| |
| |||||||
Alles rund um Windows: Mozilla schließt sich einfach nach einer gewissen ZeitWindows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
 |
08.05.2015, 15:34
| #1 | |
| |  Problem: Mozilla schließt sich einfach nach einer gewissen Zeit Mozilla schließt sich einfach ohne erkennbaren Grund Während ich arbeite schließen sich alle tabs wie von selbst ohne das ich sie geschlossen habe ! Soll ich Mozilla löschen und neu installieren ? FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01
Ran by Admin (administrator) on ADMIN-838B797B5 on 08-05-2015 16:22:14
Running from C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Downloads
Loaded Profiles: Admin (Available profiles: Admin)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ArcSoft Inc.) C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
() C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe
() C:\Programme\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Programme\ASUS\ATK Hotkey\HControl.exe
(Motorola Inc.) C:\WINDOWS\sm56hlpr.exe
(Advanced Micro Devices Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(SEIKO EPSON CORPORATION) C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
(ArcSoft Inc.) C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ArcSoft Inc.) C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ArcCon.ac
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Cyberlink Corp.) C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(CyberLink) C:\Programme\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\avastui.exe
(CyberLink Corp.) C:\Programme\CyberLink\Power2Go8\Power2GoExpress8.exe
(AVM Berlin) C:\Programme\FRITZ!DSL\IGDCTRL.EXE
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
() C:\Programme\CyberLink\Shared Files\RichVideo.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ASUS) C:\Programme\ASUS\ATK Hotkey\ATKOSD.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
() C:\Programme\ASUS\ATK Hotkey\WDC.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [18789408 2009-12-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [MsgTranAgt] => C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe [106496 2007-11-04] ()
HKLM\...\Run: [HControlUser] => C:\Programme\ASUS\ATK Hotkey\HControlUser.exe [98304 2008-01-11] ()
HKLM\...\Run: [ATKHOTKEY] => C:\Programme\ASUS\ATK Hotkey\HControl.exe [217088 2008-06-26] (ASUS)
HKLM\...\Run: [SMSERIAL] => C:\WINDOWS\sm56hlpr.exe [544768 2009-12-14] (Motorola Inc.)
HKLM\...\Run: [StartCCC] => C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [EEventManager] => C:\Programme\Epson Software\Event Manager\EEventManager.exe [673616 2009-04-07] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [ArcSoft Connection Service] => C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [UpdateLBPShortCut] => C:\Programme\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2008-02-21] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] => C:\Programme\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-17] (CyberLink Corp.)
HKLM\...\Run: [RemoteControl] => C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [87336 2008-04-02] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Programme\CyberLink\PowerDVD\Language\Language.exe [62760 2008-02-22] ()
HKLM\...\Run: [UpdatePPShortCut] => C:\Programme\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer_For_P2G8] => C:\Programme\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [107816 2011-10-28] (CyberLink)
HKLM\...\Run: [CLVirtualDrive] => C:\Programme\CyberLink\Power2Go8\VirtualDrive.exe [485672 2012-01-06] (CyberLink Corp.)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Programme\AVAST Software\Avast\AvastUI.exe [5227648 2015-03-30] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-12-14] (ATI Technologies Inc.)
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\...\Run: [Power2GoExpress8] => C:\Programme\CyberLink\Power2Go8\Power2GoExpress8.exe [1696552 2012-01-06] (CyberLink Corp.)
