![]() |
|
Plagegeister aller Art und deren Bekämpfung: Virus eingefangenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Virus eingefangen Hallo alle miteinander. Ich bin neu hier und habe schon einiges gelesen.Das problem ist ein Rechner meiner bekannten. Es ist ein Medion Pc mit Vista Home Premium.Ich schreibe hier jetzt nicht mehr über den PC und seine Komponenten, weil ich nicht weiß, was Ihr benötigt und dann unnütz lesen müßt.Schreibt einfach ,wenn Ihr Angaben braucht. Hier erst mal die Probleme. Als erstes werden alle Updates für Sicherheitsprogramme geblockt. Sie hat drei auf Ihrem Rechner: Avira Free Antivirus, Avast Free Antivirus und Ad Aware Free Version. Avira macht allerdings einen kompletten Durchlauf wenn man es startet, findet aber nichts. Den Avast habe ich zusätzlich instaliert nachdem Antivir sich nicht updaten läßt. Aber damit ging garnichts, derläßt sich noch nichtmal starten. Dazu kommt das der Windows Defender sich nicht aktiveren läßt. So nun habe ich von Eurer Home-Page die folgenden Programme geladen und auch durchlaufen lassen. FRST und GMER haben funktioniert. Defogger startet und läuft auch, zeigt Finished an ich klicke auf OK und dann ist wieder das Anfangfenster da mit unten "Disable links und rechts Re-enable. Da wußte ich jetzt nicht weiter und habe ihn ausgeschaltet ohne Re-enable zu klicken. Jetzt kommt das große Problem, die Logdateien von FRST und GMER hier sichtbar zu machen. Ich versuchs erstmal mit FRST: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-04-2015 Ran by PC (administrator) on PC-PC on 21-04-2015 19:22:19 Running from C:\Users\PC\Downloads Loaded Profiles: PC (Available profiles: PC) Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe () C:\Acer\Empowering Technology\SysMonitor.exe (HiTRUST) C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (CyberLink Corp.) C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe (Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (Simple Star, Inc.) C:\Program Files\Simple Star\PhotoShow Deluxe 3\data\Xtras\mssysmgr.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Express Tray\ExpressTray.exe () C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe () C:\Acer\Empowering Technology\ePerformance\MemCheck.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (HiTRSUT) C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (SEIKO EPSON CORPORATION) C:\Program Files\epson\MyEpson Portal\mepService.exe (SEIKO EPSON CORPORATION) C:\Program Files\epson\MyEpson Portal\mep.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Bytemobile, Inc.) C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\bmctl.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\sdclt.exe () C:\Users\PC\Downloads\Defogger.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4669440 2007-07-06] (Realtek Semiconductor) HKLM\...\Run: [Acer Tour] => [X] HKLM\...\Run: [Acer Empowering Technology Monitor] => C:\Acer\Empowering Technology\SysMonitor.exe [319488 2007-01-24] () HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [464168 2007-02-07] (HiTRUST) HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-06-15] (Realtek Semiconductor Corp.) HKLM\...\Run: [PlayMovie] => C:\Program Files\Acer Arcade Live\Acer PlayMovie\PMVService.exe [178280 2007-07-13] (CyberLink Corp.) HKLM\...\Run: [WarReg_PopUp] => C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] () HKLM\...\Run: [eRecoveryService] => [X] HKLM\...\Run: [Acer Tour Reminder] => C:\Acer\AcerTour\Reminder.exe [151552 2007-02-15] (Acer Inc.) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [220552 2011-02-01] (Geek Software GmbH) HKLM\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft) HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2005896 2015-04-06] (APN) HKLM\...\Run: [MobileConnect] => C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2403840 2009-09-11] (Vodafone) HKLM\...\Run: [] => [X] HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe [8216048 2015-03-10] () HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [726320 2015-03-24] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-17] (Avast Software s.r.o.) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [Acer Tour Reminder] => [X] HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [PhotoShow Deluxe Media Manager] => C:\Program Files\Simple Star\PhotoShow Deluxe 3\data\Xtras\mssysmgr.exe [163840 2005-02-01] (Simple Star, Inc.) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATINFE.EXE [262208 2013-12-16] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [688984 2015-01-28] (Garmin Ltd or its subsidiaries) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\MountPoints2: {40c1979e-d38e-11df-a9bd-001c2583e12a} - J:\LaunchU3.exe -a HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\MountPoints2: {babcf7fa-afbc-11e4-82e3-001c2583e12a} - J:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1859551519-956376940-1599385416-1000\...\MountPoints2: {babcf881-afbc-11e4-82e3-001e101f82a0} - J:\setup_vmc_lite.exe /checkApplicationPresence HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\ACER(W~1.SCR [187392 2006-10-19] () HKU\S-1-5-18\...\Run: [Acer Tour Reminder] => C:\Acer\AcerTour\Reminder.exe [151552 2007-02-15] (Acer Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk [2007-05-07] ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PCM Media Sharing.lnk [2007-05-07] ShortcutTarget: PCM Media Sharing.lnk -> C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe () Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2010-10-30] ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-17] (Avast Software s.r.o.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd URLSearchHook: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 - Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File SearchScopes: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 -> DefaultScope {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 -> {4816C09D-3D85-4878-A903-D5627AF2A110} URL = hxxp://www.search.ask.com/web?tpid=ORJ&o=100000027&pf=V7&p2=&gct=sb&itbv=12.10.3.24&apn_uid=DDFCA50F-87FC-4FD3-A644-4BD251FBB26D&apn_ptnrs=U3&apn_dtid=YYYYYYYYDE&apn_dbr=ff_15.0.1&doi=2014-02-01&trgb=IE&q={searchTerms}&psv=&pt=tb SearchScopes: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 -> {6D603AC1-6D71-4C69-A516-ED9C1B18BDBF} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-10] (Oracle Corporation) BHO: ShowBarObj Class -> {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} -> C:\Windows\system32\ActiveToolBand.dll [2007-02-06] (HiTRUST) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-17] (Avast Software s.r.o.) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02] (Skype Technologies S.A.) BHO: Ask Shopping Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [2015-04-06] (APN LLC.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-10] (Oracle Corporation) Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll [2007-02-06] (HiTRUST) Toolbar: HKLM - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [2015-04-06] (APN LLC.) Toolbar: HKU\S-1-5-21-1859551519-956376940-1599385416-1000 -> Acer eDataSecurity Management - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll [2007-02-06] (HiTRUST) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02] (Skype Technologies S.A.) Winsock: Catalog9 01 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 09 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 10 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 11 bmnet.dll File Not found () Winsock: Catalog9 12 bmnet.dll File Not found () Winsock: Catalog9 13 bmnet.dll File Not found () Winsock: Catalog9 24 C:\Program Files\Avira\Antivirus\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default FF DefaultSearchUrl: hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.3&q= FF SearchEngineOrder.1: Ask.com FF Homepage: https://www.google.de/ FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-09] () FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\system32\npdeployJava1.dll [2015-02-10] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-10] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-10] (Oracle Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-07-27] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\user.js [2011-12-20] FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-07-27] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\ask-web-search.xml [2014-02-06] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\askcom.xml [2014-02-01] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-1.xml [2015-04-15] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-10.xml [2012-01-06] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-11.xml [2011-06-25] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-12.xml [2011-08-03] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-13.xml [2011-08-26] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-14.xml [2011-08-30] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-15.xml [2011-09-06] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-16.xml [2011-09-13] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-17.xml [2011-09-28] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-18.xml [2011-10-04] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-19.xml [2012-01-10] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-2.xml [2010-10-21] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-20.xml [2012-02-02] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-21.xml [2012-02-13] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-22.xml [2012-02-17] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-23.xml [2012-03-12] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-24.xml [2012-03-19] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-25.xml [2012-03-26] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-26.xml [2012-04-02] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-27.xml [2012-05-09] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-28.xml [2012-06-08] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-29.xml [2012-06-23] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-3.xml [2010-10-28] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-30.xml [2012-07-24] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-31.xml [2012-08-02] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-32.xml [2012-09-03] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-33.xml [2012-09-10] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-34.xml [2012-10-14] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-35.xml [2012-10-28] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-36.xml [2012-12-05] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-37.xml [2013-01-11] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-38.xml [2013-01-20] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-39.xml [2013-02-07] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-4.xml [2010-12-11] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-40.xml [2013-02-28] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-41.xml [2013-03-11] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-42.xml [2013-04-04] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-43.xml [2013-05-26] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-44.xml [2013-05-26] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-45.xml [2013-07-07] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-46.xml [2013-08-17] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-5.xml [2011-02-22] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-6.xml [2011-03-08] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-7.xml [2011-03-27] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-8.xml [2011-05-01] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin-9.xml [2011-05-07] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin.gif [2012-07-24] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin.src [2012-07-24] FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\searchplugins\icqplugin.xml [2010-09-12] FF Extension: Segurança do navegador Avira - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\Extensions\abs@avira.com [2015-03-31] FF Extension: Garmin Communicator - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19] FF Extension: Microsoft .NET Framework Assistant - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-09-17] FF Extension: Adblock Plus - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\xfzrfnrq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-04-08] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-05-02] FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon FF Extension: Bytemobile Optimization Client - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon [2015-02-08] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-17] Chrome: ======= CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-17] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [266343 2007-04-04] (CyberLink) [File not signed] R2 AcerMemUsageCheckService; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672 2006-12-29] () [File not signed] S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc.exe [815352 2015-03-24] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [434424 2015-03-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [434424 2015-03-24] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [1004032 2015-03-24] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [180632 2015-04-06] (APN LLC.) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-17] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216 2015-04-17] (Avast Software) R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512 2007-02-07] (HiTRSUT) R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation) R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248 2007-01-31] (Acer Inc.) [File not signed] R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [517464 2015-01-28] (Garmin Ltd or its subsidiaries) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe [670808 2015-03-10] () R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed] S2 matlabserver; C:\MATLAB6p1\webserver\bin\win32\matlabserver.exe [258048 2001-04-06] () [File not signed] R2 MyEpson Portal Service; C:\Program Files\EPSON\MyEpson Portal\mepService.exe [703984 2014-09-22] (SEIKO EPSON CORPORATION) R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [143360 2007-04-09] () [File not signed] R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 VMCService; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-11] (Vodafone) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-17] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-17] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-04-17] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-17] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-17] (Avast Software s.r.o.) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-04-17] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-17] () R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [640560 2015-01-06] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [242504 2015-01-06] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [490144 2015-01-06] (BitDefender) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-24] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-03-24] (Avira Operations GmbH & Co. KG) R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [77192 2015-01-06] (BitDefender LLC) R1 bdftdif; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdftdif.sys [130640 2015-01-06] (BitDefender LLC) U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2008-10-09] (Bytemobile, Inc.) [File not signed] S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.) R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.98.0\gzflt.sys [169992 2015-01-22] (BitDefender LLC) S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2010-02-03] (LogMeIn, Inc.) S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [102912 2009-06-29] (Huawei Technologies Co., Ltd.) R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [76584 2006-12-07] () R3 NTIDrvr; C:\Windows\System32\DRIVERS\NTIDrvr.sys [6144 2007-05-07] (NewTech Infosystems, Inc.) [File not signed] R0 PSDFilter; C:\Windows\System32\DRIVERS\psdfilter.sys [20264 2007-02-07] (HiTRUST) R0 PSDNServ; C:\Windows\System32\drivers\PSDNServ.sys [16680 2007-02-07] (HiTRUST) R0 psdvdisk; C:\Windows\System32\drivers\psdvdisk.sys [60712 2007-02-07] (HiTRUST) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-03-24] (Avira GmbH) R1 tcpipBM; C:\Windows\system32\Drivers\tcpipBM.sys [18816 2008-10-09] (Bytemobile, Inc.) [File not signed] S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [408280 2015-01-22] (BitDefender S.R.L.) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220240 2015-04-17] (Avast Software) R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\Acer Arcade Live\Acer PlayMovie\000.fcl [39408 2007-08-31] (Cyberlink Corp.) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S0 Lbd; system32\DRIVERS\Lbd.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-21 19:22 - 2015-04-21 19:23 - 00032762 _____ () C:\Users\PC\Downloads\FRST.txt 2015-04-21 19:21 - 2015-04-21 19:22 - 00000000 ____D () C:\FRST 2015-04-21 19:21 - 2015-04-21 19:21 - 01139200 _____ (Farbar) C:\Users\PC\Downloads\FRST.exe 2015-04-21 19:16 - 2015-04-21 19:18 - 00000466 _____ () C:\Users\PC\Downloads\defogger_disable.log 2015-04-21 19:16 - 2015-04-21 19:16 - 00000000 _____ () C:\Users\PC\defogger_reenable 2015-04-21 19:14 - 2015-04-21 19:14 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe 2015-04-20 17:50 - 2015-04-20 17:51 - 00000000 ____D () C:\Users\PC\Downloads\Neuer Ordner 2015-04-19 14:24 - 2015-04-19 14:24 - 00000000 ____D () C:\Users\PC\AppData\Roaming\FLEXnet 2015-04-19 13:00 - 2015-04-19 13:00 - 00000000 ____D () C:\Users\PC\Neuer Ordner 2015-04-17 23:29 - 2015-04-17 23:30 - 00000000 ____D () C:\Users\PC\Desktop\Allerlei Desctop 2015-04-17 22:00 - 2015-04-17 22:00 - 00000556 _____ () C:\Windows\PFRO.log 2015-04-17 21:55 - 2015-04-17 21:55 - 00000000 ____D () C:\Users\PC\AppData\Roaming\AVAST Software 2015-04-17 21:55 - 2015-04-17 21:55 - 00000000 _____ () C:\Windows\setuperr.log 2015-04-17 21:55 - 2015-04-17 21:55 - 00000000 _____ () C:\Windows\setupact.log 2015-04-17 21:54 - 2015-04-17 21:55 - 00000000 ____D () C:\Windows\system32\vbox 2015-04-17 21:53 - 2015-04-17 21:53 - 00001833 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2015-04-17 21:53 - 2015-04-17 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-04-17 21:53 - 2015-04-17 21:52 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe 2015-04-17 21:53 - 2015-04-17 21:52 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00057888 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswTdi.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00055200 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2015-04-17 21:53 - 2015-04-17 21:52 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2015-04-17 21:52 - 2015-04-17 21:52 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr 2015-04-17 21:51 - 2015-04-17 21:51 - 00000000 ____D () C:\Program Files\AVAST Software 2015-04-17 21:50 - 2015-04-17 21:50 - 00000000 ____D () C:\ProgramData\AVAST Software 2015-04-17 21:34 - 2015-04-17 21:34 - 00000769 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk 2015-04-17 21:34 - 2014-02-25 00:00 - 00342528 _____ (Seiko Epson Corporation) C:\Windows\system32\esw2ud.dll 2015-04-17 21:34 - 2012-05-17 00:00 - 00126128 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc.exe 2015-04-17 17:56 - 2015-04-17 17:56 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Avira 2015-04-17 17:55 - 2015-04-17 17:55 - 00001809 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk 2015-04-17 17:55 - 2015-04-17 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-04-17 17:55 - 2015-03-24 14:59 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-04-17 17:55 - 2015-03-24 14:59 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-04-17 17:55 - 2015-03-24 14:59 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-04-17 17:28 - 2015-04-17 17:28 - 00000000 ____D () C:\OETemp 2015-04-14 21:52 - 2015-04-14 21:52 - 00000000 ____D () C:\Users\PC\Desktop\KVART-Bilder 2015-04-14 21:26 - 2015-04-16 04:17 - 00000000 ____D () C:\Users\PC\{8680f3f1-d5a4-4f00-bcba-04d3bbe2ac43} 2015-04-12 20:54 - 2015-04-12 20:54 - 00000000 ____D () C:\ProgramData\BitDefender 2015-04-12 20:51 - 2015-01-06 12:47 - 00842368 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00179560 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00161544 _____ (BitDefender) C:\Windows\system32\httproxy.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00136824 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00135288 _____ () C:\Windows\system32\bdfwcore.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00110568 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00086896 _____ (BitDefender) C:\Windows\system32\bdpredir.dll 2015-04-12 20:51 - 2015-01-06 12:37 - 01516488 _____ (Bitdefender) C:\Windows\system32\bdnc.dll 2015-04-12 20:50 - 2015-04-21 19:01 - 00002224 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2015-04-12 20:50 - 2015-04-12 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2015-04-12 20:49 - 2015-04-12 20:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-04-12 20:48 - 2015-04-12 20:48 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Lavasoft 2015-04-12 20:48 - 2015-04-12 20:48 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft 2015-04-12 20:47 - 2015-04-12 20:47 - 00000000 ____D () C:\Users\PC\AppData\Local\Lavasoft 2015-04-08 18:41 - 2015-04-08 18:41 - 00000000 ____D () C:\Program Files\Mozilla Firefox ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-21 19:16 - 2010-04-23 08:23 - 00000000 ____D () C:\Users\PC 2015-04-21 19:11 - 2015-02-25 19:11 - 00000917 _____ () C:\Windows\Tasks\EPSON XP-225 Series Update {1998D3F2-57DE-4F62-A20D-6554C0D76ED6}.job 2015-04-21 19:05 - 2013-06-19 17:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-21 19:05 - 2010-04-23 07:58 - 01827694 _____ () C:\Windows\WindowsUpdate.log 2015-04-21 19:03 - 2010-05-02 19:06 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-04-21 19:03 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-21 19:02 - 2006-11-02 15:01 - 00032534 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-04-21 19:01 - 2010-07-28 14:00 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Skype 2015-04-21 19:01 - 2010-05-02 19:06 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-04-21 18:56 - 2006-11-02 14:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-21 18:56 - 2006-11-02 14:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-19 16:23 - 2013-02-18 20:50 - 00000000 ____D () C:\Users\PC\Desktop\Minos Belegungkopien !!!!!!(Malteser) 2015-04-19 16:08 - 2010-08-01 17:59 - 00012772 _____ () C:\Users\PC\AppData\Roaming\wklnhst.dat 2015-04-19 15:50 - 2010-05-04 15:47 - 00000000 ____D () C:\Users\PC\Documents\Conny2 2015-04-19 15:42 - 2014-02-07 12:34 - 00000384 _____ () C:\Windows\Tasks\Ad-Aware Update (Weekly).job 2015-04-19 14:33 - 2013-03-28 12:46 - 00000022 _____ () C:\Users\PC\AppData\Local\cmdial32.ini 2015-04-17 21:52 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Sidebar 2015-04-17 21:35 - 2015-02-25 19:08 - 00000933 _____ () C:\Users\Public\Desktop\EPSON-Handbücher.lnk 2015-04-17 21:35 - 2015-02-25 19:08 - 00000123 _____ () C:\Users\Public\Desktop\Epson Connect Site.url 2015-04-17 21:34 - 2015-02-25 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON 2015-04-17 21:34 - 2015-02-25 19:06 - 00000000 ____D () C:\Program Files\epson 2015-04-17 21:34 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\twain_32 2015-04-17 21:22 - 2015-02-25 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software 2015-04-17 21:22 - 2015-02-25 19:07 - 00000000 ____D () C:\Program Files\EPSON Software 2015-04-17 21:22 - 2007-05-07 00:43 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-04-17 17:55 - 2013-08-05 17:57 - 00000000 ____D () C:\ProgramData\Avira 2015-04-17 17:34 - 2014-02-07 19:03 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection 2015-04-17 17:31 - 2011-07-05 10:44 - 00000000 ____D () C:\Program Files\Avira 2015-04-17 17:28 - 2014-08-24 13:33 - 00000000 ____D () C:\ProgramData\Package Cache 2015-04-16 04:17 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool 2015-04-16 04:17 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc 2015-04-16 04:17 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration 2015-04-16 04:17 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-04-16 04:17 - 2006-11-02 12:22 - 50593792 _____ () C:\Windows\system32\config\software_previous 2015-04-16 04:17 - 2006-11-02 12:22 - 23855104 _____ () C:\Windows\system32\config\system_previous 2015-04-16 04:04 - 2006-11-02 12:22 - 46399488 _____ () C:\Windows\system32\config\components_previous 2015-04-16 04:04 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous 2015-04-15 18:02 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default_previous 2015-04-15 18:02 