Trojaner-Board - Maillaccount gehackt /verschiedene Funde mit Malewarebytes

Seite 2 von 3

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Maillaccount gehackt /verschiedene Funde mit Malewarebytes (https://www.trojaner-board.de/136857-maillaccount-gehackt-verschiedene-funde-malewarebytes.html)

Lotto

24.03.2014 21:35

Hallo Schrauber,
und das mit dem booten ? meinst du damit das ich dann mit dem neuen Nutzerkonto arbeiten soll??Ist das dieses booten:crazy:

Lg Lotto.....ich bin aber noch lernfähig:glaskugel2:

schrauber

25.03.2014 12:42

genau, Rechner starten, am neuen Konto anmelden, in diesem arbeiten und testen :)

Lotto

25.03.2014 21:32

Liste der Anhänge anzeigen (Anzahl: 1)

Hallo Schrauber,
habe alles so gemacht....:party:

Das gleiche Ergebnis siehe Bild

Lg lotto:headbang:

schrauber

26.03.2014 12:13

Das ist aber in Chrome, nit in Firefox oder?

Lotto

26.03.2014 22:06

Nee das ist Firefox steht auch drinne im kasten oben links. Denn den Chrom habe ich eigentlich nie.

Lg Lotto

schrauber

27.03.2014 12:34

hehe, irritiert ich bin wegen dem Wort chrome in der Fehlermeldung :D

Folgendes bitte nochma, aber eine alte Version von Firefox installieren!!

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

Lotto

29.03.2014 18:53

Hallo Schrauber,
ich habe alles erledigt wie aufgetragen.
jetzt kommt die meldung das der Mozilla veraltet ist. Es geht alles ziemlich lahm. manche Spiele gehen überhaupt nicht mit der alten mozilla-Version. Das mit dem Shockwave-Flash ist behoben.:taenzer:
Mir ist aufgefallen das ich den Quicktimeplayer nie aktualisiert habe.:stirn:
Soll ich denn den alten Mozilla weiter nehmen??

Vielen Dank und lg Lotto

schrauber

30.03.2014 12:36

Update Firefox auf die neue Version.

Lotto

26.01.2015 22:34

Hallo Schrauber,

lange hatte ich meinen PC im Griff. Jetzt scheinen wieder Virusse den PC zu verlangsamen. Laut Avira habe ich ADware/Synatix.isks
Laut Norton Security Scan hätte ich einen total verseuchten PC und sollte sofort dieses Programm Norton ..... kaufen bevor mein PC Fremdgesteuert würde .
Die wollen bestimmt nur das Programm verkaufen. Ja ich weis es nicht . Kannst du mal nachsehen?
Vielen Dank Lotto

schrauber

27.01.2015 07:44

Poste mal bitte frische FRST Logs :)

Lotto

27.01.2015 09:14

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-01-2015 01

Ran by Antje (administrator) on ANTJE-PC on 27-01-2015 09:05:05

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe

(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe

(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe

(Farbar) C:\Users\Antje\Downloads\FRST(1).exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: No Name -> {0025320D-4D37-4C73-9A5C-0C28F04068A3} -> C:\Users\Antje\AppData\LocalLow\IE-BHO\bho.dll No File

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Extension: Avira Browser Safety - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\abs@avira.com [2014-12-11]

FF Extension: Amazon-Icon - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\amazon-icon@giga.de [2014-11-11]

FF Extension: Foxi Security - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\foxi@securitii-dhfjs.com [2014-11-11]

FF Extension: Ask Toolbar - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\toolbar_MP3R-RG@apn.ask.com.xpi [2014-01-13]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-04-24]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaahhbocodnflflgmabphbhoppekghh] - C:\ProgramData\AskPartnerNetwork\Toolbar\MP3R-RG\CRX\ToolbarCR.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [378672 2015-01-26] (Symantec Corporation)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [376832 2009-11-18] (NETGEAR Inc.                           )

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-29] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-27 09:04 - 2015-01-27 09:04 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST(1).exe

2015-01-27 09:03 - 2015-01-27 09:04 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST(2).exe

2015-01-26 21:23 - 2015-01-26 21:23 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2015-01-26 21:16 - 2015-01-27 08:56 - 00000440 ____H () C:\Windows\Tasks\Norton Security Scan for Antje.job

2015-01-26 21:16 - 2015-01-26 21:16 - 00001415 _____ () C:\Users\Public\Desktop\Norton Security Scan.LNK

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\Windows\system32\Drivers\NSS

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\Program Files\Norton Security Scan

2015-01-26 10:30 - 2015-01-26 10:30 - 00000000 ____D () C:\Windows\system32\Adobe

2015-01-26 10:29 - 2015-01-26 10:30 - 13827960 _____ (Adobe Systems Inc.) C:\Users\Antje\Downloads\Shockwave_Installer_Full.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 08:42 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 08:42 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 08:42 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 08:42 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-05 18:46 - 2015-01-05 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-27 09:05 - 2014-03-21 21:30 - 00023286 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-01-27 09:05 - 2014-03-21 21:29 - 00000000 ____D () C:\FRST

2015-01-27 09:03 - 2011-12-23 21:41 - 01723369 _____ () C:\Windows\WindowsUpdate.log

2015-01-27 09:02 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-27 09:02 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-27 08:58 - 2011-12-29 15:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-01-27 08:56 - 2014-04-18 12:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-27 08:56 - 2013-06-25 14:14 - 00061456 _____ () C:\Windows\setupact.log

2015-01-27 08:56 - 2012-04-03 06:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-01-27 08:56 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-26 23:26 - 2013-12-11 18:20 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-01-26 23:26 - 2011-12-23 23:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-01-26 22:55 - 2014-04-18 12:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-26 21:16 - 2011-12-23 22:21 - 00000000 ____D () C:\ProgramData\Norton

2015-01-26 11:02 - 2014-09-16 18:23 - 00000000 ____D () C:\Users\Antje\Downloads\FRST-OlderVersion

2015-01-26 11:02 - 2014-03-21 21:29 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-01-26 09:34 - 2014-03-30 17:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-01-25 22:49 - 2014-03-28 10:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-01-20 10:01 - 2013-08-15 10:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-20 09:58 - 2009-10-14 03:21 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-11 23:35 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-08 09:55 - 2009-10-14 03:21 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-05 18:51 - 2014-07-04 16:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe
 

==================== Files in the root of some directories =======
 

2013-06-27 17:14 - 2013-06-27 16:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-06-27 17:14 - 2013-06-27 16:36 - 0708168 _____ (MindSpark) C:\Program Files\49Uninstall Utility Chest.dll

2013-01-10 11:53 - 2013-01-10 12:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 17:13 - 2012-11-11 17:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 12:04 - 2014-08-03 10:48 - 0017073 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\Quarantine.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-25 11:07
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-01-2015 01

Ran by Antje at 2015-01-27 09:11:20

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Ask Toolbar (HKLM\...\{4D503352-2D52-4700-76A7-A758B70C0A00}) (Version: 12.10.0.3802 - APN, LLC) <==== ATTENTION

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo.com Update Checker (HKLM\...\FileHippo.com) (Version:  - )

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)

Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 35.0 (x86 de) (HKLM\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\MyFreeCodec) (Version:  - )

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

Norton Security Scan (HKLM\...\NSS) (Version: 4.1.0.28 - Symantec Corporation)

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0165 - REALTEK Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

30-12-2014 09:42:17 Windows Update

02-01-2015 13:12:07 Windows Update

06-01-2015 16:44:17 Windows Update

09-01-2015 17:10:05 Windows Update

14-01-2015 08:42:35 Windows Update

20-01-2015 09:55:40 Windows Update

23-01-2015 10:35:22 Windows Update

27-01-2015 09:01:46 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2013-08-19 14:47 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-26] (Adobe Systems Incorporated)

Task: {5A682855-60A2-47AA-930F-F7825730797E} - System32\Tasks\Norton Security Scan for Antje => C:\Program Files\Norton Security Scan\Engine\4.1.0.28\Nss.exe [2014-01-27] (Symantec Corporation)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Norton Security Scan for Antje.job => C:\PROGRA~1\NORTON~2\Engine\410~1.28\Nss.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-01-27 08:56 - 2015-01-27 08:56 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0087\~df394b.tmp

2015-01-27 08:56 - 2015-01-27 08:56 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0087\~de6248.tmp

2011-12-23 22:18 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 22:18 - 2009-04-20 11:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2014-11-12 09:46 - 2014-08-04 13:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2007-09-14 09:26 - 2007-09-14 09:26 - 01695744 _____ () C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

2011-12-23 22:28 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-03-30 17:32 - 2015-01-25 22:49 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

2004-01-09 21:02 - 2004-01-09 21:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 22:08 - 2002-04-22 22:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 22:08 - 2002-04-22 22:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: FileHippo.com => "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesHelper => C:\Program Files\Samsung\Kies\KiesHelper.exe /s

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/27/2015 08:57:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xa34

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (01/27/2015 08:57:14 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (01/26/2015 09:12:20 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xe48

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (01/26/2015 09:11:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (01/26/2015 10:58:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 35.0.0.5486, Zeitstempel: 0x54af7153

Name des fehlerhaften Moduls: mozalloc.dll, Version: 35.0.0.5486, Zeitstempel: 0x54af69d4

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001425

ID des fehlerhaften Prozesses: 0x1ab0

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (01/26/2015 10:58:57 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 35.0.0.5486 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 2f3c
 

Startzeit: 01d0394ce7918059
 

Endzeit: 14
 

Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe
 

Berichts-ID:
 

Error: (01/26/2015 10:44:45 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 9c4
 

Startzeit: 01d03942eb017ce9
 

Endzeit: 16
 

Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe
 

Berichts-ID: f0b5de88-a53f-11e4-a146-00038a000015
 

Error: (01/26/2015 09:35:31 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x904

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (01/26/2015 09:35:27 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (01/25/2015 09:00:14 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x96c

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 
 

System errors:

=============

Error: (01/27/2015 08:58:25 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/27/2015 08:57:32 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/03/2013 04:56:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 42%

Total physical RAM: 3054.7 MB

Available physical RAM: 1761.32 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4434.64 MB

Total Virtual: 2047.88 MB

Available Virtual: 1912.96 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:836.92 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Danke lieber Schrauber du bist Spitze.

schrauber

27.01.2015 13:33

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Ask Toolbar

Iminent
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Lotto

27.01.2015 14:33

Hallo Schrauber das ASK Toolbar hab ich gelöscht , aber das Iminent finde ich nicht. Hast du noch einen Tip wo ich das finde??? Dankeeeeeeeeeeeee

Code:

ComboFix 15-01-27.01 - Antje 27.01.2015  14:17:32.5.2 - x86

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3055.1839 [GMT 1:00]

ausgeführt von:: c:\users\Antje\Downloads\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Antje\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-12-27 bis 2015-01-27  ))))))))))))))))))))))))))))))

.

.