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\sstext3d.scr [684032 2008-04-14] (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\Admin\Startmenü\Programme\Autostart\CCC.lnk [2009-12-14]
ShortcutTarget: CCC.lnk -> C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Programme\AVAST Software\Avast\ashShell.dll [2014-11-25] (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.google.com" <======= ATTENTION
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://Vosteran.com/?f=2&a=vst_ggbc_14_50_ff&cd=2XzuyEtN2Y1L1QzutDtDtC0Ezz0CyB0E0BtDzzyC0B0CyC0DtN0D0Tzu0StCtDyBzztN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyB0FyD0E0DzzyEyDtG0A0DtC0BtGtBtAyCtDtGtBtC0DtBtGyCyEyB0BtD0FtAtAtDyB0B0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FyCtDtByEtCyEtDtGtB0B0CtDtGyEyDtCyDtG0A0EyEzztGyBzz0F0D0Ezy0DtA0D0ByBtB2Q&cr=907265812&ir=" <======= ATTENTION
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-343818398-1220945662-1801674531-1004 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre1.8.0_31\bin\ssv.dll [2015-03-02] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Programme\AVAST Software\Avast\aswWebRepIE.dll [2014-11-25] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-03-02] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-343818398-1220945662-1801674531-1004 -> No Name - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No File
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll [2014-03-06] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll [2014-03-06] (Microsoft Corporation)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [152864 2010-10-07] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Mozilla\Firefox\Profiles\l1257xus.default-1431024084390
FF Homepage: hxxp://www.allessuche.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Programme\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-03-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-03-02] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Programme\Microsoft Silverlight\5.1.30514.0\npctrl.dll No File
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Programme\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Programme\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Programme\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Programme\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Programme\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-343818398-1220945662-1801674531-1004: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\npFacebookVideoCalling.dll [2012-10-12] (Skype Limited)
FF Plugin HKU\S-1-5-21-343818398-1220945662-1801674531-1004: @unity3d.com/UnityPlayer,version=1.0 -> C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-07] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npmidas.dll [2009-03-18] (Midasplayer Ltd)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-05-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Programme\AVAST Software\Avast\WebRep\FF [2012-07-23]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Programme\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-25]
CHR HKLM\...\Chrome\Extension: [obdlfebkcikbbhhnpmabhadfhgfjcemn] - C:\Dokumente und Einstellungen\Admin\Webgears\Chrome\Gutscheinsammler\gutscheinsammler-finder-2.0-chrome.crx [2011-11-09]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ACDaemon; C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664 2011-01-05] (Apple Inc.)
R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-25] (AVAST Software)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [345376 2010-10-07] (Apple Inc.)
R2 IGDCTRL; C:\Programme\FRITZ!DSL\IGDCTRL.EXE [87344 2007-09-04] (AVM Berlin)
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182696 2015-01-30] (Oracle Corporation)
R2 LightScribeService; C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe [73728 2010-01-22] (Hewlett-Packard Company) [File not signed]
S2 MBAMService; C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [148080 2015-04-21] (Mozilla Foundation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 RichVideo; C:\Programme\CyberLink\Shared Files\RichVideo.exe [244904 2010-09-15] () [File not signed]
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [315488 2015-02-18] (Skype Technologies)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Afc; C:\WINDOWS\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1309504 2009-12-14] (Atheros Communications, Inc.)
R3 ASNDIS5; C:\Programme\ASUS\ATK Hotkey\ASNDIS5.SYS [16269 2004-05-27] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-25] ()
R1 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [24408 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-25] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-25] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-25] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-25] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-11-25] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-25] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-25] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 CLVirtualDrive; C:\WINDOWS\System32\DRIVERS\CLVirtualDrive.sys [73328 2011-12-26] (CyberLink)
S3 DCamUSBET; C:\WINDOWS\System32\DRIVERS\etDevice.sys [474624 2009-12-14] (eMPIA Technology, Inc.) [File not signed]
S3 FiltUSBET; C:\WINDOWS\System32\DRIVERS\etFilter.sys [206464 2009-12-14] (eMPIA Technology Inc.) [File not signed]
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [7680 2009-12-14] (ATK0100)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 ScanUSBET; C:\WINDOWS\System32\DRIVERS\etScan.sys [6528 2009-12-14] (eMPIA Technology, Inc.) [File not signed]
R3 SiSGbeXP; C:\WINDOWS\System32\DRIVERS\SiSGbeXP.sys [43392 2008-03-03] (Silicon Integrated Systems Corp.)