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous 2015-04-14 21:01 - 2015-02-25 19:49 - 00000000 ____D () C:\Users\PC\AppData\Roaming\EPSON 2015-04-14 21:01 - 2015-02-25 19:01 - 00000000 ____D () C:\ProgramData\Epson 2015-04-13 14:25 - 2006-11-02 12:33 - 02244156 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-12 20:49 - 2010-04-27 22:14 - 00000000 ____D () C:\Program Files\Lavasoft 2015-04-12 20:02 - 2010-04-27 22:14 - 00000000 ____D () C:\ProgramData\Lavasoft 2015-04-10 17:58 - 2012-05-05 21:02 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2015-04-01 17:46 - 2010-07-23 10:55 - 00007484 _____ () C:\Users\PC\AppData\Local\d3d9caps.dat 2015-03-24 14:59 - 2014-11-07 17:36 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys ==================== Files in the root of some directories ======= 2010-08-01 17:59 - 2015-04-19 16:08 - 0012772 _____ () C:\Users\PC\AppData\Roaming\wklnhst.dat 2010-05-04 18:22 - 2009-08-27 11:09 - 0013264 _____ (Arcor Online GmbH) C:\Users\PC\AppData\Local\cmdial32.dll 2013-03-28 12:46 - 2015-04-19 14:33 - 0000022 _____ () C:\Users\PC\AppData\Local\cmdial32.ini 2010-07-23 10:55 - 2015-04-01 17:46 - 0007484 _____ () C:\Users\PC\AppData\Local\d3d9caps.dat 2010-04-23 09:34 - 2013-11-21 00:08 - 0136704 _____ () C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2009-06-16 14:25 - 2009-06-16 14:25 - 0121512 ____R () C:\ProgramData\DeviceManager.xml.rc4 2010-07-28 15:20 - 2010-07-28 15:20 - 0000056 ____H () C:\ProgramData\ezsidmv.dat Some content of TEMP: ==================== C:\Users\PC\AppData\Local\Temp\avgnt.exe Some zero byte size files/folders: ========================== C:\Windows\System32\NTIBUN5.dll C:\Windows\System32\NTIDIB4.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-21 19:05 ==================== End Of Log ============================ Das hat anscheinend geklappt. Nun Das nächste. Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-04-2015 Ran by PC at 2015-04-21 19:23:22 Running from C:\Users\PC\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Ad-Aware Antivirus (Enabled - Up to date) {D87B6541-12A1-DAEA-0033-9B8057AAB996} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Ad-Aware Antivirus (Enabled - Up to date) {631A84A5-349B-D564-3A83-A0F22C2DF32B} AS: Avira Antivirus (Enabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acer Arcade Live Main Page (HKLM\...\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}) (Version: 1.0.4010 - Acer Inc.) Acer DV Magician (HKLM\...\{F6EFFB76-4A07-11DA-9D78-000129760D75}) (Version: 1.2.2810 - Acer Inc.) Acer DVDivine (HKLM\...\{B145EC69-66F5-11D8-9D75-000129760D75}) (Version: 3.1.1610 - Acer Inc.) Acer eDataSecurity Management (HKLM\...\{AEEAE013-92F1-4515-B278-139F1A692A36}) (Version: 2.5.3032 - HiTRUST Inc.) Acer Empowering Technology (HKLM\...\{AB6097D9-D722-4987-BD9E-A076E2848EE2}) (Version: 2.5.3005 - Acer Inc.) Acer ePerformance Management (HKLM\...\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}) (Version: 2.5.3002 - Acer Inc.) Acer HomeMedia (HKLM\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 1.3.4010 - Acer Inc.) Acer HomeMedia Connect (HKLM\...\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}) (Version: 1.4.4010 - Acer Inc.) Acer PlayMovie (HKLM\...\{A450831D-25F6-4F42-9662-D000B25E0D82}) (Version: DVD 1.5.3317 - Acer Inc.) Acer ScreenSaver (HKLM\...\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}) (Version: 4.01.20070419 - Acer Inc.) Acer SlideShow DVD (HKLM\...\{41581EF5-45A7-11DA-9D78-000129760D75}) (Version: 1.2.2810 - Acer Inc.) Acer Tour (HKLM\...\{94389919-B0AA-4882-9BE8-9F0B004ECA35}) (Version: 2.0.1001 - Acer Inc.) Acer VideoMagician (HKLM\...\{F79A208D-D929-11D9-9D77-000129760D75}) (Version: 1.3.1610 - Acer Inc.) Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden Ad-Aware Antivirus (HKLM\...\{35CC81F8-F385-4B79-91A8-3163420F5D01}_AdAwareUpdater) (Version: 11.6.306.7947 - Lavasoft) Ad-Aware Browsing Protection (HKLM\...\Ad-Aware Browsing Protection) (Version: 1.0.1.124 - Lavasoft) AdAwareInstaller (Version: 11.6.306.7947 - Lavasoft) Hidden AdAwareUpdater (Version: 11.6.306.7947 - Lavasoft) Hidden Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader X (10.1.4) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated) ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden AntimalwareEngine (Version: 3.0.98.0 - Lavasoft) Hidden AntispamEngine (Version: 2.4.2158.0 - Lavasoft) Hidden Ask Shopping Toolbar (HKLM\...\{4F524A00-6A76-A76A-76A7-A758B70C1B00}) (Version: 12.27.0.136 - APN, LLC) <==== ATTENTION ATI Catalyst Install Manager (HKLM\...\{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}) (Version: 3.0.641.0 - ATI Technologies, Inc.) Avast Free Antivirus (HKLM\...\Avast) (Version: 10.2.2215 - AVAST Software) AvcEngine (Version: 3.10.7820.0 - Lavasoft) Hidden Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG) ccc-core-static (Version: 2007.0727.2307.39475 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform) Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform) Deinstallation der Arcor Online Software (HKLM\...\{262DA23B-4BAB-463F-B1DC-9B5287CAB5CA}}_is1) (Version: 5.0.0.7 - Vodafone AG & Co. KG) Elevated Installer (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION) eSobi v2 (HKLM\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.1.00133 - esobi Inc.) eSobi v2 (Version: 2.0.1.00133 - esobi Inc.) Hidden FirewallEngine (Version: 1.6.0.0 - Lavasoft) Hidden FreeCommander 2009.02a (HKLM\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski) Garmin Express (HKLM\...\{714dc1e5-69a4-4ecd-9552-93397e084298}) (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Garmin Express (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (Version: 3.2.29.0 - Garmin Ltd or its subsidiaries) Hidden Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden Hama Wireless LAN Adapter (HKLM\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama) Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) LightScribe 1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden MATLAB 6.1 (HKLM\...\Matlab 6.1) (Version: - ) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Access 2003 Runtime (HKLM\...\{901C0407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM\...