| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Yahoo-Search, neuer Tab und weitere Nervtöter-.-Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.06.2015, 14:29
| #1 |
 |  Yahoo-Search, neuer Tab und weitere Nervtöter-.- huhu... ich habe seit ein paar Tagen einen richtig nervigen Plagegeist auf meinem Rechner, der sämtliche Browser mehr oder weniger unbrauchbar macht... Google kennt mich nicht mehr, da jede Suche plötzlich durch Yahoo durchgeführt wird. Jeder Klick (ins Nichts) öffnet Tabs und neue Fenster. Um eure Hilfe ein wenig zu erleichtern: Hier schon mal die Logs + Additions von FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-06-2015 Ran by alexk_000 (administrator) on GITTHEIT on 08-06-2015 15:10:21 Running from C:\Users\alexk_000\Downloads Loaded Profiles: alexk_000 (Available Profiles: alexk_000) Platform: Windows 8.1 Enterprise Evaluation (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\wlms\wlms.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Spotify Ltd) C:\Users\alexk_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\alexk_000\AppData\Roaming\Spotify\Spotify.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (Spotify Ltd) C:\Users\alexk_000\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\alexk_000\AppData\Roaming\Spotify\Spotify.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Spotify Ltd) C:\Users\alexk_000\AppData\Roaming\Spotify\Spotify.exe (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [728312 2015-04-16] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\...\Run: [Spotify Web Helper] => C:\Users\alexk_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-06-08] (Spotify Ltd) HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\...\Run: [Spotify] => C:\Users\alexk_000\AppData\Roaming\Spotify\Spotify.exe [7323192 2015-06-08] (Spotify Ltd) HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\...\Run: [GoogleChromeAutoLaunch_CADEA405120BD280308DCC7164AC116C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-05-22] (Google Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\alexk_000\AppData\Roaming\Mozilla\Firefox\Profiles\vmmkrw07.default FF NewTab: hxxp://de.search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_276_bl-is-23__alt__ddc_dsssyctab_bd_com FF DefaultSearchEngine: Yahoo Search! FF SelectedSearchEngine: Yahoo Search! FF Homepage: hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bg_276_bl-is-23__alt__ddc_dsssyc_bd_com FF Keyword.URL: hxxp://de.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_276_bl-is-23__alt__ddc_dss_bd_com&p={searchTerms} FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-25] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-25] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Extension: Digital More - C:\Users\alexk_000\AppData\Roaming\Mozilla\Firefox\Profiles\vmmkrw07.default\Extensions\{bb6c5dc5-88e0-40a5-b254-3064ec44771e}.xpi [2015-05-25] Chrome: ======= CHR Profile: C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-03] CHR Extension: (Google Docs) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-03] CHR Extension: (Google Drive) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-03] CHR Extension: (Web Developer) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2015-04-03] CHR Extension: (YouTube) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-03] CHR Extension: (TV) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bppbpeijolfcampacpljolaegibfhjph [2015-04-03] CHR Extension: (Adblock Plus) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-03] CHR Extension: (Google Search) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-03] CHR Extension: (Floating YouTube Extension) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2015-04-03] CHR Extension: (Google Sheets) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-03] CHR Extension: (Hack this page) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhlmoffoggikiefmphhkgjeocbfmcojf [2015-04-03] CHR Extension: (Spotify Web Extension) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkmfagbigbkgjbbphlemmafhjabeofek [2015-04-03] CHR Extension: (Bookmark Manager) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-12] CHR Extension: (Floating YouTube™) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2015-04-03] CHR Extension: (Request Maker) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp [2015-04-03] CHR Extension: (Better Battlelog (BBLog)) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-04-03] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03] CHR Extension: (TV for Google Chrome™) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\licccgnfdlgmmmgaddmbcepikfadcmpe [2015-04-03] CHR Extension: (PHP Programming Theme) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\maaohlkdemfghblhgnkpiolgomkjpfdk [2015-04-03] CHR Extension: (Chrono