S3 AVFSFilter; system32\DRIVERS\avfsfilter.sys [X]
S3 catchme; \??\C:\DOKUME~1\Admin\LOKALE~1\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Programme\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 HSPADataCardusbmdm; system32\DRIVERS\HSPADataCardusbmdm.sys [X]
S3 HSPADataCardusbnmea; system32\DRIVERS\HSPADataCardusbnmea.sys [X]
S3 HSPADataCardusbser; system32\DRIVERS\HSPADataCardusbser.sys [X]
S4 IntelIde; No ImagePath
S3 massfilter; system32\DRIVERS\massfilter.sys [X]
U3 TlntSvr; No ImagePath
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnet; system32\DRIVERS\ZTEusbnet.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]
S3 ZTEusbvoice; system32\DRIVERS\ZTEusbvoice.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-08 16:22 - 2015-05-08 16:22 - 00000000 ____D () C:\FRST
2015-05-07 19:15 - 2015-05-07 19:15 - 00000000 ____D () C:\RegBackup
2015-05-07 19:14 - 2015-05-07 19:15 - 00000944 _____ () C:\Dokumente und Einstellungen\Admin\Desktop\Rkill.txt
2015-05-07 19:03 - 2015-05-08 16:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\temp
2015-05-07 19:03 - 2015-05-07 19:03 - 00012898 _____ () C:\ComboFix.txt
2015-05-07 19:03 - 2015-05-07 19:03 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\temp
2015-05-07 19:03 - 2015-05-07 19:03 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\temp
2015-05-07 18:50 - 2015-05-07 19:03 - 00000000 ____D () C:\Qoobox
2015-05-07 18:50 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2015-05-07 18:50 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2015-05-07 18:50 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2015-05-07 18:50 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2015-05-07 18:49 - 2015-05-07 18:47 - 05621999 ____R (Swearware) C:\Dokumente und Einstellungen\Admin\Eigene Dateien\ComboFix.exe
2015-05-03 11:28 - 2015-05-03 16:38 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Jehovas liebevolle Hilfe
2015-04-21 16:51 - 2015-05-07 20:34 - 00000000 ____D () C:\Programme\Mozilla Firefox
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-08 16:05 - 2012-05-14 07:59 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-08 15:57 - 2009-12-12 12:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Eigene Bilder
2015-05-08 15:56 - 2009-12-15 10:59 - 00000000 ____D () C:\WINDOWS\Minidump
2015-05-08 15:56 - 2009-12-12 12:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin
2015-05-08 15:55 - 2009-12-14 11:57 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2015-05-08 15:53 - 2012-07-23 11:18 - 00000356 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-05-08 15:48 - 2009-12-12 12:16 - 01056772 ____N () C:\WINDOWS\WindowsUpdate.log
2015-05-08 15:47 - 2009-12-12 12:09 - 00000050 ____N () C:\WINDOWS\wiaservc.log
2015-05-08 15:46 - 2014-03-27 12:20 - 00000222 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Benachrichtigung – Anmeldung.job
2015-05-08 15:46 - 2011-11-09 07:27 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Startmenü\Programme\CyberLink DVD Suite
2015-05-08 15:46 - 2009-12-12 12:21 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-08 15:46 - 2009-12-12 12:09 - 00000159 ____N () C:\WINDOWS\wiadebug.log
2015-05-08 15:45 - 2009-12-14 12:18 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2015-05-08 15:45 - 2009-12-12 12:20 - 00032384 ____N () C:\WINDOWS\SchedLgU.Txt
2015-05-08 15:44 - 2009-12-12 12:23 - 00000300 ___SH () C:\Dokumente und Einstellungen\Admin\ntuser.ini
2015-05-08 15:01 - 2015-01-11 23:48 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\2015 Gedichte
2015-05-08 15:00 - 2014-03-27 12:20 - 00000216 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2015-05-08 14:21 - 2011-03-04 15:21 - 00000232 _____ () C:\WINDOWS\Tasks\Epson Printer Software Downloader.job
2015-05-08 12:38 - 2015-03-19 11:59 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Gedichte ab März 2015
2015-05-07 20:34 - 2014-05-31 23:38 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2015-05-07 20:32 - 2014-05-31 23:38 - 00000702 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
2015-05-07 20:32 - 2014-05-31 23:38 - 00000696 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2015-05-07 19:44 - 2015-03-22 14:00 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-07 19:44 - 2015-03-22 13:58 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-07 19:44 - 2015-03-22 13:58 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware
2015-05-07 19:44 - 2014-07-22 16:32 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware
2015-05-07 19:08 - 2015-02-17 22:43 - 00000000 ____D () C:\AdwCleaner
2015-05-07 19:00 - 2004-08-04 14:00 - 00000227 _____ () C:\WINDOWS\system.ini
2015-05-07 17:25 - 2010-03-22 19:42 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Skype