2015-01-27 13:22 . 2015-01-27 13:25        --------        d-----w-        c:\users\Antje\AppData\Local\temp

2015-01-27 13:22 . 2015-01-27 13:22        --------        d-----w-        c:\users\Public\AppData\Local\temp

2015-01-27 13:22 . 2015-01-27 13:22        --------        d-----w-        c:\users\Petzold\AppData\Local\temp

2015-01-27 13:22 . 2015-01-27 13:22        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-01-27 13:22 . 2015-01-27 13:22        --------        d-----w-        c:\users\Antje.Antje-PC\AppData\Local\temp

2015-01-27 13:22 . 2015-01-27 13:22        --------        d-----w-        c:\users\Administrator\AppData\Local\temp

2015-01-27 13:21 . 2015-01-27 13:21        62576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{FAFB9C13-877F-4E54-B4AB-D2277F5D7794}\offreg.dll

2015-01-27 08:02 . 2014-12-02 11:01        9054624        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{FAFB9C13-877F-4E54-B4AB-D2277F5D7794}\mpengine.dll

2015-01-26 20:23 . 2015-01-26 20:23        --------        d-----w-        c:\program files\Common Files\Symantec Shared

2015-01-26 20:16 . 2015-01-26 20:16        --------        d-----w-        c:\windows\system32\drivers\NSS

2015-01-26 20:16 . 2015-01-26 20:16        --------        d-----w-        c:\program files\Norton Security Scan

2015-01-26 20:16 . 2015-01-26 20:16        --------        d-----w-        c:\program files\NortonInstaller

2015-01-26 09:30 . 2015-01-26 09:30        --------        d-----w-        c:\windows\system32\Adobe

2015-01-25 21:49 . 2015-01-25 21:49        73840        ----a-w-        c:\program files\Mozilla Firefox\wow_helper.exe

2015-01-14 07:43 . 2014-12-12 05:11        3971512        ----a-w-        c:\windows\system32\ntkrnlpa.exe

2015-01-14 07:43 . 2014-12-12 05:11        3916728        ----a-w-        c:\windows\system32\ntoskrnl.exe

2015-01-14 07:42 . 2014-12-19 02:43        164864        ----a-w-        c:\windows\system32\profsvc.dll

2015-01-14 07:42 . 2014-12-11 17:47        46592        ----a-w-        c:\windows\system32\TSWbPrxy.exe

2015-01-14 07:42 . 2014-12-06 03:50        242688        ----a-w-        c:\windows\system32\nlasvc.dll

2015-01-14 07:42 . 2014-12-19 01:34        116224        ----a-w-        c:\windows\system32\drivers\mrxdav.sys

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-01-26 22:26 . 2013-12-11 17:20        701616        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2015-01-26 22:26 . 2011-12-23 22:54        71344        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2015-01-08 08:55 . 2009-10-14 02:21        249488        ------w-        c:\windows\system32\MpSigStub.exe

2014-12-13 03:33 . 2014-12-18 17:28        115712        ----a-w-        c:\windows\system32\ieUnatt.exe

2014-12-04 04:38 . 2014-12-10 10:45        337920        ----a-w-        c:\windows\system32\generaltel.dll

2014-12-04 04:38 . 2014-12-10 10:45        610304        ----a-w-        c:\windows\system32\invagent.dll

2014-12-04 04:38 . 2014-12-10 10:45        315392        ----a-w-        c:\windows\system32\devinv.dll

2014-12-04 04:38 . 2014-12-10 10:45        728576        ----a-w-        c:\windows\system32\appraiser.dll

2014-12-04 04:38 . 2014-12-10 10:45        159744        ----a-w-        c:\windows\system32\aepic.dll

2014-12-04 04:38 . 2014-12-10 10:45        202752        ----a-w-        c:\windows\system32\aepdu.dll

2014-12-04 04:34 . 2014-12-10 10:45        873984        ----a-w-        c:\windows\system32\aeinv.dll

2014-12-01 23:28 . 2014-12-10 10:45        1160872        ----a-w-        c:\windows\system32\aitstatic.exe

2014-11-22 02:20 . 2014-12-10 10:44        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

2014-11-22 02:20 . 2014-12-10 10:45        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll

2014-11-22 02:07 . 2014-12-10 10:45        501248        ----a-w-        c:\windows\system32\vbscript.dll

2014-11-22 02:07 . 2014-12-10 10:44        62464        ----a-w-        c:\windows\system32\iesetup.dll

2014-11-22 02:06 . 2014-12-10 10:45        47616        ----a-w-        c:\windows\system32\ieetwproxystub.dll

2014-11-22 02:05 . 2014-12-10 10:45        64000        ----a-w-        c:\windows\system32\MshtmlDac.dll

2014-11-22 01:55 . 2014-12-10 10:45        102912        ----a-w-        c:\windows\system32\ieetwcollector.exe

2014-11-22 01:54 . 2014-12-10 10:45        620032        ----a-w-        c:\windows\system32\jscript9diag.dll

2014-11-22 01:48 . 2014-12-10 10:45        667648        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2014-11-22 01:40 . 2014-12-10 10:45        60416        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll

2014-11-22 01:29 . 2014-12-10 10:45        4299264        ----a-w-        c:\windows\system32\jscript9.dll

2014-11-22 01:22 . 2014-12-10 10:44        2052096        ----a-w-        c:\windows\system32\inetcpl.cpl

2014-11-22 01:21 . 2014-12-10 10:45        1155072        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2014-11-22 01:00 . 2014-12-10 10:45        1888256        ----a-w-        c:\windows\system32\wininet.dll

2014-11-11 02:44 . 2014-12-10 10:45        1230336        ----a-w-        c:\windows\system32\WindowsCodecs.dll

2014-11-11 02:44 . 2014-11-19 08:21        186880        ----a-w-        c:\windows\system32\pku2u.dll

2014-11-11 02:44 . 2014-11-19 08:21        550912        ----a-w-        c:\windows\system32\kerberos.dll

2014-11-11 01:32 . 2014-12-10 10:45        74752        ----a-w-        c:\windows\system32\drivers\tdx.sys

2014-11-08 02:45 . 2014-12-10 10:44        2048        ----a-w-        c:\windows\system32\tzres.dll

2014-11-04 13:56 . 2014-06-28 10:48        96680        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll

2014-10-30 01:45 . 2014-12-10 10:44        155136        ----a-w-        c:\windows\system32\charmap.exe

2013-06-27 15:36 . 2013-06-27 16:14        186752        ----a-w-        c:\program files\49res.dll

2013-06-27 15:36 . 2013-06-27 16:14        708168        ----a-w-        c:\program files\49Uninstall Utility Chest.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2014-07-25 845120]

"KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2011-07-26 958352]

"AOL Fast Start"="c:\program files\AOL 9.0 VRa\AOL.EXE" [2007-06-21 50480]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2011-02-22 2145904]

"XFastUsb"="c:\program files\XFastUsb\XFastUsb.exe" [2011-12-23 4942336]

"CTSyncService"="c:\program files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" [2009-07-08 1233195]

"VolPanel"="c:\program files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-05-04 241789]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 14848]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-12-16 702768]

"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-04 161584]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-10-15 157480]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2014-10-02 421888]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2007-9-14 1695744]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableSecureUIAPath"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean.exe

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

backup=c:\windows\pss\Dropbox.lnk.Startup

backupExtension=.Startup

.

[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk]

path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk

backup=c:\windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2014-12-19 07:48        1022152        ----a-w-        c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

2014-10-11 12:05        60712        ----a-w-        c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR11]

2011-08-19 00:04        925960        ----a-w-        c:\program files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]

2012-11-23 08:22        307712        ----a-w-        c:\program files\FileHippo.com\UpdateChecker.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]

2006-09-26 00:52        50736        ----a-w-        c:\program files\Common Files\aol\1324678810\ee\aolsoftware.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2011-05-10 01:41        49208        ----a-w-        c:\program files\HP\HP Software Update\hpwuschd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2014-10-15 04:42        157480        ----a-w-        c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]

2014-07-25 08:42        845120        ----a-w-        c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]

2014-07-25 08:42        311616        ----a-w-        c:\program files\Samsung\Kies\KiesTrayAgent.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]

2011-11-11 13:08        205336        ----a-w-        c:\program files\Logitech\LWS\Webcam Software\LWS.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]

2011-04-14 17:17        113288        ----a-w-        c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2014-10-02 13:23        421888        ----a-w-        c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]

2012-08-17 07:27        238528        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

2007-03-14 14:52        3770024        ----a-w-        c:\program files\TomTom HOME\TomTomHOME.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrayServer]

2008-08-07 16:18        90112        ----a-w-        c:\progra~1\MAGIX\VIDEO_~2\Trayserver.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinPatrol]

2014-01-24 02:20        429120        ----a-w-        c:\program files\BillP Studios\WinPatrol\WinPatrol.exe

.

R2 SmartViewService;SmartView service;c:\program files\DeviceVM\SmartView\SmartViewService.exe [x]

R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-12-23 79360]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-12-23 79360]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-06-16 89856]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]

R3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS [2012-04-19 29248]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-11-22 102912]

R3 MSICDSetup;MSICDSetup;D:\CDriver.sys [x]

R3 netr73;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]

R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-08-18 600608]

R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2011-12-23 79360]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 184192]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [2010-06-11 13832]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-14 37352]

S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [2011-12-23 14656]

S2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service;c:\program files\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]

S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-12-16 431920]

S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-08-04 149296]

S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]

S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2013-12-30 233472]

S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-07-07 72992]

S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]

S2 Realtek11nSU;Realtek11nSU;c:\program files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [2010-04-16 36864]

S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]

S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [2011-02-17 27760]

S3 CompFilter;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbusflt.sys [2012-01-18 22176]

S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2013-12-30 37344]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]

S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-04-13 67456]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-04-13 161024]

S3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2009-11-18 376832]

S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-02-17 1801328]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12        REG_MULTI_SZ           Pml Driver HPZ12 Net Driver HPZ12

HPService        REG_MULTI_SZ           HPSLPSVC

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-10-30 15:56        1089352        ----a-w-        c:\program files\Google\Chrome\Application\38.0.2125.111\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-01-27 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 22:26]

.

2015-01-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2014-04-18 11:26]

.

2015-01-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2014-04-18 11:26]

.

2015-01-27 c:\windows\Tasks\Norton Security Scan for Antje.job

- c:\progra~1\NORTON~2\Engine\410~1.28\Nss.exe [2015-01-26 06:04]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

uInternet Settings,ProxyOverride = <-loopback>;www.joosoft.com

IE: &AOL Toolbar-Suche - c:\program files\aol\aol toolbar 4.0\resources\de-DE\local\search.html

IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: {{c0e8ae32-0758-4c8d-ab71-23b361fe8964} - c:\users\Antje\AppData\Local\Temp\ie_script_fwde.htm

TCP: DhcpNameServer = 192.168.1.1

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

FF - ProfilePath - c:\users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

MSConfigStartUp-KiesHelper - c:\program files\Samsung\Kies\KiesHelper.exe

AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe

AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe

AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe

AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe

AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'Explorer.exe'(5180)

c:\windows\system32\LINKINFO.dll

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\Creative\Shared Files\CTAudSvc.exe

c:\windows\system32\atieclxx.exe

c:\program files\NVIDIA Corporation\Display\NvXDSync.exe

c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Common Files\AOL\ACS\AOLAcsd.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\windows\system32\taskhost.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\sppsvc.exe

c:\program files\REALTEK\11n USB Wireless LAN Utility\RtWlan.exe

c:\program files\Avira\AntiVir Desktop\avshadow.exe

c:\windows\system32\conhost.exe

c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files\Windows Media Player\wmpnetwk.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2015-01-27  14:28:42 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2015-01-27 13:28

ComboFix2.txt  2014-11-11 13:25

ComboFix3.txt  2014-11-06 12:26

ComboFix4.txt  2014-09-15 19:41

ComboFix5.txt  2015-01-27 13:16

.

Vor Suchlauf: 22 Verzeichnis(se), 898.422.071.296 Bytes frei

Nach Suchlauf: 23 Verzeichnis(se), 898.220.806.144 Bytes frei

.

- - End Of File - - 275981886104F9BD3C39588C1F088890

A36C5E4F47E84449FF07ED3517B43A31

Habe Combo fix scannen lassen ohne vorher das Iminent zu finden.