\{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}) (Version: 08.05.0822 - Microsoft Corporation) Mozilla Firefox 37.0.1 (x86 de) (HKLM\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyEpson Portal (HKLM\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation) MyEpson Portal (Version: 1.1.1.0 - SEIKO EPSON CORPORATION) Hidden NTI CD & DVD-Maker (HKLM\...\InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}) (Version: 7 - NewTech Infosystems) NTI CD & DVD-Maker (Version: 7 - NewTech Infosystems) Hidden OnlineThreatsEngine (Version: 2.2.3.0 - Lavasoft) Hidden PDF24 Creator 2.9.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.0.2 - Frank Heindörfer, Philip Chinery) PhotoShow Deluxe 3 (HKLM\...\PhotoShow Deluxe 3) (Version: 3.0 - Simple Star, Inc.) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5449 - Realtek Semiconductor Corp.) RStudio (HKLM\...\RStudio) (Version: 0.96.122 - RStudio) Skins (Version: 2007.0727.2307.39475 - ATI) Hidden Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 7.1 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.) Software Updater (HKLM\...\{E07D7C7B-F424-4EEF-BA17-B2C32BD1C107}) (Version: 4.3.0 - SEIKO EPSON CORPORATION) Ulead Photo Explorer 8.0 SE Basic (HKLM\...\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}) (Version: 8.0 - Ulead Systems, Inc.) Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation) VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN) Vodafone Mobile Connect Lite (HKLM\...\{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}) (Version: 9.4.3.17550 - Vodafone) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) WinRAR (HKLM\...\WinRAR archiver) (Version: - ) XMedia Recode 3.0.9.0 (HKLM\...\XMedia Recode) (Version: 3.0.9.0 - Sebastian Dörfler) Yahoo! Detect (HKLM\...\YTdetect) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 11-02-2015 14:49:19 Windows Update 25-02-2015 19:04:25 Gerätetreiber-Paketinstallation: EPSON Drucker 25-02-2015 19:06:54 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte 25-02-2015 19:31:08 Installed Epson Event Manager 25-02-2015 19:32:40 Microsoft Visual C++ 2005 Redistributable wird installiert 02-03-2015 15:14:15 Geplanter Prüfpunkt 12-03-2015 23:10:08 Windows Update 15-03-2015 21:15:56 Garmin Express 15-03-2015 21:18:10 Gerätetreiber-Paketinstallation: Silicon Labs Software USB-Controller 15-03-2015 21:18:24 Gerätetreiber-Paketinstallation: Dynastream Innovations, Inc. 15-03-2015 21:25:45 Gerätetreiber-Paketinstallation: Garmin 12-04-2015 19:57:36 AA11 12-04-2015 20:00:18 Removed Ad-Aware Email Scanner for Outlook 12-04-2015 20:47:43 AA11 14-04-2015 21:26:23 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte 15-04-2015 17:14:00 Windows Update 16-04-2015 20:54:30 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte 17-04-2015 21:21:06 Removed Epson Event Manager 17-04-2015 21:24:54 Removed EPSON-Handbücher 17-04-2015 21:34:21 Gerätetreiber-Paketinstallation: EPSON Bildverarbeitungsgeräte 17-04-2015 21:50:53 avast! antivirus system restore point ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {01F873FD-DBFC-4914-A78E-3EA27EE57B72} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-17] (Avast Software s.r.o.) Task: {0FFB412A-789D-41F7-A020-22BED43C2CDE} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - PC => C:\Program Files\Windows Calendar\wincal.exe [2009-04-11] (Microsoft Corporation) Task: {5E11F64D-FA3F-4F2E-ACDF-A5B6EA87FB70} - System32\Tasks\{C6CF873A-5216-48DE-9610-54255BB498AA} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome ![]() Task: {6E26C868-244B-42AA-B7DB-7A74943D9A80} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.) Task: {757ECA8F-1DC6-41C0-8466-ADC6EB871090} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.) Task: {8292E78D-0D56-4BC6-B44F-FA7D0DE28784} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Task: {99E66413-1514-444E-A589-4C5EE4C1F729} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd) Task: {CF7E7F1E-8DEC-4C65-8CAB-142ED37912F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-09] (Adobe Systems Incorporated) Task: {DBB515A2-3C3F-44EA-923E-9C5DCCDC23F0} - System32\Tasks\{C071448A-256F-42A6-A988-451B0C71FB44} => C:\Program Files\Skype\Phone\Skype.exe [2015-01-23] (Skype Technologies S.A.) Task: {DBD8FFD0-8265-4BB5-827C-F7E02D5F3D58} - System32\Tasks\EPSON XP-225 Series Update {1998D3F2-57DE-4F62-A20D-6554C0D76ED6} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TTSNFE.EXE [2013-11-21] (SEIKO EPSON CORPORATION) Task: {F16221F9-80CF-4CFF-A71B-18B955868D5F} - System32\Tasks\{BAFC7D74-7200-4171-BB8B-C5E19AD6C87D} => Firefox.exe hxxp://ui.skype.com/ui/0/7.2.0.103/de/abandoninstall?page=tsMain Task: {FFB0C5E0-8051-47B2-891C-317D3CBB27D6} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2015-01-28] () (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\EPSON XP-225 Series Update {1998D3F2-57DE-4F62-A20D-6554C0D76ED6}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TTSNFE.EXE:/EXE:{1998D3F2-57DE-4F62-A20D-6554C0D76ED6} /F:UpdateSYSTEM Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2007-02-06 23:52 - 2007-02-06 23:52 - 00063488 _____ () C:\Windows\system32\ShowErrMsg.dll 2007-02-06 23:56 - 2007-02-06 23:56 - 00028672 _____ () C:\Windows\system32\BatchCrypto.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 02563592 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareShellExtension.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 02423264 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\RCF.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00110104 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_filesystem-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00022032 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_system-vc100-mt-1_57.dll 2010-04-28 00:03 - 2009-08-16 17:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll 2007-05-07 01:07 - 2007-01-24 10:27 - 00319488 _____ () C:\Acer\Empowering Technology\SysMonitor.exe 2010-12-05 12:50 - 2009-04-11 08:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 08216048 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe 2015-03-10 18:49 - 2015-03-10 18:49 - 00048152 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_date_time-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00090128 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_thread-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00029712 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_chrono-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00405520 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_locale-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 01632248 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\HtmlFramework.