Download Manager) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mciiogijehkdemklbdcbfkefimifhecn [2015-04-03] CHR Extension: (Google Wallet) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-03] CHR Extension: (Deezer) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\npfkoakaabdallkcdbpkkhfilkkngakh [2015-04-03] CHR Extension: (.NET Fiddle) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohjcieidjalbkdciooknjhkfemfajpjc [2015-04-03] CHR Extension: (Gmail) - C:\Users\alexk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827640 2015-04-16] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [434424 2015-04-16] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [434424 2015-04-16] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1185584 2015-04-16] (Avira Operations GmbH & Co. KG) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2015-04-03] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2015-04-03] (ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2015-04-03] (ASUSTeK Computer Inc.) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) R2 WLMS; C:\Windows\system32\wlms\wlms.exe [22016 2014-03-18] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-04-03] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2015-04-03] () R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-06-21] (Advanced Micro Devices) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-04-16] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-04-16] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-04-16] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-04-16] (Avira Operations GmbH & Co. KG) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-08] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-08 15:10 - 2015-06-08 15:10 - 02108928 _____ (Farbar) C:\Users\alexk_000\Downloads\FRST64.exe 2015-06-08 15:10 - 2015-06-08 15:10 - 00016676 _____ C:\Users\alexk_000\Downloads\FRST.txt 2015-06-08 15:10 - 2015-06-08 15:10 - 00000000 ____D C:\FRST 2015-06-08 15:05 - 2015-06-08 15:05 - 790339799 _____ C:\Windows\MEMORY.DMP 2015-06-08 15:05 - 2015-06-08 15:05 - 00280992 _____ C:\Windows\Minidump\060815-7000-01.dmp 2015-06-08 15:05 - 2015-06-08 15:05 - 00000000 ____D C:\Windows\Minidump 2015-06-08 15:02 - 2015-06-08 15:02 - 00001252 _____ C:\Users\alexk_000\Desktop\JRT.txt 2015-06-08 15:00 - 2015-06-08 15:07 - 00000000 ____D C:\AdwCleaner 2015-06-08 15:00 - 2015-06-08 15:00 - 02943232 _____ (Thisisu) C:\Users\alexk_000\Downloads\JRT.exe 2015-06-08 15:00 - 2015-06-08 15:00 - 02231296 _____ C:\Users\alexk_000\Downloads\AdwCleaner_4.206.exe 2015-06-08 15:00 - 2015-06-08 15:00 - 00000207 _____ C:\Windows\tweaking.com-regbackup-GITTHEIT-Windows-8.1-Enterprise-Evaluation-(64-bit).dat 2015-06-08 15:00 - 2015-06-08 15:00 - 00000000 ____D C:\RegBackup 2015-06-08 14:57 - 2015-06-08 14:57 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\alexk_000\Downloads\revosetup95.exe 2015-06-08 14:57 - 2015-06-08 14:57 - 00001284 _____ C:\Users\alexk_000\Desktop\Revo Uninstaller.lnk 2015-06-08 14:57 - 2015-06-08 14:57 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2015-06-08 14:49 - 2015-06-08 14:55 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-06-08 14:47 - 2015-06-08 14:55 - 00000000 ____D C:\Users\alexk_000\Desktop\mbar 2015-06-08 14:47 - 2015-06-08 14:47 - 16502728 _____ (Malwarebytes Corp.) C:\Users\alexk_000\Downloads\mbar-1.09.1.1004.exe 2015-06-08 14:13 - 2015-06-08 15:05 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-08 14:13 - 2015-06-08 14:47 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-06-08 14:13 - 2015-06-08 14:13 - 00001118 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-06-08 14:13 - 2015-06-08 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-06-08 14:13 - 2015-06-08 14:13 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-06-08 14:13 - 2015-06-08 14:13 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-06-08 14:13 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-06-08 14:13 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-06-08 14:12 - 2015-06-08 14:12 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\alexk_000\Downloads\mbam-setup-2.1.6.1022.exe 2015-06-08 13:47 - 2015-06-08 13:47 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\alexk_000\Downloads\SpyHunter-Installer.exe 2015-06-08 13:47 - 2015-06-08 13:47 - 00000000 _____ C:\autoexec.bat 2015-06-08 12:03 - 2015-06-08 12:03 - 00000000 ____D C:\Users\alexk_000\Desktop\Mesora2 Client 2015-06-08 11:41 - 2015-06-08 11:42 - 1199368316 _____ C:\Users\alexk_000\Desktop\Mesora2 Client.rar 2015-06-08 09:11 - 2015-06-08 14:30 - 00001151 _____ C:\Users\Public\Desktop\Avira.lnk 2015-06-08 09:11 - 2015-06-08 09:11 - 00000000 ____D C:\Users\alexk_000\AppData\Roaming\Avira 2015-06-08 09:10 - 2015-06-08 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-06-08 09:10 - 2015-06-08 14:30 - 00000000 ____D C:\Program Files (x86)\Avira 2015-06-08 09:10 - 2015-06-08 09:11 - 00000000 ____D C:\ProgramData\Avira 2015-06-08 09:10 - 2015-04-16 15:23 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-06-08 09:10 - 2015-04-16 15:23 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-06-08 09:10 - 2015-04-16 15:23 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-06-08 09:10 - 2015-04-16 15:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-06-08 09:08 - 2015-06-08 09:09 - 207437104 _____ C:\Users\alexk_000\Downloads\avira_antivirus_de-de_15.0.10.434.exe 2015-06-08 08:58 - 2015-06-08 09:09 - 00008352 _____ C:\Users\alexk_000\Desktop\Neues Textdokument.txt 2015-06-08 08:19 - 2015-06-08 08:19 - 00000000 ____D C:\Program Files (x86)\ESET 2015-06-08 08:18 - 2015-06-08 08:19 - 02870984 _____ (ESET) C:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe 2015-06-02 23:48 - 2015-06-08 14:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-05-25 23:11 - 2015-05-25 23:11 - 00000000 ____D C:\Users\alexk_000\AppData\Local\Macromedia 2015-05-25 23:10 - 2015-05-25 23:11 - 00000000 ____D C:\Users\alexk_000\AppData\Local\Adobe 2015-05-25 23:05 - 2015-06-08 14:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-05-25 23:05 - 2015-05-25 23:05 - 00001175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-05-25 23:05 - 2015-05-25 23:05 - 00001163 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-05-25 23:05 - 2015-05-25 23:05 - 00000000 ____D C:\Users\alexk_000\AppData\Roaming\Mozilla 2015-05-25 23:05 - 2015-05-25 23:05 - 00000000 ____D C:\Users\alexk_000\AppData\Local\Mozilla 2015-05-25 23:05 - 2015-05-25 23:05 - 00000000 ____D C:\ProgramData\Mozilla 2015-05-25 23:04 - 2015-05-25 23:04 - 00243656 _____ C:\Users\alexk_000\Downloads\Firefox Setup Stub 38.0.1.exe 2015-05-17 08:23 - 2015-05-17 08:24 - 00000000 ____D C:\Users\alexk_000\Downloads\JedenTagEinSet 2015-05-17 08:13 - 2015-05-17 08:13 - 00000000 ____D C:\Users\alexk_000\Desktop\mixed 2015-05-13 05:57 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-13 05:57 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-05-13 05:57 - 2015-04-24 23:32 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-05-13 05:57 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-13 05:57 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-13 05:57 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-13 05:57 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-13 05:57 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-13 05:57 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-13 05:57 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-13 05:57 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-05-13 05:57 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-05-13 05:57 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-05-13 05:57 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-05-13 05:57 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-13 05:57 - 2015-04-21 18:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-05-13 05:57 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-13 05:57 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-05-13 05:57 - 2015-04-21 17:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-05-13 05:57 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-05-13 05:57 - 2015-04-21 17:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-05-13 05:57 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-13 05:57 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-13 05:57 - 2015-04-21 17:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-13 05:57 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-13 05:57 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-05-13 05:57 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-05-13 05:57 - 2015-04-21 17:37 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2015-05-13 05:57 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-05-13 05:57 - 2015-04-21 17:32 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-05-13 05:57 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-05-13 05:57 - 2015-04-21 17:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-05-13 05:57 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-13 05:57 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-05-13 05:57 - 2015-04-21 17:26 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-05-13 05:57 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-05-13 05:57 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-05-13 05:57 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-13 05:57 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-13 05:57 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-05-13 05:57 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-05-13 05:57 