Danke Schrauber

schrauber

27.01.2015 20:14

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Lotto

28.01.2015 14:13

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 28.01.2015 08:37:16, SYSTEM, ANTJE-PC, Protection, Malware Protection, Starting, 

Protection, 28.01.2015 08:37:16, SYSTEM, ANTJE-PC, Protection, Malware Protection, Started, 

Protection, 28.01.2015 08:37:16, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 08:39:32, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Update, 28.01.2015 08:51:53, SYSTEM, ANTJE-PC, Manual, Malware Database, 2015.1.27.10, 2015.1.28.3, 

Protection, 28.01.2015 08:51:53, SYSTEM, ANTJE-PC, Protection, Refresh, Starting, 

Protection, 28.01.2015 08:51:53, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 28.01.2015 08:51:53, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 28.01.2015 08:52:18, SYSTEM, ANTJE-PC, Protection, Refresh, Success, 

Protection, 28.01.2015 08:52:18, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 08:52:19, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Update, 28.01.2015 10:38:26, SYSTEM, ANTJE-PC, Scheduler, Malware Database, 2015.1.28.3, 2015.1.28.4, 

Protection, 28.01.2015 10:38:26, SYSTEM, ANTJE-PC, Protection, Refresh, Starting, 

Protection, 28.01.2015 10:38:26, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 28.01.2015 10:38:26, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 28.01.2015 10:38:31, SYSTEM, ANTJE-PC, Protection, Refresh, Success, 

Protection, 28.01.2015 10:38:31, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 10:38:32, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Protection, 28.01.2015 10:40:40, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 28.01.2015 10:40:40, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 28.01.2015 10:40:40, SYSTEM, ANTJE-PC, Protection, Malware Protection, Stopping, 

Protection, 28.01.2015 10:40:40, SYSTEM, ANTJE-PC, Protection, Malware Protection, Stopped, 

Protection, 28.01.2015 10:40:59, SYSTEM, ANTJE-PC, Protection, Malware Protection, Starting, 

Protection, 28.01.2015 10:40:59, SYSTEM, ANTJE-PC, Protection, Malware Protection, Started, 

Protection, 28.01.2015 10:40:59, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 10:40:59, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Update, 28.01.2015 10:41:01, SYSTEM, ANTJE-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, 

Update, 28.01.2015 10:41:01, SYSTEM, ANTJE-PC, Manual, Rootkit Database, 2014.11.18.1, 2015.1.14.1, 

Update, 28.01.2015 10:41:07, SYSTEM, ANTJE-PC, Manual, Malware Database, 2014.11.20.6, 2015.1.28.4, 

Protection, 28.01.2015 10:41:07, SYSTEM, ANTJE-PC, Protection, Refresh, Starting, 

Protection, 28.01.2015 10:41:07, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 28.01.2015 10:41:07, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 28.01.2015 10:41:12, SYSTEM, ANTJE-PC, Protection, Refresh, Success, 

Protection, 28.01.2015 10:41:12, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 10:41:12, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Scan, 28.01.2015 10:52:59, SYSTEM, ANTJE-PC, Manual, Start:28.01.2015 10:42:36, Duration:9 min 38 sec, Threat Scan, Completed, 0 Malware Detections, 3 Non-Malware Detections, 

Protection, 28.01.2015 10:55:37, SYSTEM, ANTJE-PC, Protection, Malware Protection, Starting, 

Protection, 28.01.2015 10:55:37, SYSTEM, ANTJE-PC, Protection, Malware Protection, Started, 

Protection, 28.01.2015 10:55:37, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 10:57:54, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 

Update, 28.01.2015 11:20:59, SYSTEM, ANTJE-PC, Scheduler, Malware Database, 2015.1.28.4, 2015.1.28.5, 

Protection, 28.01.2015 11:20:59, SYSTEM, ANTJE-PC, Protection, Refresh, Starting, 

Protection, 28.01.2015 11:20:59, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopping, 

Protection, 28.01.2015 11:20:59, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Stopped, 

Protection, 28.01.2015 11:21:22, SYSTEM, ANTJE-PC, Protection, Refresh, Success, 

Protection, 28.01.2015 11:21:22, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Starting, 

Protection, 28.01.2015 11:21:22, SYSTEM, ANTJE-PC, Protection, Malicious Website Protection, Started, 
 

(end)

Hallo Schrauber das Anti Male ware gab es nur als Trialversion in Englisch ich hoffe du kannst was mir der Log-Datei anfangen. Der Rest kommt später.

Lg Und Danke Lotto

Code:

# AdwCleaner v4.109 - Bericht erstellt am 28/01/2015 um 13:54:59

# Aktualisiert 24/01/2015 von Xplode

# Database : 2015-01-26.1 [Live]

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)

# Benutzername : Antje - ANTJE-PC

# Gestartet von : C:\Users\Antje\Downloads\AdwCleaner_4.109.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Windows\system32\config\systemprofile\AppData\Roaming\Fighters
 

***** [ Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Schlüssel Gelöscht : HKCU\Software\Fighters

Schlüssel Gelöscht : HKLM\SOFTWARE\Fighters

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>;www.joosoft.com
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17496
 
 

-\\ Mozilla Firefox v35.0 (x86 de)
 
 

-\\ Google Chrome v38.0.2125.111
 
 

*************************
 

AdwCleaner[R0].txt - [13756 octets] - [27/01/2014 19:43:15]

AdwCleaner[R1].txt - [3411 octets] - [27/01/2014 19:52:54]

AdwCleaner[R2].txt - [1691 octets] - [16/09/2014 15:25:44]

AdwCleaner[R3].txt - [1448 octets] - [06/11/2014 14:07:02]

AdwCleaner[R4].txt - [1508 octets] - [06/11/2014 14:08:38]

AdwCleaner[R5].txt - [9374 octets] - [11/11/2014 13:55:25]

AdwCleaner[R6].txt - [1477 octets] - [11/11/2014 14:28:41]

AdwCleaner[R7].txt - [1753 octets] - [01/12/2014 19:10:10]

AdwCleaner[R8].txt - [2132 octets] - [14/12/2014 10:22:44]

AdwCleaner[R9].txt - [2139 octets] - [28/01/2015 13:51:57]

AdwCleaner[S0].txt - [13676 octets] - [27/01/2014 19:43:55]

AdwCleaner[S1].txt - [2553 octets] - [29/08/2014 09:03:36]

AdwCleaner[S2].txt - [1752 octets] - [16/09/2014 15:27:02]

AdwCleaner[S3].txt - [1569 octets] - [06/11/2014 14:10:08]

AdwCleaner[S4].txt - [9250 octets] - [11/11/2014 13:57:41]

AdwCleaner[S5].txt - [2193 octets] - [14/12/2014 10:52:45]

AdwCleaner[S6].txt - [2060 octets] - [28/01/2015 13:54:59]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [2120 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.1 (12.28.2014:1)

OS: Windows 7 Ultimate x86

Ran by Antje on 28.01.2015 at 14:02:08,41

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 

Successfully deleted: [File] C:\Program Files\49res.dll

Successfully deleted: [File] C:\Program Files\49Uninstall Utility Chest.dll
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Program Files\myfree codec"
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Antje\AppData\Roaming\mozilla\firefox\profiles\me88ggay.default\minidumps [3 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 28.01.2015 at 14:04:16,30

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

So das war glaub ich alles.
Bis später......Dankeeeeeeeeee

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2015

Ran by Antje (administrator) on ANTJE-PC on 28-01-2015 14:08:45

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe

(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Farbar) C:\Users\Antje\Downloads\FRST(3).exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [378672 2015-01-26] (Symantec Corporation)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-28] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [376832 2009-11-18] (NETGEAR Inc.                           )

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-29] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-28 14:07 - 2015-01-28 14:07 - 01121280 _____ (Farbar) C:\Users\Antje\Downloads\FRST(3).exe

2015-01-28 14:04 - 2015-01-28 14:04 - 00000954 _____ () C:\Users\Antje\Desktop\JRT.txt

2015-01-28 14:00 - 2015-01-28 14:00 - 01707939 _____ (Thisisu) C:\Users\Antje\Downloads\JRT(3).exe

2015-01-28 13:51 - 2015-01-28 13:51 - 02194432 _____ () C:\Users\Antje\Downloads\AdwCleaner_4.109.exe

2015-01-28 13:47 - 2015-01-28 13:47 - 00004789 _____ () C:\Users\Antje\Desktop\mbam.txt

2015-01-28 10:53 - 2015-01-28 10:54 - 00001524 _____ () C:\Mwbm.txt

2015-01-28 10:39 - 2015-01-28 10:39 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.0.4.1028(1).exe

2015-01-27 22:16 - 2015-01-28 13:59 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-27 22:16 - 2015-01-28 10:40 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-01-27 22:16 - 2015-01-28 10:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-01-27 22:16 - 2015-01-28 10:40 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-01-27 22:16 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-01-27 22:16 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-01-27 22:16 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-01-27 21:45 - 2015-01-27 21:45 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.0.4.1028.exe

2015-01-27 14:28 - 2015-01-27 14:28 - 00022122 _____ () C:\ComboFix.txt

2015-01-27 14:10 - 2015-01-27 14:10 - 05610622 ____R (Swearware) C:\Users\Antje\Downloads\ComboFix.exe

2015-01-27 13:44 - 2015-01-27 13:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95(1).exe

2015-01-27 09:04 - 2015-01-27 09:04 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST(1).exe

2015-01-27 09:03 - 2015-01-27 09:04 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST(2).exe

2015-01-26 21:23 - 2015-01-26 21:23 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2015-01-26 21:16 - 2015-01-27 08:56 - 00000440 ____H () C:\Windows\Tasks\Norton Security Scan for Antje.job

2015-01-26 21:16 - 2015-01-26 21:16 - 00001415 _____ () C:\Users\Public\Desktop\Norton Security Scan.LNK

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\Windows\system32\Drivers\NSS

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan

2015-01-26 21:16 - 2015-01-26 21:16 - 00000000 ____D () C:\Program Files\Norton Security Scan

2015-01-26 10:30 - 2015-01-26 10:30 - 00000000 ____D () C:\Windows\system32\Adobe

2015-01-26 10:29 - 2015-01-26 10:30 - 13827960 _____ (Adobe Systems Inc.) C:\Users\Antje\Downloads\Shockwave_Installer_Full.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 08:42 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 08:42 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 08:42 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 08:42 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-05 18:46 - 2015-01-05 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-28 14:09 - 2014-03-21 21:30 - 00022286 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-01-28 14:08 - 2014-03-21 21:29 - 00000000 ____D () C:\FRST

2015-01-28 14:02 - 2013-04-11 15:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-01-28 14:01 - 2011-12-23 21:41 - 01819505 _____ () C:\Windows\WindowsUpdate.log

2015-01-28 14:01 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-28 14:01 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-28 13:58 - 2011-12-29 15:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-01-28 13:56 - 2014-04-18 12:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-28 13:56 - 2013-06-25 14:14 - 00061736 _____ () C:\Windows\setupact.log

2015-01-28 13:56 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-28 13:55 - 2014-04-18 12:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-28 13:55 - 2014-01-27 19:43 - 00000000 ____D () C:\AdwCleaner

2015-01-28 13:55 - 2011-12-23 22:19 - 00695362 _____ () C:\Windows\PFRO.log

2015-01-28 13:20 - 2012-04-03 06:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-01-27 22:16 - 2013-06-13 08:51 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-27 14:28 - 2014-08-29 08:38 - 00000000 ____D () C:\Qoobox

2015-01-27 14:25 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini

2015-01-27 14:04 - 2012-01-26 12:04 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Skype

2015-01-27 13:45 - 2014-03-28 10:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-01-27 13:45 - 2014-03-13 16:38 - 00000000 ____D () C:\Program Files\VS Revo Group