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00870408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTrayDefaultSkin.dll 2015-04-17 21:52 - 2015-04-17 21:52 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-04-17 21:52 - 2015-04-17 21:52 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-04-17 21:52 - 2015-04-17 21:52 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2007-05-07 01:11 - 2007-04-04 18:54 - 00200812 _____ () C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe 2007-05-07 01:07 - 2007-01-24 10:27 - 00057344 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll 2007-05-07 01:07 - 2007-01-24 10:27 - 00024576 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll 2010-04-23 09:19 - 2007-01-31 18:18 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\ServiceInterface.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00045056 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Plugin.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00024576 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Presenter.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00020480 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.Interface.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00028672 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00040960 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Library.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00016384 _____ () C:\Acer\Empowering Technology\MemCheck.Interface.dll 2007-05-07 01:08 - 2006-12-29 17:52 - 00003584 _____ () C:\Acer\Empowering Technology\ePerformance\de\ePerformance.Plugin.resources.dll 2007-05-07 01:08 - 2006-12-29 17:51 - 00028672 _____ () C:\Acer\Empowering Technology\ePerformance\MemCheck.exe 2007-05-07 01:08 - 2006-12-29 17:51 - 00016384 _____ () C:\Acer\Empowering Technology\ePerformance\MemCheck.Interface.dll 2015-03-10 18:47 - 2015-03-10 18:47 - 00670808 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe 2015-03-10 18:49 - 2015-03-10 18:49 - 10575360 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareServiceKernel.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00634896 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_regex-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00592896 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareActivation.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00415760 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareApplicationUpdater.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00640512 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareGamingMode.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00087536 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareReset.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00104944 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTime.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00770064 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareDefinitionsUpdater.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00692768 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareDefinitionsUpdaterScheduler.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00866304 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareIgnoreList.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00217600 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareQuarantine.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00806408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareAntiMalwareEngine.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00182280 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareAntiRootkitEngine.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00873480 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareScannerHistory.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 01019896 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareScanner.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00030224 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_timer-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00769544 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareScannerScheduler.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00897040 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareRealTimeProtection.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00194048 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareIncompatibles.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00711672 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareAntiSpam.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00677376 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareAntiPhishing.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 02370056 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareParentalControl.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 02667008 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareWebProtection.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 01013768 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareEmailProtection.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00046616 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\boost_iostreams-vc100-mt-1_57.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00998408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareNetworkProtection.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00766960 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwarePromo.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00304632 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareFeedback.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 02125840 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareThreatWorkAlliance.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00973304 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwarePinCode.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00767480 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareNotice.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00767480 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareAvcEngine.dll 2015-03-10 18:49 - 2015-03-10 18:49 - 00928280 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareRealTimeProtectionHistory.dll 2015-04-12 20:51 - 2015-01-06 12:47 - 00135288 _____ () C:\Windows\system32\bdfwcore.dll 2015-04-12 20:51 - 2015-04-20 16:27 - 00681712 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Online Threats Engine\2.2.3.0\definitions\loc2\ashttpbr.mdl 2015-04-12 20:51 - 2015-04-20 16:27 - 00602384 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Online Threats Engine\2.2.3.0\definitions\loc2\ashttpdsp.mdl 2015-04-12 20:51 - 2015-04-20 16:27 - 02206600 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Online Threats Engine\2.2.3.0\definitions\loc2\ashttpph.mdl 2015-04-12 20:51 - 2015-04-20 16:27 - 01130280 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Online Threats Engine\2.2.3.0\definitions\loc2\ashttprbl.mdl 2007-05-07 01:12 - 2007-04-09 18:29 - 00143360 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2010-04-23 09:19 - 2007-01-31 18:18 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\IERYETF.dll 2010-04-23 09:19 - 2006-12-14 16:00 - 00081920 _____ () C:\Acer\Empowering Technology\eRecovery\INT15.dll 2010-04-23 16:53 - 2007-07-27 23:26 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll 2015-04-21 19:14 - 2015-04-21 19:14 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1859551519-956376940-1599385416-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\PC\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-1859551519-956376940-1599385416-500 - Administrator - Disabled) Gast (S-1-5-21-1859551519-956376940-1599385416-501 - Limited - Disabled) PC (S-1-5-21-1859551519-956376940-1599385416-1000 - Administrator - Enabled) => C:\Users\PC ==================== Faulty Device Manager Devices ============= Name: PS/2-kompatible Maus Description: PS/2-kompatible Maus Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (04/21/2015 07:03:19 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (EventID: 1031) (User: NT-AUTORITÄT) Description: 0x80072afb Error: (04/21/2015 07:01:18 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (EventID: 1031) (User: NT-AUTORITÄT) Description: 0x80072afb Error: (04/21/2015 07:01:07 PM) (Source: matlabserver) (EventID: 0) (User: ) Description: matlabserver error: 0Engine wait timeout 180 reached for instance 0. Error: (04/21/2015 06:58:12 PM) (Source: VMCService) (EventID: 0) (User: ) Description: conflictManagerTypeValue Error: (04/21/2015 06:58:05 PM) (Source: matlabserver) (EventID: 0) (User: ) Description: matlabserver error: 0EngOpen() WORKER_THREAD_PROC failed. Error: (04/21/2015 06:57:04 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (EventID: 1031) (User: NT-AUTORITÄT) Description: 0x80072afb Error: (04/21/2015 06:44:10 PM) (Source: matlabserver) (EventID: 0) (User: ) Description: matlabserver error: 0Engine wait timeout 180 reached for instance 0. Error: (04/21/2015 06:41:11 PM) (Source: VMCService) (EventID: 0) (User: ) Description: conflictManagerTypeValue Error: (04/21/2015 06:41:08 PM) (Source: matlabserver) (EventID: 0) (User: ) Description: matlabserver error: 0EngOpen() WORKER_THREAD_PROC failed. Error: (04/21/2015 06:40:05 PM) (Source: Microsoft-Windows-SpoolerSpoolss) (EventID: 1031) (User: NT-AUTORITÄT) Description: 0x80072afb System errors: ============= Error: (04/21/2015 07:04:50 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: 1Neustart des DienstsRAS-Verbindungsverwaltung%%1056 Error: (04/21/2015 07:04:50 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: 1Neustart des DienstsWindows-Verwaltungsinstrumentation%%1056 Error: (04/21/2015 07:01:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Druckwarteschlange2600001Neustart des Diensts Error: (04/21/2015 07:01:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Avast Antivirus3 Error: (04/21/2015 07:01:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: MATLAB Server1 Error: (04/21/2015 07:00:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Avast Antivirus250001Neustart des Diensts Error: (04/21/2015 06:59:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Avast Antivirus150001Neustart des Diensts Error: (04/21/2015 06:59:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Lbd Error: (04/21/2015 06:59:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Druckwarteschlange1600001Neustart des Diensts Error: (04/21/2015 06:58:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Garmin Core Update Service%%1053 Microsoft Office Sessions: ========================= Error: (12/02/2010 08:00:58 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 44 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/02/2010 07:53:19 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 531 seconds with 180 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ Percentage of memory in use: 60% Total physical RAM: 3326.58 MB Available physical RAM: 1327.68 MB Total Pagefile: 6887.15 MB Available Pagefile: 4569.57 MB Total Virtual: 2047.88 MB Available Virtual: 1881.86 MB ==================== Drives ================================ Drive c: (ACER) (Fixed) (Total:229.13 GB) (Free:142.6 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (DATA) (Fixed) (Total:228.82 GB) (Free:195.86 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: A9E4F6A8) Partition 1: (Not Active) - (Size=7.8 GB) - (Type=27) Partition 2: (Active) - (Size=229.1 GB) - (Type=06) Partition 3: (Not Active) - (Size=228.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Ja wer sagts denn, ob das mit GMER auch klappt Also ich habe die Logdate auf dem Desktop gespeichert, sie läßt sich aber nicht hierhin kopieren wie das mit den anderen geklappt hat. Ich bekomme die meldung: Diese Datei kann nicht geöffnet werden ....usw. Jetzt hoffe ich, Ihr könnt damit schon mal was anfangen Schönen Abend noch. Gruß mannivo |
Themen zu Virus eingefangen |
ad-aware, antivirus, avira, browser, datei kann nicht geöffnet werden, desktop, email, error, firefox, flash player, helper, home, homepage, installation, mozilla, popup, problem, realtek, registry, software, svchost.exe, system, updates, virus, vista, windows |