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-05-13 05:57 - 2015-04-14 00:48 - 04180480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-13 05:57 - 2015-04-10 03:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-13 05:57 - 2015-04-10 02:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-13 05:57 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-05-13 05:57 - 2015-04-10 02:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-05-13 05:57 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2015-05-13 05:57 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-05-13 05:57 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll 2015-05-13 05:57 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll 2015-05-13 05:57 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2015-05-13 05:57 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2015-05-13 05:57 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-05-13 05:57 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll 2015-05-13 05:57 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-05-13 05:57 - 2015-03-27 05:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-13 05:57 - 2015-03-27 04:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-05-13 05:57 - 2015-03-27 04:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-13 05:57 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys 2015-05-13 05:57 - 2015-03-17 19:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2015-05-13 05:57 - 2015-03-13 06:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2015-05-13 05:57 - 2015-03-13 06:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2015-05-13 05:57 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-05-13 05:57 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll 2015-05-13 05:57 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll 2015-05-13 05:57 - 2015-03-13 02:29 - 00410017 _____ C:\Windows\system32\ApnDatabase.xml 2015-05-13 05:57 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-05-13 05:57 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2015-05-13 05:57 - 2015-03-09 04:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys 2015-05-13 05:57 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-05-13 05:57 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2015-05-13 05:57 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2015-05-13 05:57 - 2015-03-05 01:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-05-13 05:57 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll 2015-05-13 05:57 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll 2015-05-13 05:57 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2015-05-13 05:57 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2015-05-13 05:57 - 2014-11-14 08:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll 2015-05-12 22:00 - 2015-05-12 22:00 - 00000000 ____D C:\Users\alexk_000\Downloads\converse-Chuck-Taylor-All-Star-Core-OX-Sneaker-P 144812C-3-5-p5-4c9faef52b2f88bd15714781a0e55872 2015-05-12 21:54 - 2015-05-12 21:54 - 00000000 ____D C:\Users\alexk_000\Documents\kp_hausaufgabe_13052015(1) 2015-05-12 20:49 - 2015-05-12 21:54 - 00000000 ____D C:\Users\alexk_000\Documents\kp_hausaufgabe_13052015 2015-05-12 20:48 - 2015-05-12 21:55 - 00000000 ____D C:\Users\alexk_000\bluej 2015-05-12 20:45 - 2015-05-12 20:45 - 00001899 _____ C:\Users\alexk_000\Desktop\BlueJ.lnk 2015-05-12 20:45 - 2015-05-12 20:45 - 00000000 ____D C:\Program Files (x86)\BlueJ 2015-05-12 20:44 - 2015-05-12 20:45 - 186967768 _____ C:\Users\alexk_000\Downloads\bluej-bundled-315a.msi ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-08 15:10 - 2014-03-18 12:01 - 01686150 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-08 15:10 - 2014-03-18 11:24 - 00726688 _____ C:\Windows\system32\perfh007.dat 2015-06-08 15:10 - 2014-03-18 11:24 - 00151380 _____ C:\Windows\system32\perfc007.dat 2015-06-08 15:08 - 2015-04-03 12:58 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2F4A95AE-ED05-4FCF-B70E-110F6D337FA9} 2015-06-08 15:06 - 2015-04-03 12:50 - 01193494 _____ C:\Windows\WindowsUpdate.log 2015-06-08 15:05 - 2015-04-03 13:05 - 00000000 ____D C:\Users\alexk_000\AppData\Roaming\Spotify 2015-06-08 15:05 - 2015-04-03 13:05 - 00000000 ____D C:\Users\alexk_000\AppData\Local\Spotify 2015-06-08 15:05 - 2015-04-03 13:02 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-06-08 15:05 - 2015-04-03 12:55 - 00000000 __RDO C:\Users\alexk_000\OneDrive 2015-06-08 15:05 - 2014-03-18 03:49 - 00216468 _____ C:\Windows\PFRO.log 2015-06-08 15:05 - 2013-08-22 16:46 - 00016588 _____ C:\Windows\setupact.log 2015-06-08 15:05 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-08 15:03 - 2015-04-03 13:00 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2129097411-1800295474-2688077832-1001 2015-06-08 15:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru 2015-06-08 14:37 