2015-01-27 09:12 - 2014-03-21 21:30 - 00038127 _____ () C:\Users\Antje\Downloads\Addition.txt

2015-01-26 23:26 - 2013-12-11 18:20 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-01-26 23:26 - 2011-12-23 23:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-01-26 21:16 - 2011-12-23 22:21 - 00000000 ____D () C:\ProgramData\Norton

2015-01-26 11:02 - 2014-09-16 18:23 - 00000000 ____D () C:\Users\Antje\Downloads\FRST-OlderVersion

2015-01-26 11:02 - 2014-03-21 21:29 - 01120768 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-01-26 09:34 - 2014-03-30 17:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-01-25 22:49 - 2014-03-28 10:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-01-20 10:01 - 2013-08-15 10:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-20 09:58 - 2009-10-14 03:21 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-11 23:35 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-08 09:55 - 2009-10-14 03:21 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-05 18:51 - 2014-07-04 16:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe
 

==================== Files in the root of some directories =======
 

2013-06-27 17:14 - 2013-06-27 16:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-06-27 17:14 - 2013-06-27 16:36 - 0708168 _____ (MindSpark) C:\Program Files\49Uninstall Utility Chest.dll

2013-01-10 11:53 - 2013-01-10 12:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 17:13 - 2012-11-11 17:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 12:04 - 2014-08-03 10:48 - 0017073 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\Quarantine.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-25 11:07
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-01-2015

Ran by Antje at 2015-01-28 14:09:19

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo.com Update Checker (HKLM\...\FileHippo.com) (Version:  - )

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)

Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 35.0 (x86 de) (HKLM\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\MyFreeCodec) (Version:  - )

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

Norton Security Scan (HKLM\...\NSS) (Version: 4.1.0.28 - Symantec Corporation)

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0165 - REALTEK Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

30-12-2014 09:42:17 Windows Update

02-01-2015 13:12:07 Windows Update

06-01-2015 16:44:17 Windows Update

09-01-2015 17:10:05 Windows Update

14-01-2015 08:42:35 Windows Update

20-01-2015 09:55:40 Windows Update

23-01-2015 10:35:22 Windows Update

27-01-2015 09:01:46 Windows Update

27-01-2015 13:50:14 Revo Uninstaller's restore point - Ask Toolbar
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2015-01-27 14:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-26] (Adobe Systems Incorporated)

Task: {5A682855-60A2-47AA-930F-F7825730797E} - System32\Tasks\Norton Security Scan for Antje => C:\Program Files\Norton Security Scan\Engine\4.1.0.28\Nss.exe [2014-01-27] (Symantec Corporation)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Norton Security Scan for Antje.job => C:\PROGRA~1\NORTON~2\Engine\410~1.28\Nss.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-01-28 13:56 - 2015-01-28 13:56 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~df394b.tmp

2015-01-28 13:56 - 2015-01-28 13:56 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~de6248.tmp

2011-12-23 22:18 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 22:18 - 2009-04-20 11:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2015-01-28 08:36 - 2014-08-04 13:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2011-12-23 22:28 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2007-09-14 09:26 - 2007-09-14 09:26 - 01695744 _____ () C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

2014-03-30 17:32 - 2015-01-25 22:49 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: FileHippo.com => "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================

Error: (02/03/2013 04:56:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 41%

Total physical RAM: 3054.7 MB

Available physical RAM: 1799.68 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4375.46 MB

Total Virtual: 2047.88 MB

Available Virtual: 1912.3 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:834.52 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

schrauber

28.01.2015 18:06

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Lotto

28.01.2015 20:38

Code:

C:\AdwCleaner\Quarantine\C\Program Files\MyPC Backup\MyPC Backup.exe.vir        Variante von MSIL/MyPCBackup.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\Optimizer Pro\OptimizerPro.exe.vir        Variante von Win32/SpeedingUpMyPC Anwendung        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\Optimizer Pro\OptProCrash.dll.vir        Variante von Win32/SProtector.L evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\Optimizer Pro\OptProSmartScan.exe.vir        Variante von Win32/Adware.SpeedingUpMyPC.C Anwendung        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\DpInterface32.dll.vir        Win32/Thinknice.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\DpInterface64.dll.vir        Win64/Thinknice.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\HpUI.exe.vir        Variante von Win32/Thinknice.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\Loader32.exe.vir        Win32/Thinknice.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\Loader64.exe.vir        Win64/Thinknice.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\RSHP.exe.vir        Win32/Thinknice.G evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SearchProtect32.dll.vir        Variante von Win32/Thinknice.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SearchProtect64.dll.vir        Win64/Thinknice.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupIePluginServiceUpdate.exe.vir        Variante von Win32/ELEX.AV evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupTab.dll.vir        Win32/Thinknice.B evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\uninstall.exe.vir        Win32/Thinknice.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\WindowsSupportDll32.dll.vir        Variante von Win32/Thinknice.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Program Files\SupTab\WindowsSupportDll64.dll.vir        Variante von Win32/Thinknice.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\ProgramData\CoupScanner\NdhmOa53Fxh5ZB.dll.vir        Variante von Win32/Adware.MultiPlug.EG Anwendung        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\ProgramData\CoupScanner\NdhmOa53Fxh5ZB.exe.vir        Variante von Win32/AdWare.MultiPlug.BN Anwendung        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir        Variante von Win32/ELEX.AV evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Users\Antje\AppData\Local\Temp\OptimizerPro.exe.vir        Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\I1D@1yVz.org\content\bg.js.vir        JS/Kryptik.ATB Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Users\Antje\AppData\Roaming\Security Systems\uninstall.exe.vir        Variante von Win32/Adware.Synatix.A Anwendung        Gesäubert durch Löschen - in Quarantäne kopiert

C:\AdwCleaner\Quarantine\C\Users\Antje\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir        Win32/Systweak.G evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Program Files\49Uninstall Utility Chest.dll        Win32/Toolbar.MyWebSearch.W evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Qoobox\Quarantine\C\Users\Antje\AppData\Local\nsa84B1.tmp.vir        Win32/AnyProtect.F evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Qoobox\Quarantine\C\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flbijmemdbkngmpkbgodpjhoiicaciol\4.4\QMc.js.vir        JS/Kryptik.ATB Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert

C:\Qoobox\Quarantine\C\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmaalfaappddkggilhahaebfhdmmmngf\122\BJ2hAK.js.vir        JS/Kryptik.ATB Trojaner        Gesäubert durch Löschen - in Quarantäne kopiert

C:\Users\Antje\Desktop\Musikstudio17\audacity-win-unicode-1.3.12.exe        Variante von Win32/Downloader.JooSoft.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Desktop\Neuer Ordner (2)\iLividSetupV1.exe        Variante von Win32/Toolbar.SearchSuite.Z evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Documents\Documents\IE9-WindowsVista-x86-deu.exe        Variante von Win32/Downloader.JooSoft.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Documents\Documents\iLividSetupV1.exe        Variante von Win32/Toolbar.SearchSuite.Z evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\Beauty-Studio---Hair-Master-lnstall.exe        Win32/WinloadSDA.I evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\cbsidlm-cbsi188-AOL-ORG_DE-75553800.exe        Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\cbsidlm-tr1_13-Adblock_IE-ORG-75650179.exe        Win32/DownloadAdmin.G evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\cbsidlm-tr1_13-Super_Ad_Blocker-ORG-10295147.exe        Win32/DownloadAdmin.G evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\cbsidlm-tr1_13-WOT_Web_of_Trust_for_Internet_Explorer-ORG-10777505.exe        Win32/DownloadAdmin.G evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\install_flash_player_32bit.exe        Variante von Win32/Downloader.JooSoft.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Users\Antje\Downloads\mp3rocket.exe        Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

C:\Windows\Installer\ce4d4d.msi        Variante von Win32/Toolbar.Iminent.E evtl. unerwünschte Anwendung        gelöscht - in Quarantäne kopiert

Code:

UNSUPPORTED OPERATING SYSTEM! ABORTED!

hallo Schrauber das ergebnis ist glaub ich nicht richtig oder???

LG Lotto

schrauber

29.01.2015 07:13

Passt schon, das frische FRST log und die Antwort auf meine Frage fehlt aber noch :)

Lotto

29.01.2015 10:57

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2015 01

Ran by Antje (administrator) on ANTJE-PC on 29-01-2015 10:32:52

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe

(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-10-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-29] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [376832 2009-11-18] (NETGEAR Inc.                           )

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-29] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-28 20:38 - 2015-01-28 20:38 - 00852573 _____ () C:\Users\Antje\Downloads\SecurityCheck(2).exe

2015-01-28 20:34 - 2015-01-28 20:34 - 00852573 _____ () C:\Users\Antje\Downloads\SecurityCheck(1).exe

2015-01-28 18:56 - 2015-01-28 18:56 - 02347384 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu.exe

2015-01-28 14:04 - 2015-01-28 14:04 - 00000954 _____ () C:\Users\Antje\Desktop\JRT.txt

2015-01-28 14:00 - 2015-01-28 14:00 - 01707939 _____ (Thisisu) C:\Users\Antje\Downloads\JRT(3).exe

2015-01-28 13:51 - 2015-01-28 13:51 - 02194432 _____ () C:\Users\Antje\Downloads\AdwCleaner_4.109.exe

2015-01-28 13:47 - 2015-01-28 13:47 - 00004789 _____ () C:\Users\Antje\Desktop\mbam.txt

2015-01-28 10:53 - 2015-01-28 10:54 - 00001524 _____ () C:\Mwbm.txt

2015-01-28 10:39 - 2015-01-28 10:39 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.0.4.1028(1).exe

2015-01-27 22:16 - 2015-01-29 10:26 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-27 22:16 - 2015-01-28 10:40 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-01-27 22:16 - 2015-01-28 10:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-01-27 22:16 - 2015-01-28 10:40 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-01-27 22:16 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-01-27 22:16 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-01-27 22:16 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-01-27 21:45 - 2015-01-27 21:45 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.0.4.1028.exe

2015-01-27 14:28 - 2015-01-27 14:28 - 00022122 _____ () C:\ComboFix.txt

2015-01-27 14:10 - 2015-01-27 14:10 - 05610622 ____R (Swearware) C:\Users\Antje\Downloads\ComboFix.exe

2015-01-27 13:44 - 2015-01-27 13:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95(1).exe

2015-01-26 21:23 - 2015-01-28 20:43 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2015-01-26 10:30 - 2015-01-26 10:30 - 00000000 ____D () C:\Windows\system32\Adobe

2015-01-26 10:29 - 2015-01-26 10:30 - 13827960 _____ (Adobe Systems Inc.) C:\Users\Antje\Downloads\Shockwave_Installer_Full.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-01-14 08:43 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 08:42 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 08:42 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 08:42 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 08:42 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-05 18:46 - 2015-01-05 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-01-29 10:33 - 2014-03-21 21:30 - 00022523 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-01-29 10:32 - 2014-09-16 18:23 - 00000000 ____D () C:\Users\Antje\Downloads\FRST-OlderVersion

2015-01-29 10:32 - 2014-03-21 21:29 - 01121792 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-01-29 10:32 - 2014-03-21 21:29 - 00000000 ____D () C:\FRST

2015-01-29 10:20 - 2012-04-03 06:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-01-29 10:11 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-29 10:11 - 2009-07-14 05:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-29 09:55 - 2014-04-18 12:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-29 09:55 - 2011-12-23 21:41 - 01862577 _____ () C:\Windows\WindowsUpdate.log

2015-01-29 09:54 - 2011-12-29 15:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-01-29 09:51 - 2014-04-18 12:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-29 09:51 - 2013-06-25 14:14 - 00061792 _____ () C:\Windows\setupact.log