2015-05-07 16:24 - 2014-06-13 11:27 - 00002243 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
2015-05-07 16:16 - 2004-08-04 14:00 - 00002422 _____ () C:\WINDOWS\system32\wpa.dbl
2015-05-06 18:20 - 2014-01-31 23:20 - 00015360 ___SH () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Thumbs.db
2015-05-04 18:44 - 2009-12-14 20:16 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2015-05-02 20:43 - 2011-07-02 09:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\vlc
2015-05-02 19:42 - 2011-11-08 20:07 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\dvdcss
2015-05-02 17:03 - 2013-11-26 01:30 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Meine Gedichte
2015-04-30 14:44 - 2009-12-12 12:07 - 00000000 ____D () C:\Programme
2015-04-29 18:50 - 2014-08-16 16:18 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Neue Gedichte ab 2014
2015-04-24 19:12 - 2015-02-24 15:48 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Meine Sonette
2015-04-18 18:41 - 2014-12-22 01:33 - 00000000 ____D () C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Hofdichter
2015-04-16 00:56 - 2013-07-19 14:27 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-16 00:56 - 2009-12-14 12:57 - 125832184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-15 20:31 - 2012-12-11 22:41 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Adobe AIR
2015-04-15 18:05 - 2012-05-14 07:59 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-04-15 18:05 - 2012-05-14 07:59 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-04-14 09:37 - 2015-03-22 13:57 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-04-14 09:37 - 2015-03-22 13:57 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
==================== Files in the root of some directories =======
2011-04-18 16:29 - 2011-04-18 16:29 - 0000043 _____ () C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\1.gif
2011-06-13 20:12 - 2011-06-13 20:13 - 4182178 _____ (The Public) C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Avisynth.exe
2011-06-13 20:15 - 2011-06-13 20:16 - 5243208 _____ ( ) C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\AvsP.exe
2011-06-13 20:14 - 2011-06-13 20:15 - 4284535 _____ (ffdshow ) C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\ffdshow.exe
2011-06-13 20:16 - 2011-06-13 20:17 - 7760687 _____ (Boraxsoft) C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\SetupGFD.exe
2011-04-18 16:50 - 2011-04-18 16:51 - 0000006 _____ () C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\start
2011-06-13 20:14 - 2011-06-13 20:14 - 0642685 _____ (Xvid team ) C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\xvid.exe
2009-12-21 11:45 - 2015-02-25 17:03 - 0136192 _____ () C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\temp\Quarantine.exe
C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End Of Log ============================
--- --- --- --- --- --- Zitat:
Code:
ATTFilter Ran by Admin at 2015-05-08 16:23:20
Running from C:\Dokumente und Einstellungen\Admin\Eigene Dateien\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Admin (S-1-5-21-343818398-1220945662-1801674531-1004 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Admin
Administrator (S-1-5-21-343818398-1220945662-1801674531-500 - Administrator - Enabled)
Gast (S-1-5-21-343818398-1220945662-1801674531-501 - Limited - Disabled)
Hilfeassistent (S-1-5-21-343818398-1220945662-1801674531-1000 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-343818398-1220945662-1801674531-1002 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
7-Zip 9.21 (HKLM\...\{23170F69-40C1-2701-0921-000001000000}) (Version: 9.21.00.0 - Igor Pavlov)
ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 17.0.0.144 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{EE6097DD-05F4-4178-9719-D3170BF098E8}) (Version: 1.4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}) (Version: 3.3.1.3 - Apple Inc.)
ArcSoft MediaImpression (HKLM\...\{9EC9754D-CA34-4293-B5DB-3BD245A88A43}) (Version: 1.5.42.487 - ArcSoft)
ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.008.0422.2138 - )
ATI Catalyst Install Manager (HKLM\...\{0F55F69B-FB6C-5157-A5DC-B8AC58048A1A}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.479-080422a-063915C - )
ATI Parental Control & Encoder (Version: 3.0 - Ihr Firmenname) Hidden
ATK Hotkey (HKLM\...\{7C05592D-424B-46CB-B505-E0013E8E75C9}) (Version: 1.0.0036 - ASUS)
Avast Free Antivirus (HKLM\...\avast) (Version: 10.0.2208 - AVAST Software)
AVM FRITZ!Box Dokumentation (HKLM\...\AVMFBox) (Version: - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM\...\AVMFBoxPrinter) (Version: - AVM Berlin)
AVM FRITZ!DSL (HKLM\...\{2457326B-C110-40C3-89B0-889CC913871A}) (Version: 2.04.02 - AVM Berlin)
Bonjour (HKLM\...\{2A981294-F14C-4F0F-9627-D793270922F8}) (Version: 2.0.4.0 - Apple Inc.)