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2015-06-08 14:30 - 2015-04-03 12:57 - 00000000 ____D C:\ProgramData\Package Cache 2015-06-08 14:29 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\InputMethod 2015-06-08 14:17 - 2015-04-03 13:02 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-06-08 13:47 - 2015-04-03 12:52 - 00000000 ____D C:\Users\alexk_000 2015-06-07 06:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2015-05-26 00:17 - 2015-04-03 13:03 - 00002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-05-20 05:54 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2015-05-18 08:31 - 2013-08-22 17:37 - 00002988 _____ C:\Windows\DtcInstall.log 2015-05-18 08:30 - 2013-08-22 16:44 - 00338016 _____ C:\Windows\system32\FNTCACHE.DAT 2015-05-18 08:28 - 2014-03-18 11:37 - 00000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents 2015-05-18 08:28 - 2014-03-18 11:37 - 00000000 ____D C:\Program Files\Windows Journal 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___SD C:\Windows\system32\dsc 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\sppui 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\setup 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\SysWOW64\Com 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sppui 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\setup 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\migwiz 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\Com 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\MediaViewer 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\IME 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\FileManager 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\Camera 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\WindowsPowerShell 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-05-18 08:28 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\oobe 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\Dism 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Sysprep 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\oobe 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\Dism 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-05-18 08:28 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\servicing 2015-05-17 15:27 - 2015-04-10 20:55 - 00000000 ____D C:\Users\alexk_000\AppData\Local\JDownloader v2.0 2015-05-17 15:13 - 2015-05-04 23:55 - 00000000 ____D C:\Users\alexk_000\AppData\Roaming\vlc 2015-05-17 08:23 - 2015-04-10 20:59 - 00354304 ___SH C:\Users\alexk_000\Downloads\Thumbs.db 2015-05-15 07:12 - 2015-04-03 13:02 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-05-15 07:12 - 2015-04-03 13:02 - 00003872 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-05-13 20:21 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2015-05-13 20:08 - 2015-04-05 04:08 - 00000000 ____D C:\Windows\system32\MRT 2015-05-13 20:06 - 2015-04-05 04:08 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-05-12 23:43 - 2015-04-12 14:16 - 00000000 ____D C:\Users\alexk_000\Downloads\424w4eqq2l0oob3 Some files in TEMP: ==================== C:\Users\alexk_000\AppData\Local\Temp\avgnt.exe C:\Users\alexk_000\AppData\Local\Temp\proxy_vole4913418375132527832.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-02 02:31 ==================== End of log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-06-2015
Ran by alexk_000 at 2015-06-08 15:10:43
Running from C:\Users\alexk_000\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2129097411-1800295474-2688077832-500 - Administrator - Disabled)
alexk_000 (S-1-5-21-2129097411-1800295474-2688077832-1001 - Administrator - Enabled) => C:\Users\alexk_000
Gast (S-1-5-21-2129097411-1800295474-2688077832-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2129097411-1800295474-2688077832-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.04.01 - ASUSTeK Computer Inc.)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.5 - BlueJ Team)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Logitech Gaming Software 8.55 (HKLM\...\Logitech Gaming Software) (Version: 8.55.137 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.1 - Mozilla)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Spotify (HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\...\Spotify) (Version: 1.0.6.80.g2a801a53 - Spotify AB)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
20-05-2015 05:53:37 Geplanter Prüfpunkt
29-05-2015 02:05:43 Geplanter Prüfpunkt
05-06-2015 02:30:24 Geplanter Prüfpunkt
08-06-2015 14:58:43 Revo Uninstaller's restore point - Buzzdock
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {007FCEF9-EE69-44E4-88CE-1A00CF52B7C9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-03] (Google Inc.)
Task: {1F16D9B9-4F3E-469D-9AA2-F24367E6EE70} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-03] (Google Inc.)