2015-01-29 09:51 - 2011-12-23 22:19 - 00704698 _____ () C:\Windows\PFRO.log

2015-01-29 09:51 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-28 20:22 - 2011-12-24 00:09 - 00000000 ____D () C:\Users\Antje\Desktop\Neuer Ordner (2)

2015-01-28 20:22 - 2011-12-24 00:04 - 00000000 ____D () C:\Users\Antje\Desktop\Musikstudio17

2015-01-28 17:09 - 2009-07-14 03:04 - 00000772 _____ () C:\Windows\win.ini

2015-01-28 14:09 - 2014-03-21 21:30 - 00029568 _____ () C:\Users\Antje\Downloads\Addition.txt

2015-01-28 14:02 - 2013-04-11 15:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-01-28 13:55 - 2014-01-27 19:43 - 00000000 ____D () C:\AdwCleaner

2015-01-27 22:16 - 2013-06-13 08:51 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-01-27 14:28 - 2014-08-29 08:38 - 00000000 ____D () C:\Qoobox

2015-01-27 14:25 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini

2015-01-27 14:04 - 2012-01-26 12:04 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Skype

2015-01-27 13:45 - 2014-03-28 10:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-01-27 13:45 - 2014-03-13 16:38 - 00000000 ____D () C:\Program Files\VS Revo Group

2015-01-26 23:26 - 2013-12-11 18:20 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-01-26 23:26 - 2011-12-23 23:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-01-26 21:16 - 2011-12-23 22:21 - 00000000 ____D () C:\ProgramData\Norton

2015-01-26 09:34 - 2014-03-30 17:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-01-25 22:49 - 2014-03-28 10:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-01-20 10:01 - 2013-08-15 10:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-20 09:58 - 2009-10-14 03:21 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-11 23:35 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-08 09:55 - 2009-10-14 03:21 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-01-05 18:51 - 2014-07-04 16:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe
 

==================== Files in the root of some directories =======
 

2013-06-27 17:14 - 2013-06-27 16:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 11:53 - 2013-01-10 12:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 17:13 - 2012-11-11 17:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 12:04 - 2014-08-03 10:48 - 0017073 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\Quarantine.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-01-25 11:07
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-01-2015 01

Ran by Antje at 2015-01-29 10:33:23

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo.com Update Checker (HKLM\...\FileHippo.com) (Version:  - )

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)

Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 35.0 (x86 de) (HKLM\...\Mozilla Firefox 35.0 (x86 de)) (Version: 35.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\MyFreeCodec) (Version:  - )

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0165 - REALTEK Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

30-12-2014 09:42:17 Windows Update

02-01-2015 13:12:07 Windows Update

06-01-2015 16:44:17 Windows Update

09-01-2015 17:10:05 Windows Update

14-01-2015 08:42:35 Windows Update

20-01-2015 09:55:40 Windows Update

23-01-2015 10:35:22 Windows Update

27-01-2015 09:01:46 Windows Update

27-01-2015 13:50:14 Revo Uninstaller's restore point - Ask Toolbar
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2015-01-27 14:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-26] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 22:11 - 2011-02-22 07:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-01-29 09:51 - 2015-01-29 09:51 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0001\~df394b.tmp

2015-01-29 09:51 - 2015-01-29 09:51 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0001\~de6248.tmp

2011-12-23 22:18 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 22:18 - 2009-04-20 11:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2015-01-28 08:36 - 2014-08-04 13:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2007-09-14 09:26 - 2007-09-14 09:26 - 01695744 _____ () C:\Program Files\NETGEAR\WG111v3\WG111v3.exe

2004-01-09 21:02 - 2004-01-09 21:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 22:08 - 2002-04-22 22:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 22:08 - 2002-04-22 22:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll

2011-12-23 22:28 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll

2014-08-04 13:20 - 2014-08-04 13:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-03-30 17:32 - 2015-01-25 22:49 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: FileHippo.com => "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/29/2015 09:52:01 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xacc

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (01/29/2015 09:51:43 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 
 

System errors:

=============

Error: (01/29/2015 10:26:37 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 10:26:14 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (01/29/2015 09:53:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/03/2013 04:56:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 39%

Total physical RAM: 3054.7 MB

Available physical RAM: 1847.57 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4422.18 MB

Total Virtual: 2047.88 MB

Available Virtual: 1917.5 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:835.34 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hallo lieber Schrauber, wegen deiner Frage noch Probleme......es ist alles viel schneller geworden und bleibt nicht hängen. Das ist schon mal gut.
Ich würde noch bischen testen wollen ob es geht oder was noch komisch ist.....
Ich habe noch eine Frage, welchen Player (Für Spiele) kann ich denn runterladen ?
Da hatte ich einen der wollte stets beim start vom pc ein neues update. Manchmal mehrmals am Tag , das ist schon komisch??
ok.
Ansonsten vielen Dank für deine schnelle und proffessionelle und nette Hilfe.

LG Lotto

schrauber

29.01.2015 17:20

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files\49Uninstall Utility Chest.dll

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Frisches FRST log bitte.

Zitat:

Ich habe noch eine Frage, welchen Player (Für Spiele) kann ich denn runterladen ?

Was meinst du? Was für Spiele?

Lotto

29.01.2015 22:53

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-01-2015 01

Ran by Antje at 2015-01-29 22:34:59 Run:1

Running from C:\Users\Antje\Desktop

Loaded Profiles: Antje (Available profiles: Antje)

Boot Mode: Normal
 

==============================================
 

Content of fixlist:

*****************

C:\Program Files\49Uninstall Utility Chest.dll

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

Emptytemp:

         

*****************
 

"C:\Program Files\49Uninstall Utility Chest.dll" => File/Directory not found.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

"HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

EmptyTemp: => Removed 444.6 MB temporary data.
 
 

The system needed a reboot. 
 

==== End of Fixlog 22:39:20 ====

Hallo Schrauber,
chrome deinstalieren ging nicht bis zum Ende durch. Also noch mal gemacht da war Chrom nicht mehr im Revi uninstaller zu sehen.
Dann hab ich das neu runtergeladen und installiert. Das zurücksetzen ..dein zweiter Punkt hab ich auch nicht gefunden.
Das mit der Fixlist ging ganz stockend hat aber geantwortet.

Mit den Spielen meine ich allgemein zum Beispiel my free Zoo oder so was von facebook....lach . Dafür gibt es doch den Adobe flash player und ne nummer. Nun wollte ich wissen welcher gut ist.
ok das war es erst mal .
Vielen Dank und LG Lotto

schrauber

30.01.2015 09:44

Zitat:

Das zurücksetzen ..dein zweiter Punkt hab ich auch nicht gefunden.

Was heisst nicht gefunden?

Lotto

30.01.2015 11:21

Die Browsereinstellungen bei Google zurücksetzen hab ich nicht gefunden

schrauber

30.01.2015 14:25

Zitat:

Browsereinstellungen zurücksetzen

Klicken Sie in der Symbolleiste des Browsers auf das Chrome-Menü. Chrome menu
Wählen Sie Einstellungen aus.
Klicken Sie unten auf Erweiterte Einstellungen anzeigen.
Klicken Sie im Abschnitt "Browsereinstellungen zurücksetzen" auf Browsereinstellungen zurücksetzen.
Klicken Sie im daraufhin angezeigten Dialogfeld auf Zurücksetzen.

Ist doch eigentlich Schritt für Schritt beschrieben. In die Einstellungen gehen, dort ist halt wichtig auch ganz unten auf Erweiterte Einstellungen anzeigen zu klicken.

Lotto

30.01.2015 21:31

Hallo Schrauber, ich hatte den Google gar nicht sondern den Mozilla..lach jetzt hab ich das gefunden und zurückgesetzt.

Danke

Wie geht es weiter?

LG Lotto

schrauber

31.01.2015 11:44

Aso :)

Bestehen aktuell noch Probleme?

Lotto

31.01.2015 16:00

Hallo Schrauber es ist im Moment grade alles ganz toll.
Vielen Dank für deine Hilfe. Ich empfehle dich und die Seite stets weiter.

LG Lotto

schrauber

31.01.2015 21:06

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Lotto

03.02.2015 09:36

Hallo Schrauber,
ich habe soweit alles oben beschriebene erledigt. Nur das secunia bekomme ich nicht zum laufen. Das Programm habe ich schon drei mal runtergeladen. Es installiert sich vielleicht nicht richtig. Auf alle Fälle überprüft es ganz lange und weiter nichts nur prüfen .....ewig.
LG Lotto

schrauber

03.02.2015 12:02

Lass Secunia weg, und teste mal den FileHippo Updatechecker :)

Software zu 'filehippo' - FilePony.de

Lotto

04.02.2015 10:54

Ok Schrauber ich habe das filehippo drauf.
Dann noch mal Danke und bis zum nächsten mal.

LG Lotto

schrauber

04.02.2015 19:03

Gern Geschehen :)

Lotto

06.02.2015 10:35

Hallo Schrauber,
gestern abend hat sich meine nachbarin bei Euch angemeldet..Name ...Mandala

Die hatte irgend ne Rechnung von paypal in einer Mail das war total komisch. Das könnten Hacker oder so was sein kuckst du das an???

LG Lotto

schrauber

06.02.2015 13:24

Kann ich Dir so gar nicht sagen, ich hab jede Menge User in Arbeit :)

Lotto

31.03.2015 20:30

kein

Hallo Schrauber,
kannst du mich bitte wieder mit aufnehmen. :applaus:
Es geht alles sehr langsam, sogar manchmal in Zeitlupe. Emails gehen langsam auf, wenn man was runterladen möchte geht das nicht.
Wenn ich eine Mail schreiben möchte schreibt das nicht und nach einer Weile kommt dann ein Buchstabe nach dem anderen und setzt sich dort hin.:stirn: Da kann man ja bekloppt werden.

Bitte bitte helfe mir.
Danke Lotto:applaus:

schrauber

01.04.2015 08:46

Poste mal bitte FRST Logs :)

Lotto

01.04.2015 09:28

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Antje (administrator) on ANTJE-PC on 01-04-2015 10:22:56

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(NETGEAR) C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-04] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-04] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Inbox Suchen

FF Homepage: hxxp://www.gmx.net/

FF Keyword.URL: hxxp://www2.inbox.com/search/dispatcher.aspx?tp=sf&tbid=82011&iwk=350&language=de&qkw=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-31] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-11-03] (Apple Inc.)