ccc-Branding (HKLM\...\{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}) (Version: 1.00.0000 - ATI)
ccc-core-preinstall (Version: 2008.0422.2139.36895 - ATI) Hidden
ccc-core-static (Version: 2008.0422.2139.36895 - ATI) Hidden
CCleaner (remove only) (HKLM\...\CCleaner) (Version: - Piriform)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.1.2109pa - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1031 - CyberLink Corp.)
CyberLink WaveEditor 2 (HKLM\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.2204 - CyberLink Corp.)
Epson Easy Photo Print 2 (HKLM\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.30.01 - SEIKO EPSON Corporation)
Epson Printer Software Downloader (HKLM\...\Epson Printer Software Downloader) (Version: - )
Epson Printer Software Downloader (Version: 2.0.0 - SEIKO EPSON CORPORATION) Hidden
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - )
Epson Stylus SX210_SX410_TX210_TX410 Handbuch (HKLM\...\Epson Stylus SX210_SX410_TX210_TX410 Benutzerhandbuch) (Version: - )
EPSON SX210 Series Printer Uninstall (HKLM\...\EPSON SX210 Series) (Version: - SEIKO EPSON Corporation)
EPSON Web-To-Page (HKLM\...\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}) (Version: - )
Facebook Video Calling 1.2.0.287 (HKLM\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
Findet Nemo (Version: 1.00.0000 - THQ) Hidden
Free YouTube Download version 3.2.54.219 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.54.219 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.52.1215 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.52.1215 - DVDVideoSoft Ltd.)
Java 7 Update 76 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
king.com (remove only) (HKLM\...\king.com) (Version: - Midasplayer Ltd (king.com))
LabelPrint (Version: .2725 - CyberLink Corp.) Hidden
LG CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2111 - CyberLink Corp.)
LG CyberLink PowerBackup (HKLM\...\{ADD5DB49-72CF-11D8-9D75-000129760D75}) (Version: 2.5.5529 - CyberLink Corp.)
LG CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3304a - CyberLink Corp.)
LG CyberLink YouCam (Version: 2.0.3304a - CyberLink Corp.) Hidden
LightScribe System Software (HKLM\...\{FA8BFB25-BF48-4F8B-8859-B30810745190}) (Version: 1.18.11.1 - LightScribe)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
MediaShow (HKLM\...\{D5A9B7C0-8751-11D8-9D75-000129760D75}) (Version: 3.0.4325 - CyberLink Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: - )
Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MSN (HKLM\...\MSNINST) (Version: - )
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
PhotoNow! (HKLM\...\{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.0.4310 - CyberLink Corp.)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.0.1731b - CyberLink Corp.)
PowerDirector (Version: 6.0.1731b - CyberLink Corp.) Hidden
PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3409.a - CyberLink Corporation)
PowerProducer (HKLM\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: - CyberLink Corp.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5995 - Realtek Semiconductor Corp.)