Task: {517B2498-81D6-4A6A-8644-2820BAFB91BF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-05-13] (Microsoft Corporation)
Task: {7C034ACD-ECDA-4A75-BC30-07693D499DF2} - System32\Tasks\ASUS\Easy Update => C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe [2013-01-14] ()
Task: {ACA85BBE-2A83-4C73-A68E-24F7307AC7AF} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-04-03 13:00 - 2013-01-14 16:37 - 01406776 _____ () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe
2015-04-03 12:59 - 2015-04-03 12:59 - 00920736 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
2014-07-28 20:29 - 2014-07-28 20:29 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-07-28 20:32 - 2014-07-28 20:32 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-07-28 20:29 - 2014-07-28 20:29 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-07-28 20:31 - 2014-07-28 20:31 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-04-03 13:00 - 2013-01-14 17:16 - 05771136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzULIB.dll
2015-04-03 13:00 - 2010-06-21 15:21 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\ImageHelper.dll
2015-04-03 13:00 - 2011-07-12 19:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll
2015-04-03 13:00 - 2010-10-05 08:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll
2015-04-03 13:00 - 2012-10-08 17:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll
2015-04-03 13:00 - 2013-01-15 15:30 - 01040896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EasyUpdt.dll
2015-04-03 13:00 - 2013-04-15 14:19 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll
2015-04-03 13:00 - 2012-05-28 21:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll
2015-04-03 13:00 - 2011-09-19 20:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll
2015-04-03 13:00 - 2011-07-21 09:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll
2015-04-03 13:00 - 2012-08-29 18:09 - 00875520 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll
2015-04-03 12:59 - 2015-04-03 12:59 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll
2015-04-03 13:00 - 2010-10-05 08:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll
2015-04-03 13:00 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
2015-04-03 12:59 - 2015-06-08 15:05 - 00039424 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll
2015-04-03 12:59 - 2015-04-03 12:59 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll
2015-04-03 13:05 - 2015-06-08 13:53 - 41287224 _____ () C:\Users\alexk_000\AppData\Roaming\Spotify\libcef.dll
2015-04-03 13:05 - 2015-06-08 13:53 - 01488440 _____ () C:\Users\alexk_000\AppData\Roaming\Spotify\libglesv2.dll
2015-04-03 13:05 - 2015-06-08 13:53 - 00079928 _____ () C:\Users\alexk_000\AppData\Roaming\Spotify\libegl.dll
2015-05-26 00:17 - 2015-05-22 22:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll
2015-05-26 00:17 - 2015-05-22 22:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll
2015-05-26 00:17 - 2015-05-22 22:22 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\alexk_000\OneDrive:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WLMS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WLMS => ""="Service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2129097411-1800295474-2688077832-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\alexk_000\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\m82a1_desktop_3840x1080_wallpaper-425254.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [TCP Query User{AB347E15-F1C4-4DAC-B773-CB699491B80B}C:\users\alexk_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexk_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{9080E7EB-141D-44D1-B935-02E887E79A5E}C:\users\alexk_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexk_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [{C22E652B-23CC-4D72-B6C4-C64EC028AB87}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
FirewallRules: [{3AF1ACB8-9CEC-4CBB-B7C7-FDA0D7EB1170}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
FirewallRules: [{A69AB83B-9777-48A2-AD18-5C35D348A5D0}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{A030050D-F2FF-423E-A3C2-D6AF19BDE84F}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [TCP Query User{808A6B8B-D7FE-44F0-A9B6-8DD8658AB742}C:\users\alexk_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexk_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{04EAB7DE-E74C-4A92-8FCF-EFCD5B3BEC46}C:\users\alexk_000\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexk_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B2B74D88-B1A9-44A6-9672-F14583654DEA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54C6AFF3-7668-4EC6-A38D-99A81756032C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8846C6D0-EE9F-402E-9C76-466D219829D7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{90F92692-5563-4320-BE56-2FF43B082F4C}C:\users\alexk_000\desktop\hitoshi2\hitoshi2\hitoshi2.exe] => (Allow) C:\users\alexk_000\desktop\hitoshi2\hitoshi2\hitoshi2.exe
FirewallRules: [UDP Query User{C11D3398-F549-432D-A19F-0A09DECEFEF2}C:\users\alexk_000\desktop\hitoshi2\hitoshi2\hitoshi2.exe] => (Allow) C:\users\alexk_000\desktop\hitoshi2\hitoshi2\hitoshi2.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/08/2015 02:58:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (06/08/2015 02:31:56 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database
Error: (06/08/2015 11:16:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 11:16:53 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 09:05:58 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 09:05:57 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 09:05:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 08:19:09 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 08:19:09 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
Error: (06/08/2015 08:19:08 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifest.