FF SearchPlugin: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\searchplugins\inbox-search.xml [2015-03-10]

FF Extension: GMX MailCheck - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\toolbar@gmx.net [2015-02-27]

FF Extension: WOT - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-03]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-03]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-03]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

R2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R2 NPF; C:\Windows\system32\drivers\npf.sys [35088 2015-03-11] (CACE Technologies, Inc.)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [File not signed]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-01 10:22 - 2015-04-01 10:23 - 00024791 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-04-01 10:22 - 2015-04-01 10:23 - 00000000 ____D () C:\FRST

2015-04-01 10:22 - 2015-04-01 10:22 - 01135104 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-03-31 11:26 - 2015-03-31 11:44 - 00000000 ____D () C:\Users\Antje\Desktop\Reiki2

2015-03-23 13:15 - 2015-03-23 13:16 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-03-15 13:52 - 2015-03-15 13:52 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:51 - 06805896 _____ (Disc Soft Ltd) C:\Users\Antje\Downloads\DTUSB200-0067.exe

2015-03-12 13:57 - 2015-03-12 13:57 - 00000000 ____T () C:\Windows\system32\HP_192.168.1.6_CN15JJ40V105HR

2015-03-11 15:03 - 2015-03-11 15:03 - 00016408 _____ () C:\Users\Antje\Downloads\NETGEAR_WGR614v9.cfg

2015-03-11 14:38 - 2015-03-11 18:20 - 00000095 _____ () C:\Users\Antje\Desktop\Neues Textdokument.txt

2015-03-11 13:51 - 2015-03-11 13:51 - 00002012 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk

2015-03-11 13:51 - 2015-03-11 13:51 - 00002000 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk

2015-03-11 13:38 - 2015-03-11 13:38 - 00000000 ____D () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1)

2015-03-11 13:34 - 2015-03-11 13:34 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1).zip

2015-03-11 12:01 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 12:01 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 12:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 12:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 12:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 12:01 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 12:01 - 2015-02-20 04:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 12:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 12:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 12:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 12:01 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 12:01 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 12:01 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 12:01 - 2015-02-20 03:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 12:01 - 2015-02-20 03:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 12:01 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 12:01 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 12:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 12:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 12:01 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 12:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 12:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 12:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 12:01 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 12:01 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 12:01 - 2015-01-31 05:32 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 12:01 - 2015-01-31 04:52 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 12:01 - 2015-01-31 04:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-03-11 12:01 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 12:00 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 12:00 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 12:00 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 12:00 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 12:00 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 12:00 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 12:00 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 12:00 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 12:00 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 12:00 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 12:00 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 12:00 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 12:00 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 12:00 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 12:00 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 12:00 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 12:00 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 12:00 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 12:00 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 12:00 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 12:00 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 12:00 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-03-10 22:53 - 2015-03-10 22:53 - 02623304 _____ (Xacti, LLC ) C:\Users\Antje\Downloads\RadioSetup.exe

2015-03-10 17:37 - 2015-03-10 17:37 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany).zip

2015-03-10 17:09 - 2015-04-01 09:21 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-10 17:00 - 2015-03-11 13:50 - 00000000 ____D () C:\Program Files\NETGEAR Genie

2015-03-10 16:36 - 2015-03-10 16:36 - 00000000 __SHD () C:\Users\Antje\AppData\Local\EmieBrowserModeList

2015-03-10 16:31 - 2015-03-10 16:31 - 00002009 _____ () C:\Users\Public\Desktop\NETGEAR WG111v3 Smart Wizard.lnk

2015-03-10 16:30 - 2015-03-19 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard

2015-03-10 16:17 - 2015-03-10 16:17 - 00010845 _____ () C:\Windows\system32\MultiLanguage.tmp

2015-03-10 16:17 - 2015-03-10 16:17 - 00000019 _____ () C:\Windows\system32\WG511v2_OEM.tmp

2015-03-10 14:05 - 2015-03-11 13:51 - 00000000 ____D () C:\Users\Antje\AppData\Local\NETGEARGenie

2015-03-10 14:04 - 2015-03-11 13:50 - 00281104 _____ (CACE Technologies, Inc.) C:\Windows\system32\wpcap.dll

2015-03-10 14:04 - 2015-03-11 13:50 - 00096784 _____ (CACE Technologies, Inc.) C:\Windows\system32\packet.dll

2015-03-10 14:04 - 2015-03-11 13:50 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2015-03-10 14:03 - 2015-03-10 14:04 - 39316824 _____ (NETGEAR Inc.) C:\Users\Antje\Downloads\NETGEARGenie-install2.3.1.57.exe

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\Program Files\TomTom HOME 2

2015-03-09 21:23 - 2015-03-09 21:23 - 31122120 _____ () C:\Users\Antje\Downloads\TomTomHOME2winlatest.exe

2015-03-06 13:47 - 2015-03-06 13:47 - 02347384 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-01 09:57 - 2015-02-06 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-01 09:41 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-01 09:41 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-01 09:30 - 2014-04-18 13:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-01 09:28 - 2012-10-17 09:53 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Avira

2015-04-01 09:28 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-01 09:27 - 2012-10-17 09:48 - 00001952 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2015-04-01 09:27 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Avira

2015-04-01 09:26 - 2011-12-23 22:55 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-01 09:24 - 2011-12-23 22:41 - 01954465 _____ () C:\Windows\WindowsUpdate.log

2015-04-01 09:22 - 2011-12-29 16:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-04-01 09:20 - 2014-04-18 13:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-01 09:20 - 2013-06-25 15:14 - 00067112 _____ () C:\Windows\setupact.log

2015-04-01 09:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-31 11:48 - 2011-12-23 23:15 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Adobe

2015-03-31 10:20 - 2015-02-06 18:13 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-03-31 10:20 - 2015-02-06 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-03-31 10:20 - 2014-07-04 17:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe

2015-03-23 13:26 - 2011-12-23 23:19 - 00710744 _____ () C:\Windows\PFRO.log

2015-03-23 13:16 - 2013-06-13 09:51 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Malwarebytes

2015-03-22 22:44 - 2013-04-11 16:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-03-22 22:43 - 2013-06-27 16:55 - 00000000 ____D () C:\Program Files\SpywareBlaster

2015-03-19 18:05 - 2011-12-23 22:50 - 00000000 ____D () C:\Users\Antje

2015-03-19 18:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration

2015-03-18 12:07 - 2014-03-30 18:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-03-17 18:28 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-03-15 14:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-12 13:59 - 2014-08-03 10:59 - 00241058 _____ () C:\Windows\hpwins28.dat

2015-03-12 13:59 - 2012-01-21 13:04 - 00017444 _____ () C:\ProgramData\hpzinstall.log

2015-03-12 13:56 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32

2015-03-12 11:33 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-03-11 14:28 - 2012-03-26 20:46 - 00000000 ____D () C:\Netgear

2015-03-11 12:49 - 2009-07-14 06:33 - 00493648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-11 12:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-03-11 12:40 - 2013-08-15 11:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-11 12:38 - 2009-10-14 04:21 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-03-10 16:31 - 2011-12-23 23:05 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-03-09 21:19 - 2012-02-22 12:56 - 00000000 ____D () C:\Users\Antje\AppData\Local\Downloaded Installations

2015-03-05 11:38 - 2013-05-07 16:00 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
 

==================== Files in the root of some directories =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\bitool.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-15 13:49
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Antje at 2015-04-01 10:23:34

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\MyFreeCodec) (Version:  - )

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

10-03-2015 16:10:33 Installiert NETGEAR WG111v3 wireless USB 2.0 adapter

10-03-2015 16:26:24 Konfiguriert NETGEAR WG111v3 wireless USB 2.0 adapter

10-03-2015 16:30:41 Installiert NETGEAR WG111v3 wireless USB 2.0 adapter

11-03-2015 12:34:42 Windows Update

15-03-2015 13:52:18 Gerätetreiber-Paketinstallation: Disc Soft Ltd USB-Controller

17-03-2015 18:15:56 Windows Update

19-03-2015 17:59:08 Konfiguriert NETGEAR WG111v3 wireless USB 2.0 adapter

19-03-2015 18:02:26 Wiederherstellungsvorgang

21-03-2015 10:24:32 Windows Update

24-03-2015 10:44:34 Windows Update

30-03-2015 21:17:28 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-01-27 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-31] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-04-01 09:20 - 2015-04-01 09:20 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0092\~df394b.tmp

2015-04-01 09:20 - 2015-04-01 09:20 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0092\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-06-19 04:22 - 2014-06-19 04:22 - 02177405 _____ () C:\Program Files\NETGEAR Genie\bin\drivers\libntgr_api.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2004-01-09 22:02 - 2004-01-09 22:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

2015-01-29 23:41 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: FileHippo.com => "C:\Program Files\FileHippo.com\UpdateChecker.exe" /background

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/01/2015 09:21:46 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/01/2015 09:21:46 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (04/01/2015 09:21:22 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x528

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/01/2015 09:21:04 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (03/31/2015 09:05:50 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xa34

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (03/31/2015 09:05:32 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (03/31/2015 10:17:51 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x87c

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (03/31/2015 10:17:31 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (03/30/2015 09:13:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (03/30/2015 09:13:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 
 

System errors:

=============

Error: (04/01/2015 10:20:15 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 10:18:09 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 10:13:09 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 10:11:01 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 10:06:01 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 10:03:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 09:58:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 09:56:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 09:51:47 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/01/2015 09:49:39 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 46%

Total physical RAM: 3054.7 MB

Available physical RAM: 1647.85 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4408.24 MB

Total Virtual: 2047.88 MB

Available Virtual: 1885.26 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:835.66 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hallo Schrauber :dankeschoen: für die Hilfe.

LG Lotto:bussi::bussi:

schrauber

01.04.2015 12:07

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Iminent
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Lotto

01.04.2015 20:53

Code:

ComboFix 15-04-01.01 - Antje 01.04.2015  21:31:33.1.2 - x86

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3055.1897 [GMT 2:00]

ausgeführt von:: c:\users\Antje\Downloads\ComboFix.exe

AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Antje\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll

c:\windows\system32\Packet.dll

c:\windows\system32\wpcap.dll

.

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_NPF

-------\Service_NPF

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-03-01 bis 2015-04-01  ))))))))))))))))))))))))))))))

.

.

2015-04-01 19:44 . 2015-04-01 19:46        --------        d-----w-        c:\users\Antje\AppData\Local\temp

2015-04-01 19:44 . 2015-04-01 19:44        --------        d-----w-        c:\users\Public\AppData\Local\temp

2015-04-01 19:44 . 2015-04-01 19:44        --------        d-----w-        c:\users\Petzold\AppData\Local\temp

2015-04-01 19:44 . 2015-04-01 19:44        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-04-01 19:44 . 2015-04-01 19:44        --------        d-----w-        c:\users\Antje.Antje-PC\AppData\Local\temp

2015-04-01 19:44 . 2015-04-01 19:44        --------        d-----w-        c:\users\Administrator\AppData\Local\temp

2015-04-01 19:40 . 2015-04-01 19:40        62576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{6483934C-C342-4606-A7B2-085ED3F11A8C}\offreg.dll

2015-04-01 08:22 . 2015-04-01 08:24        --------        d-----w-        C:\FRST

2015-03-31 19:09 . 2015-03-14 10:06        9119072        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{6483934C-C342-4606-A7B2-085ED3F11A8C}\mpengine.dll

2015-03-23 11:15 . 2015-03-23 11:16        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware

2015-03-17 16:28 . 2015-03-17 16:28        970912        ----a-w-        c:\program files\Mozilla Firefox\msvcr120.dll

2015-03-17 16:28 . 2015-03-17 16:28        455328        ----a-w-        c:\program files\Mozilla Firefox\msvcp120.dll

2015-03-17 16:28 . 2015-03-17 16:28        3466856        ----a-w-        c:\program files\Mozilla Firefox\d3dcompiler_47.dll

2015-03-17 16:28 . 2015-03-17 16:28        169584        ----a-w-        c:\program files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll

2015-03-15 11:52 . 2015-03-15 11:52        --------        d-----w-        c:\users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 11:51 . 2015-03-15 11:53        --------        d-----w-        c:\programdata\DAEMON Tools USB

2015-03-11 10:00 . 2015-02-03 03:12        171520        ----a-w-        c:\windows\system32\ubpm.dll

2015-03-10 15:00 . 2015-03-11 11:50        --------        d-----w-        c:\program files\NETGEAR Genie

2015-03-10 14:36 . 2015-03-10 14:36        --------        d-sh--w-        c:\users\Antje\AppData\Local\EmieBrowserModeList

2015-03-10 14:17 . 2015-03-10 14:17        19        ----a-w-        c:\windows\system32\WG511v2_OEM.tmp

2015-03-10 14:17 . 2015-03-10 14:17        10845        ----a-w-        c:\windows\system32\MultiLanguage.tmp