Shopping Helper Smartbar Engine (HKU\S-1-5-21-343818398-1220945662-1801674531-1004\...\{fd4bcaa1-053f-408c-90c1-4e441053c63e}) (Version: 11.123.63.20379 - ReSoft Ltd.) <==== ATTENTION
Sicherheitsupdate für Windows Internet Explorer 7 (KB2497640) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127-v2) (Version: 2 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB972260) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB974455) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB976325) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2530548) (HKLM\...\KB2530548-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2559049) (HKLM\...\KB2559049-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2586448) (HKLM\...\KB2586448-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (HKLM\...\KB2618444-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2647516) (HKLM\...\KB2647516-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2675157) (HKLM\...\KB2675157-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2699988) (HKLM\...\KB2699988-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2722913) (HKLM\...\KB2722913-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (HKLM\...\KB2744842-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (HKLM\...\KB2761465-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (HKLM\...\KB2792100-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (HKLM\...\KB2797052-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (HKLM\...\KB2799329-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (HKLM\...\KB2809289-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (HKLM\...\KB2817183-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (HKLM\...\KB2829530-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (HKLM\...\KB2838727-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (HKLM\...\KB2846071-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (HKLM\...\KB2847204-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (HKLM\...\KB2862772-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (HKLM\...\KB2870699-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2879017) (HKLM\...\KB2879017-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2888505) (HKLM\...\KB2888505-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2898785) (HKLM\...\KB2898785-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2909210) (HKLM\...\KB2909210-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2925418) (HKLM\...\KB2925418-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2936068) (HKLM\...\KB2936068-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2964358) (HKLM\...\KB2964358-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation)
Skins (Version: 2008.0422.2139.36895 - ATI) Hidden
Skype™ 7.4 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Unity Web Player (HKU\S-1-5-21-343818398-1220945662-1801674531-1004\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update für Windows Internet Explorer 8 (KB2447568) (HKLM\...\KB2447568-IE8) (Version: 1 - Microsoft Corporation)
USBFast (HKLM\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.23 - Prolific Technology Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version: - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version: - )
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 5.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-343818398-1220945662-1801674531-1004_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-343818398-1220945662-1801674531-1004_Classes\CLSID\{885BB46A-3F1E-44C3-A01B-A7D9260CC98B}\InprocServer32 -> dwusplay.dll No File
CustomCLSID: HKU\S-1-5-21-343818398-1220945662-1801674531-1004_Classes\CLSID\{885BB46A-3F1E-44C3-A01B-A7D9260CC98B}\localserver32 -> dwusplay.exe No File
CustomCLSID: HKU\S-1-5-21-343818398-1220945662-1801674531-1004_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
==================== Restore Points =========================
22-03-2015 21:51:46 Systemprüfpunkt
24-03-2015 16:27:55 Systemprüfpunkt
26-03-2015 18:53:51 Systemprüfpunkt
29-03-2015 12:43:58 Systemprüfpunkt
31-03-2015 17:24:56 Systemprüfpunkt
01-04-2015 18:48:18 Systemprüfpunkt
02-04-2015 19:16:45 Systemprüfpunkt
05-04-2015 11:01:02 Systemprüfpunkt
06-04-2015 14:07:00 Systemprüfpunkt
09-04-2015 22:20:19 Systemprüfpunkt
11-04-2015 18:47:12 Systemprüfpunkt
12-04-2015 18:47:50 Systemprüfpunkt
13-04-2015 18:55:40 Systemprüfpunkt
16-04-2015 00:55:43 Software Distribution Service 3.0
17-04-2015 21:49:30 Systemprüfpunkt
19-04-2015 12:54:35 Systemprüfpunkt
24-04-2015 22:17:41 Systemprüfpunkt
26-04-2015 13:54:34 Systemprüfpunkt
27-04-2015 18:50:20 Systemprüfpunkt
30-04-2015 00:58:38 Systemprüfpunkt
01-05-2015 19:09:50 Systemprüfpunkt
03-05-2015 17:23:07 Systemprüfpunkt
05-05-2015 16:26:20 Systemprüfpunkt
07-05-2015 18:50:56 ComboFix created restore point
08-05-2015 15:44:56 Software Distribution Service 3.0
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2004-08-04 14:00 - 2014-08-12 16:40 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Programme\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Benachrichtigung – Anmeldung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Epson Printer Software Downloader.job => C:\Programme\EPSON\EPAPDL\E_SAPDL2.EXE
==================== Loaded Modules (whitelisted) ==============
2015-05-08 13:31 - 2015-05-08 13:31 - 02926592 _____ () C:\Programme\AVAST Software\Avast\defs\15050800\algo.dll