System errors:
=============
Error: (06/08/2015 03:05:04 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0xc000021a (0xffffc00198ffe930, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000)C:\Windows\MEMORY.DMP060815-7000-01
Error: (06/08/2015 03:05:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error: (06/08/2015 03:05:03 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 08.06.2015 um 15:03:24 unerwartet heruntergefahren.
Error: (06/08/2015 03:01:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/08/2015 03:01:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/08/2015 03:00:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ASUS Com Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/08/2015 03:00:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/08/2015 03:00:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/08/2015 03:00:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/08/2015 03:00:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ASUS System Control Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office:
=========================
Error: (06/08/2015 02:58:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (06/08/2015 02:31:56 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: -2147024883
Error: (06/08/2015 11:16:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 11:16:53 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 09:05:58 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 09:05:57 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 09:05:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 08:19:09 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 08:19:09 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
Error: (06/08/2015 08:19:08 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_624760d1ecb7236e.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17784_none_a9f497a901334c74.manifestC:\Users\alexk_000\Downloads\esetsmartinstaller_deu.exe
CodeIntegrity Errors:
===================================
Date: 2015-04-12 16:01:32.958
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.
Date: 2015-04-12 14:16:11.175
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: AMD FX(tm)-8350 Eight-Core Processor
Percentage of memory in use: 16%
Total physical RAM: 16281.74 MB
Available physical RAM: 13529.94 MB
Total Pagefile: 32665.74 MB
Available Pagefile: 29490.46 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.88 GB) (Free:171.71 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Lokaler Datenträger) (Fixed) (Total:931.51 GB) (Free:891.35 GB) NTFS
Drive e: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (Datenträger-Festplatte) (Fixed) (Total:931.51 GB) (Free:490.99 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive h: () (Fixed) (Total:465.66 GB) (Free:384.2 GB) NTFS
Drive i: () (Fixed) (Total:29.34 GB) (Free:29.17 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6703E1A4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4A60E371)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 29.4 GB) (Disk ID: 46BE2843)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=29.3 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: E2040BA7)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
========================================================
Disk: 4 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 54BE1ADF)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of log ============================
|
|
08.06.2015, 14:34
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Yahoo-Search, neuer Tab und weitere Nervtöter-.-Zitat:
__________________ |
|
08.06.2015, 15:54
| #3 |
| | Yahoo-Search, neuer Tab und weitere Nervtöter-.- Das ist eine ganz normale Windows 8.1 Enterprise-Version, allerdings weiterhin als Evaluation lizenziert, da ich von meinem Arbeitgeber eine MAK-Lizenz habe.
__________________Ansonsten würde ich sagen, die Enterprise-Version kostet eh nur +/- 60-80€, das ist nicht viel... |
|
09.06.2015, 08:41
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Yahoo-Search, neuer Tab und weitere Nervtöter-.- Das ist nicht der Punkt. Enterprise-Editionen bekommt man idR nur über teure Volumenlizenzverträge. Oder wenn man sich Müll aus dunklen Ecken des Internets zieht  Jedenfalls sieht man bei Heimanwendern die hier im Forum um Hilfe bitten äußerst selten eine WindowsEnterprise Edition, deswegen wollte ich wissen warum du so eine hast. Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu Yahoo-Search, neuer Tab und weitere Nervtöter-.- |
| .dll, adware, antivirus, avira, browser, computer, defender, desktop, explorer, fehler, firefox 38.0.5, flash player, helper, homepage, launch, mozilla, neustart, newtab, proxy, registry, scan, security, software, svchost.exe, system, udp, windows, windowsapps, yahoo search, öffnet |