2015-03-10 12:05 . 2015-03-11 11:51        --------        d-----w-        c:\users\Antje\AppData\Local\NETGEARGenie

2015-03-10 12:04 . 2015-03-11 11:50        35088        ----a-w-        c:\windows\system32\drivers\npf.sys

2015-03-09 19:24 . 2015-03-09 19:24        --------        d-----w-        c:\program files\TomTom HOME 2

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-03-31 08:20 . 2015-02-06 16:13        778928        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2015-03-31 08:20 . 2015-02-06 16:13        142512        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2015-03-05 09:38 . 2013-05-07 14:00        37896        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2015-03-05 09:38 . 2012-10-17 07:48        136216        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2015-03-05 09:38 . 2012-10-17 07:48        105864        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2015-02-24 03:23 . 2009-10-14 02:21        246920        ------w-        c:\windows\system32\MpSigStub.exe

2015-02-04 02:54 . 2015-02-11 09:42        482304        ----a-w-        c:\windows\system32\generaltel.dll

2015-02-04 02:53 . 2015-02-11 09:42        621056        ----a-w-        c:\windows\system32\invagent.dll

2015-02-04 02:53 . 2015-02-11 09:42        325632        ----a-w-        c:\windows\system32\devinv.dll

2015-02-04 02:53 . 2015-02-11 09:42        767488        ----a-w-        c:\windows\system32\appraiser.dll

2015-02-04 02:53 . 2015-02-11 09:42        202752        ----a-w-        c:\windows\system32\aepdu.dll

2015-02-04 02:53 . 2015-02-11 09:42        159744        ----a-w-        c:\windows\system32\aepic.dll

2015-02-04 02:49 . 2015-02-11 09:42        886784        ----a-w-        c:\windows\system32\aeinv.dll

2015-01-27 23:36 . 2015-02-11 09:42        1167520        ----a-w-        c:\windows\system32\aitstatic.exe

2015-01-09 02:48 . 2015-02-26 09:26        76800        ----a-w-        c:\windows\system32\wdi.dll

2015-01-09 02:48 . 2015-02-26 09:26        635904        ----a-w-        c:\windows\system32\perftrack.dll

2015-01-09 02:48 . 2015-02-26 09:26        27136        ----a-w-        c:\windows\system32\powertracker.dll

2013-06-27 15:36 . 2013-06-27 16:14        186752        ----a-w-        c:\program files\49res.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2012-08-17 07:27        220608        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2014-07-25 845120]

"KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2011-07-26 958352]

"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2014-12-19 248176]

"NETGEARGenie"="c:\program files\NETGEAR Genie\bin\NETGEARGenie.exe" [2014-12-15 602880]

"AOL Fast Start"="c:\program files\AOL 9.0 VRa\AOL.EXE" [2007-06-21 50480]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2011-02-22 2145904]

"XFastUsb"="c:\program files\XFastUsb\XFastUsb.exe" [2011-12-23 4942336]

"CTSyncService"="c:\program files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" [2009-07-08 1233195]

"VolPanel"="c:\program files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-05-04 241789]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 14848]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-04-01 726320]

"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-04 161584]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2014-10-02 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-02-13 157480]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2007-9-14 1695744]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableSecureUIAPath"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean.exe

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

backup=c:\windows\pss\Dropbox.lnk.Startup

backupExtension=.Startup

.

[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk]

path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk

backup=c:\windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2014-12-19 07:48        1022152        ----a-w-        c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

2015-02-13 03:20        60712        ----a-w-        c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR11]

2011-08-19 00:04        925960        ----a-w-        c:\program files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]

2006-09-26 00:52        50736        ----a-w-        c:\program files\Common Files\aol\1324678810\ee\aolsoftware.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2011-05-10 01:41        49208        ----a-w-        c:\program files\HP\HP Software Update\hpwuschd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2015-02-13 06:55        157480        ----a-w-        c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]

2014-07-25 08:42        845120        ----a-w-        c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]

2014-07-25 08:42        311616        ----a-w-        c:\program files\Samsung\Kies\KiesTrayAgent.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]

2011-11-11 13:08        205336        ----a-w-        c:\program files\Logitech\LWS\Webcam Software\LWS.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]

2011-04-14 17:17        113288        ----a-w-        c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2014-10-02 13:23        421888        ----a-w-        c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]

2012-08-17 07:27        238528        ----a-w-        c:\users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

2007-03-14 14:52        3770024        ----a-w-        c:\program files\TomTom HOME\TomTomHOME.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrayServer]

2008-08-07 16:18        90112        ----a-w-        c:\progra~1\MAGIX\VIDEO_~2\Trayserver.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinPatrol]

2014-01-24 02:20        429120        ----a-w-        c:\program files\BillP Studios\WinPatrol\WinPatrol.exe

.

R2 AntiVirMailService;Avira Email-Schutz;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2015-04-01 815920]

R2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2015-04-01 1004280]

R2 NETGEARGenieDaemon;NETGEARGenieDaemon;c:\program files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [2014-12-15 195840]

R2 SmartViewService;SmartView service;c:\program files\DeviceVM\SmartView\SmartViewService.exe [x]

R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-12-23 79360]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-12-23 79360]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-06-16 89856]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]

R3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS [2012-04-19 29248]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-02-20 102912]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [x]

R3 MSICDSetup;MSICDSetup;D:\CDriver.sys [x]

R3 netr73;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2015-01-31 15872]

R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [x]

R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2011-12-23 79360]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 184192]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [2010-06-11 13832]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-14 37352]

S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [2011-12-23 14656]

S2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service;c:\program files\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]

S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-04-01 434424]

S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-08-04 149296]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2015-03-05 37896]

S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]

S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2013-12-30 233472]

S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-07-07 72992]

S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]

S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2014-12-19 93040]

S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [2011-02-17 27760]

S3 CompFilter;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbusflt.sys [2012-01-18 22176]

S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2013-12-30 37344]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]

S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-04-13 67456]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-04-13 161024]

S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2007-04-23 227328]

S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-02-17 1801328]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - FSUSBEXDISK

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12        REG_MULTI_SZ           Pml Driver HPZ12 Net Driver HPZ12

HPService        REG_MULTI_SZ           HPSLPSVC

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-03-21 08:31        1061704        ----a-w-        c:\program files\Google\Chrome\Application\41.0.2272.101\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-04-01 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06 08:20]

.

2015-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2014-04-18 11:26]

.

2015-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2014-04-18 11:26]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

IE: &AOL Toolbar-Suche - c:\program files\aol\aol toolbar 4.0\resources\de-DE\local\search.html

IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: {{c0e8ae32-0758-4c8d-ab71-23b361fe8964} - c:\users\Antje\AppData\Local\Temp\ie_script_fwde.htm

TCP: DhcpNameServer = 192.168.1.1

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

FF - ProfilePath - c:\users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\

FF - prefs.js: browser.search.selectedEngine - Inbox Suchen

FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.net/

FF - prefs.js: keyword.URL - hxxp://www2.inbox.com/search/dispatcher.aspx?tp=sf&tbid=82011&iwk=350&language=de&qkw=

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

MSConfigStartUp-FileHippo - c:\program files\FileHippo.com\UpdateChecker.exe

AddRemove-MyFreeCodec - c:\program files\MyFree Codec\1.0b beta\uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\Creative\Shared Files\CTAudSvc.exe

c:\windows\system32\atieclxx.exe

c:\program files\NVIDIA Corporation\Display\NvXDSync.exe

c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Common Files\AOL\ACS\AOLAcsd.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\taskhost.exe

c:\windows\system32\sppsvc.exe

c:\program files\Avira\AntiVir Desktop\avshadow.exe

c:\windows\system32\conhost.exe

c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files\Windows Media Player\wmpnetwk.exe

c:\\?\c:\windows\system32\wbem\WMIADAP.EXE

.

**************************************************************************

.

Zeit der Fertigstellung: 2015-04-01  21:50:32 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2015-04-01 19:50

.

Vor Suchlauf: 20 Verzeichnis(se), 897.592.324.096 Bytes frei

Nach Suchlauf: 21 Verzeichnis(se), 898.001.162.240 Bytes frei

.

- - End Of File - - FD179DB8DDECCB83B8F8DBE92E787297

A36C5E4F47E84449FF07ED3517B43A31

Hallo Schrauber,

Das Iminent war nicht zu finden.
Das andere siehe oben.

LG Lotto:dankeschoen::bussi:

schrauber

02.04.2015 09:13

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Lotto

02.04.2015 11:28

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 02.04.2015
Suchlauf-Zeit: 12:00:16
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.04.02.02
Rootkit Datenbank: v2015.03.31.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Antje

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 451408
Verstrichene Zeit: 12 Min, 13 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 2
PUP.Optional.ToolBarInstaller, C:\Users\Antje\Downloads\RadioSetup.exe, In Quarantäne, [587297d0701ab87e77f006b6ac5541bf],
PUP.Optional.OpenCandy, C:\Users\Antje\Downloads\DTUSB200-0067.exe, In Quarantäne, [eedc2d3ad9b10a2c4b84aa76e02623dd],

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)

(end)

Das ist erst mal das eine. Der Rest kommt später.

LG Lotto

schrauber

02.04.2015 20:08

ok :)

Lotto

03.04.2015 09:38

Code:

# AdwCleaner v4.200 - Bericht erstellt 02/04/2015 um 21:55:36

# Aktualisiert 29/03/2015 von Xplode

# Datenbank : 2015-03-29.1 [Server]

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x86)

# Benutzername : Antje - ANTJE-PC

# Gestarted von : C:\Users\Antje\Downloads\AdwCleaner_4.200.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gelöscht : C:\Windows\system32\ComputerUpdaterLM.ocx

Datei Gelöscht : C:\Windows\system32\CUUpdateComponent.ocx
 

***** [ Geplante Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17689
 
 

-\\ Mozilla Firefox v36.0.1 (x86 de)
 

[me88ggay.default\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");
 

-\\ Google Chrome v41.0.2272.101
 
 

*************************
 

AdwCleaner[R0].txt - [1194 Bytes] - [02/04/2015 21:53:33]

AdwCleaner[S0].txt - [1123 Bytes] - [02/04/2015 21:55:36]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1182  Bytes] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.5.1 (04.02.2015:1)

OS: Windows 7 Ultimate x86

Ran by Antje on 02.04.2015 at 22:01:27,65

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 

Successfully deleted: [File] C:\Program Files\49res.dll
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted: [Folder] C:\Users\Antje\AppData\Roaming\mozilla\firefox\profiles\me88ggay.default\extensions\toolbar@gmx.net

Successfully deleted the following from C:\Users\Antje\AppData\Roaming\mozilla\firefox\profiles\me88ggay.default\prefs.js
 

user_pref("ibxcomtb.defHP", "hxxp://www.inbox.com/homepage.aspx?tbid=82011&iwk=350&lng=de");

user_pref("ibxcomtb.defs", "<buttons>\n<button id=\"radio_online_de\" position=\"862\" default=\"3\" type=\"dropdown\" status_disabled=\"0\" ver=\"1.0.0.1\">\n  <caption>Radio

user_pref("ibxcomtb.ibxHP", "hxxp://www.inbox.com/homepage.aspx?tbid=82011&iwk=350&lng=de");

user_pref("ibxcomtb.skin", "<button id=\"BLACK_RED\" type=\"skin\" ver=\"1.0.0.1\">\n\n  <expand firstbutton=\"11\" combo=\"27\" lastbutton=\"45\"/>\n  <offset fb=\"2\" cb=\"1

user_pref("keyword.URL", "hxxp://www2.inbox.com/search/dispatcher.aspx?tp=sf&tbid=82011&iwk=350&language=de&qkw=");

Emptied folder: C:\Users\Antje\AppData\Roaming\mozilla\firefox\profiles\me88ggay.default\minidumps [1 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 02.04.2015 at 22:09:03,39

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Antje (administrator) on ANTJE-PC on 02-04-2015 22:12:27

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-04] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-04] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Inbox Suchen

FF Homepage: hxxp://www.gmx.net/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-31] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-11-03] (Apple Inc.)

