05 - 2014-09-24 14:05 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-09-24 14:05 - 2009-07-14 06:51 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-09-24 14:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-09-24 14:02 - 2011-04-12 10:24 - 00000000 ____D () C:\Windows\CSC
2014-09-15 09:06 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\ose00000.exe
C:\Users\Admin\AppData\Local\Temp\raptr_stub.exe
C:\Users\Admin\AppData\Local\Temp\{2CFD620D-0A21-49A9-AD46-8F5939F6C797}-GoogleUpdateSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-24 14:02

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2014
Ran by Admin at 2014-09-25 14:32:08
Running from C:\Users\Admin\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 1 (SP1) (x32 Version:  - Microsoft) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{3FAEEEBE-48F4-84C1-2B49-96AE73E67E3E}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Steady Video Plug-In  (Version: 2.07.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.82.87 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Qualcomm Atheros Fast Reconnect (HKLM-x32\...\{0CA2063D-D43F-41F2-A8AC-A3C4A4C722D2}) (Version: 1.0 - QualComm Atheros)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30122 - Realtek Semiconductor Corp.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.6.0 - Synaptics Incorporated)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

24-09-2014 12:11:55 Installiert Atheros Communications Inc.(R) AR81Family Gigabit/FaÕ¯+
24-09-2014 12:13:46 Installiert Qualcomm Atheros Fast Reconnect
24-09-2014 18:12:47 Windows Update
25-09-2014 11:26:54 Installed Microsoft Office Enterprise 2007

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {07446ADB-A65C-4016-9324-B3912A16AC49} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-24] (Google Inc.)
Task: {1B2A535A-3450-4538-8FF2-33AA8A3C9779} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {43FCD8F1-EDE3-46BD-9FFB-8924D4691832} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-24] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-04-17 22:29 - 2014-04-17 22:29 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/25/2014 00:20:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/25/2014 00:19:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000657c8
ID des fehlerhaften Prozesses: 0x860
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3

Error: (09/24/2014 08:15:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (09/24/2014 08:05:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (09/24/2014 07:55:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (09/24/2014 07:53:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/24/2014 07:52:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000657c8
ID des fehlerhaften Prozesses: 0x90c
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3

Error: (09/24/2014 07:34:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/24/2014 07:33:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 15.1.6.0, Zeitstempel: 0x4c524ed5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000657c8
ID des fehlerhaften Prozesses: 0x8bc
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3

Error: (09/24/2014 04:36:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/24/2014 07:31:45 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet: 
%%1062

Error: (09/24/2014 07:31:45 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: 
%%1115

Error: (09/24/2014 04:51:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:51:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:51:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:49:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:49:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:49:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:47:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/24/2014 04:47:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: AMD E-350 Processor
Percentage of memory in use: 47%
Total physical RAM: 3818.9 MB
Available physical RAM: 2004.83 MB
Total Pagefile: 7636 MB
Available Pagefile: 5407.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:254.85 GB) (Free:229.92 GB) NTFS
Drive d: (Volume) (Fixed) (Total:195.31 GB) (Free:114.58 GB) NTFS
Drive e: (KRD10) (CDROM) (Total:0.28 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 6A27F3B5)
Partition 1: (Not Active) - (Size=15.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=254.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=195.3 GB) - (Type=OF Extended)

==================== End Of Log ============================

schrauber · 25.09.2014, 19:10

ALso was genau geht jetzt alles nit? Wenn du was installieren willst heisst es file is corrupt? Hast du den betreffenden Installer dann auch mal neu geladen?

Habe ich mir einen Virus eingefangen? Was nun?

Antiviren-, Firewall- und andere Schutzprogramme: Habe ich mir einen Virus eingefangen? Was nun?