2007-11-04 20:48 - 2007-11-04 20:48 - 00106496 _____ () C:\Programme\ASUS\ATK Hotkey\MsgTranAgt.exe
2008-01-11 23:40 - 2008-01-11 23:40 - 00098304 _____ () C:\Programme\ASUS\ATK Hotkey\HControlUser.exe
2007-11-12 16:41 - 2007-11-12 16:41 - 00106496 _____ () C:\Programme\ASUS\ATK Hotkey\MsgTran.dll
2004-05-27 19:13 - 2004-05-27 19:13 - 00057344 _____ () C:\Programme\ASUS\ATK Hotkey\CMSSC.dll
2006-08-24 00:32 - 2006-08-24 00:32 - 00163840 _____ () C:\Programme\ASUS\ATK Hotkey\ASUSNET.dll
2011-03-04 15:18 - 2009-03-12 16:45 - 00135168 ____N () C:\Programme\Epson Software\Event Manager\Assistants\Scan Assistant\ScanEngine.dll
2011-03-04 15:18 - 2008-11-21 14:58 - 00057344 ____N () C:\Programme\Epson Software\Event Manager\Assistants\Scan Assistant\Satwain.dll
2008-04-14 07:52 - 2008-04-14 07:52 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2012-01-23 17:11 - 2011-10-28 03:27 - 00623912 _____ () C:\Programme\CyberLink\Power2Go8\CLMediaLibrary.dll
2011-10-28 10:27 - 2011-10-28 10:27 - 00013096 _____ () C:\Programme\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-03-13 22:57 - 2015-03-13 22:57 - 38714440 _____ () C:\Programme\AVAST Software\Avast\libcef.dll
2012-01-23 17:11 - 2012-01-16 05:03 - 00804136 _____ () C:\Programme\CyberLink\Power2Go8\UNO.dll
2012-01-23 17:11 - 2011-12-16 08:45 - 01346856 _____ () C:\Programme\CyberLink\Power2Go8\Language\DEU\P2GRC.dll
2012-01-23 17:11 - 2012-01-16 05:03 - 01691432 _____ () C:\Programme\CyberLink\Power2Go8\runtime\authoring\AuroraU.dll
2012-01-23 17:11 - 2011-07-01 14:45 - 00770856 _____ () C:\Programme\CyberLink\Power2Go8\runtime\mediacache\MediaObj.dll
2011-11-09 07:27 - 2010-09-15 18:50 - 00031840 ____N () C:\Programme\Cyberlink\Shared files\RichVideops.dll
2012-01-23 17:11 - 2012-01-16 05:03 - 00299816 _____ () C:\Programme\CyberLink\Power2Go8\runtime\authoring\EditingMgrWrapperU.dll
2011-11-09 07:27 - 2010-09-15 18:50 - 00244904 ____N () C:\Programme\CyberLink\Shared Files\RichVideo.exe
2007-03-06 18:03 - 2007-03-06 18:03 - 00016384 _____ () C:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll
2008-01-23 11:51 - 2008-01-23 11:51 - 00151552 _____ () C:\Programme\ASUS\ATK Hotkey\WDC.exe
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7866 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-343818398-1220945662-1801674531-1004\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
DNS Servers: 192.168.178.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: EPSON SX210 Series => C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\WINDOWS\TEMP\E_S95.tmp" /EF "HKCU"
MSCONFIG\startupreg: LanguageShortcut => C:\Programme\CyberLink\PowerDVD\Language\Language.exe
MSCONFIG\startupreg: RemoteControl => C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
==================== FirewallRules (whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
StandardProfile\AuthorizedApplications: [C:\Programme\Epson Software\Event Manager\EEventManager.exe] => Disabled:EEventManager Application
StandardProfile\AuthorizedApplications: [C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\FacebookVideoCalling.exe] => Enabled:Facebook Video Calling
StandardProfile\AuthorizedApplications: [C:\Programme\Java\jre7\bin\java.exe] => Enabled:Java(TM) Platform SE binary
StandardProfile\AuthorizedApplications: [C:\Programme\Skype\Phone\Skype.exe] => Enabled:Skype
StandardProfile\AuthorizedApplications: [C:\Programme\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Programme\Mozilla Firefox)
StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22007
StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22008
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/08/2015 03:54:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 37.0.2.5583, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (05/07/2015 06:33:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung plugin-container.exe, Version 37.0.2.5583, fehlgeschlagenes Modul mozalloc.dll, Version 37.0.2.5583, Fehleradresse 0x00001aa1.
Das medienspezifische Ereignis für [plugin-container.exe!ws!] wird verarbeitet.
Error: (05/07/2015 06:33:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung firefox.exe, Version 37.0.2.5583, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (04/09/2015 04:38:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung SKY13D.tmp, Version 7.3.59.101, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5906
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5906
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3906
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3906
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
System errors:
=============
Error: (05/08/2015 02:41:33 PM) (Source: DCOM) (EventID: 10010) (User: ADMIN-838B797B5)
Description: Der Server "{49BD2028-1523-11D1-AD79-00C04FD8FDFF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (05/08/2015 02:40:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Gatewaydienst auf Anwendungsebene" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Gatewaydienst auf Anwendungsebene" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "WMI-Leistungsadapter" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Cyberlink RichVideo Service(CRVS)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LightScribeService Direct Disc Labeling Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AVM IGD CTRL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (05/07/2015 07:08:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Starten Sie den Dienst neu..
Microsoft Office Sessions:
=========================
Error: (05/08/2015 03:54:59 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.5583hungapp0.0.0.000000000
Error: (05/07/2015 06:33:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583mozalloc.dll37.0.2.558300001aa1
Error: (05/07/2015 06:33:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.5583hungapp0.0.0.000000000
Error: (04/09/2015 04:38:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SKY13D.tmp7.3.59.101hungapp0.0.0.000000000
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5906
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5906
Error: (04/09/2015 04:18:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3906
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3906
Error: (04/09/2015 04:18:34 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) Dual CPU T2390 @ 1.86GHz
Percentage of memory in use: 47%
Total physical RAM: 2047.2 MB
Available physical RAM: 1081.14 MB
Total Pagefile: 3940.06 MB
Available Pagefile: 3065.96 MB
Total Virtual: 2047.88 MB
Available Virtual: 1937.51 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:93.15 GB) (Free:35.53 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive e: () (Fixed) (Total:139.73 GB) (Free:138.15 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: A1CD66D0)
Partition 1: (Active) - (Size=93.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=139.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
08.05.2015, 15:39
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Mozilla schließt sich einfach nach einer gewissen Zeit Anleitung / Hilfe Hi,
__________________Zitat:
Aktualisiere auf Win7 oder 8.1 oder nimm eine Linux-Distro wie zB Lubuntu, Xubuntu, Ubuntu Mate (weitere hier => Liste von Linux-Distributionen ? Wikipedia ) wenn du nicht auf Windows angewiesen bist. Ich empfehle noch immer gerne Xubuntu.  Lesestoff:Windows XP Auf deinem Rechner läuft noch Windows XP. Microsoft hat dieses Betriebssystem bereits 2001 veröffentlicht und stellt den Support endgültig ab April 2014 ein, d.h. ab Mai 2014 gibt es keine weiteren Updates mehr und danach gefundene Lücken werden nicht mehr durch Updates/Hotfixes geschlossen werden können. Mit Windows XP nach April 2014 zu surfen wird damit ein großes Sicherheitsrisiko. Du solltest dir jetzt unbedingt Gedanken machen, möglichst schnell auf ein aktuelleres Betriebssystem umzusteigen.
__________________ |
|
08.05.2015, 15:47
| #3 |
| |  Mozilla schließt sich einfach nach einer gewissen Zeit Details Will ich ja aber bis dahin würde ich mich freuen wenn auch diese veraltete Version wieder reibungslos läuft. Ich kenne nicht den Grund des selbstausgelösten schließens meiner geöffneten Seiten, ich weiß nur das er das sonst nicht gemacht hat.
__________________Ist die Empfehlung eines neuen Betriebsystems alles was du für mich tun kannst ? |
|
08.05.2015, 15:48
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Lösung: Mozilla schließt sich einfach nach einer gewissen Zeit Wie lange willst du denn noch warten? Nenn bitte einen triftigen Grund. Es macht überhaupt keinen Sinn ein derart altes System zurechtzuflicken.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
08.05.2015, 15:53
| #5 |
| | Wie Mozilla schließt sich einfach nach einer gewissen Zeit Ich hab gerade finanziell einen Tiefpunkt erreicht und wäre dankbar wenn er wenigstens die Seiten die ich aufrufe offen lässt und nicht einfach alles schließt und ich ständig einen Neustart machen muss. |
|
08.05.2015, 15:55
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Wo Mozilla schließt sich einfach nach einer gewissen Zeit Lösung! Dafür hab ich dir eine Linux-Distribution empfohlen...
__________________ --> Mozilla schließt sich einfach nach einer gewissen Zeit |
|
| Themen zu Mozilla schließt sich einfach nach einer gewissen Zeit |
| einfach, erkennbaren, gewisse, gewissen, grund, mozilla, schließ, schließt |
Mozilla schließt sich einfach nach einer gewissen Zeit
Linear-Darstellung