FF SearchPlugin: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\searchplugins\inbox-search.xml [2015-03-10]

FF Extension: WOT - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-03]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-03]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-03]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-02] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [File not signed]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-02 22:09 - 2015-04-02 22:09 - 00001727 _____ () C:\Users\Antje\Desktop\JRT.txt

2015-04-02 22:01 - 2015-04-02 22:01 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ANTJE-PC-Windows-7-Ultimate-(32-bit).dat

2015-04-02 22:01 - 2015-04-02 22:01 - 00000000 ____D () C:\RegBackup

2015-04-02 21:52 - 2015-04-02 21:55 - 00000000 ____D () C:\AdwCleaner

2015-04-02 21:52 - 2015-04-02 21:52 - 02690981 _____ (Thisisu) C:\Users\Antje\Downloads\JRT.exe

2015-04-02 21:51 - 2015-04-02 21:51 - 02208768 _____ () C:\Users\Antje\Downloads\AdwCleaner_4.200.exe

2015-04-02 12:25 - 2015-04-02 12:25 - 00001417 _____ () C:\Users\Antje\Desktop\mbam.txt

2015-04-02 11:59 - 2015-04-02 21:59 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-02 11:59 - 2015-04-02 11:59 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-04-02 11:59 - 2015-04-02 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-04-02 11:59 - 2015-04-02 11:59 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-04-02 11:59 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-04-02 11:59 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-02 11:59 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-04-02 11:58 - 2015-04-02 11:58 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018(1).exe

2015-04-02 11:48 - 2015-04-02 11:49 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018.exe

2015-04-01 21:50 - 2015-04-01 21:50 - 00021079 _____ () C:\ComboFix.txt

2015-04-01 21:27 - 2015-04-01 21:50 - 00000000 ____D () C:\Qoobox

2015-04-01 21:27 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-04-01 21:27 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-04-01 21:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-04-01 21:26 - 2015-04-01 21:26 - 05617096 ____R (Swearware) C:\Users\Antje\Downloads\ComboFix.exe

2015-04-01 21:21 - 2015-04-01 21:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95.exe

2015-04-01 10:23 - 2015-04-01 10:24 - 00042721 _____ () C:\Users\Antje\Downloads\Addition.txt

2015-04-01 10:22 - 2015-04-02 22:12 - 00025131 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-04-01 10:22 - 2015-04-02 22:12 - 00000000 ____D () C:\FRST

2015-04-01 10:22 - 2015-04-01 10:22 - 01135104 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-03-31 11:26 - 2015-03-31 11:44 - 00000000 ____D () C:\Users\Antje\Desktop\Reiki2

2015-03-23 13:15 - 2015-03-23 13:16 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-03-15 13:52 - 2015-03-15 13:52 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools USB

2015-03-12 13:57 - 2015-03-12 13:57 - 00000000 ____T () C:\Windows\system32\HP_192.168.1.6_CN15JJ40V105HR

2015-03-11 15:03 - 2015-03-11 15:03 - 00016408 _____ () C:\Users\Antje\Downloads\NETGEAR_WGR614v9.cfg

2015-03-11 14:38 - 2015-03-11 18:20 - 00000095 _____ () C:\Users\Antje\Desktop\Neues Textdokument.txt

2015-03-11 13:51 - 2015-03-11 13:51 - 00002012 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk

2015-03-11 13:51 - 2015-03-11 13:51 - 00002000 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk

2015-03-11 13:38 - 2015-03-11 13:38 - 00000000 ____D () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1)

2015-03-11 13:34 - 2015-03-11 13:34 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1).zip

2015-03-11 12:01 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 12:01 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 12:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 12:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 12:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 12:01 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 12:01 - 2015-02-20 04:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 12:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 12:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 12:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 12:01 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 12:01 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 12:01 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 12:01 - 2015-02-20 03:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 12:01 - 2015-02-20 03:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 12:01 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 12:01 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 12:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 12:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 12:01 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 12:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 12:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 12:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 12:01 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 12:01 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 12:01 - 2015-01-31 05:32 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 12:01 - 2015-01-31 04:52 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 12:01 - 2015-01-31 04:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-03-11 12:01 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 12:00 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 12:00 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 12:00 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 12:00 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 12:00 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 12:00 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 12:00 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 12:00 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 12:00 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 12:00 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 12:00 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 12:00 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 12:00 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 12:00 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 12:00 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 12:00 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 12:00 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 12:00 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 12:00 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 12:00 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 12:00 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 12:00 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-03-10 17:37 - 2015-03-10 17:37 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany).zip

2015-03-10 17:09 - 2015-04-02 21:58 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-10 17:00 - 2015-03-11 13:50 - 00000000 ____D () C:\Program Files\NETGEAR Genie

2015-03-10 16:36 - 2015-03-10 16:36 - 00000000 __SHD () C:\Users\Antje\AppData\Local\EmieBrowserModeList

2015-03-10 16:31 - 2015-03-10 16:31 - 00002009 _____ () C:\Users\Public\Desktop\NETGEAR WG111v3 Smart Wizard.lnk

2015-03-10 16:30 - 2015-03-19 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard

2015-03-10 16:17 - 2015-03-10 16:17 - 00010845 _____ () C:\Windows\system32\MultiLanguage.tmp

2015-03-10 16:17 - 2015-03-10 16:17 - 00000019 _____ () C:\Windows\system32\WG511v2_OEM.tmp

2015-03-10 14:05 - 2015-03-11 13:51 - 00000000 ____D () C:\Users\Antje\AppData\Local\NETGEARGenie

2015-03-10 14:04 - 2015-03-11 13:50 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2015-03-10 14:03 - 2015-03-10 14:04 - 39316824 _____ (NETGEAR Inc.) C:\Users\Antje\Downloads\NETGEARGenie-install2.3.1.57.exe

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\Program Files\TomTom HOME 2

2015-03-09 21:23 - 2015-03-09 21:23 - 31122120 _____ () C:\Users\Antje\Downloads\TomTomHOME2winlatest.exe

2015-03-06 13:47 - 2015-03-06 13:47 - 02347384 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-02 22:02 - 2011-12-23 22:55 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-02 22:02 - 2011-12-23 22:41 - 02063059 _____ () C:\Windows\WindowsUpdate.log

2015-04-02 22:02 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-02 22:02 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-02 21:59 - 2011-12-29 16:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-04-02 21:58 - 2015-02-06 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-02 21:56 - 2014-04-18 13:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-02 21:56 - 2013-06-25 15:14 - 00067448 _____ () C:\Windows\setupact.log

2015-04-02 21:56 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-02 21:36 - 2011-12-23 23:19 - 00888292 _____ () C:\Windows\PFRO.log

2015-04-02 12:30 - 2014-04-18 13:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-01 21:46 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-04-01 21:44 - 2013-06-21 10:46 - 00000000 ____D () C:\Windows\erdnt

2015-04-01 21:22 - 2014-03-28 11:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-04-01 09:28 - 2012-10-17 09:53 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Avira

2015-04-01 09:28 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-01 09:27 - 2012-10-17 09:48 - 00001952 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2015-04-01 09:27 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Avira

2015-03-31 11:48 - 2011-12-23 23:15 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Adobe

2015-03-31 10:20 - 2015-02-06 18:13 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-03-31 10:20 - 2015-02-06 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-03-31 10:20 - 2014-07-04 17:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe

2015-03-23 13:16 - 2013-06-13 09:51 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Malwarebytes

2015-03-22 22:44 - 2013-04-11 16:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-03-22 22:43 - 2013-06-27 16:55 - 00000000 ____D () C:\Program Files\SpywareBlaster

2015-03-19 18:05 - 2011-12-23 22:50 - 00000000 ____D () C:\Users\Antje

2015-03-19 18:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration

2015-03-18 12:07 - 2014-03-30 18:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-03-17 18:28 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-03-15 14:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-12 13:59 - 2014-08-03 10:59 - 00241058 _____ () C:\Windows\hpwins28.dat

2015-03-12 13:59 - 2012-01-21 13:04 - 00017444 _____ () C:\ProgramData\hpzinstall.log

2015-03-12 13:56 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32

2015-03-12 11:33 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-03-11 14:28 - 2012-03-26 20:46 - 00000000 ____D () C:\Netgear

2015-03-11 12:49 - 2009-07-14 06:33 - 00493648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-11 12:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-03-11 12:40 - 2013-08-15 11:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-11 12:38 - 2009-10-14 04:21 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-03-10 16:31 - 2011-12-23 23:05 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-03-09 21:19 - 2012-02-22 12:56 - 00000000 ____D () C:\Users\Antje\AppData\Local\Downloaded Installations

2015-03-05 11:38 - 2013-05-07 16:00 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
 

==================== Files in the root of some directories =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\Quarantine.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-15 13:49
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Antje at 2015-04-02 22:13:10

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

11-03-2015 12:34:42 Windows Update

15-03-2015 13:52:18 Gerätetreiber-Paketinstallation: Disc Soft Ltd USB-Controller

17-03-2015 18:15:56 Windows Update

19-03-2015 17:59:08 Konfiguriert NETGEAR WG111v3 wireless USB 2.0 adapter

19-03-2015 18:02:26 Wiederherstellungsvorgang

21-03-2015 10:24:32 Windows Update

24-03-2015 10:44:34 Windows Update

30-03-2015 21:17:28 Windows Update

01-04-2015 21:27:53 ComboFix created restore point

02-04-2015 11:52:13 Revo Uninstaller's restore point - Malwarebytes Anti-Malware Version 2.1.4.1018
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-01-27 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-31] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-04-02 21:56 - 2015-04-02 21:56 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~df394b.tmp

2015-04-02 21:56 - 2015-04-02 21:56 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~de6248.tmp

2015-04-02 09:23 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2004-01-09 22:02 - 2004-01-09 22:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll

2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============

Error: (04/02/2015 10:13:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/02/2015 10:11:10 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/02/2015 10:09:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/02/2015 10:09:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 44%

Total physical RAM: 3054.7 MB

Available physical RAM: 1701.33 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4262.08 MB

Total Virtual: 2047.88 MB

Available Virtual: 1902.76 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:835.66 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Lieber Schrauber, ich glaube das wars :party::abklatsch::party:

LG Lotto:bussi::crazy:

Hallo lieber Schrauber ,

ich wünsche Dir und deinen Angehörigen ein frohes Osterfest.

LG Lotto:party:

schrauber

03.04.2015 14:59

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

RemoveProxy:

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Lotto

03.04.2015 18:19

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015

Ran by Antje at 2015-04-03 16:55:33 Run:1

Running from C:\Users\Antje\Desktop

Loaded Profiles: Antje &  (Available profiles: Antje)

Boot Mode: Normal
 

==============================================
 

Content of fixlist:

*****************

RemoveProxy:

Emptytemp:

         

*****************
 
 

========= RemoveProxy: =========
 

"HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

"HKU\S-1-5-21-1184766340-1357020511-1184547663-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
 
 

========= End of RemoveProxy: =========
 

EmptyTemp: => Removed 359.5 MB temporary data.
 
 

The system needed a reboot. 
 

==== End of Fixlog 16:55:46 ====

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=1c5331f0964c6f46bbf6aaccf6278421

# engine=23223

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-04-03 04:15:08

# local_time=2015-04-03 06:15:08 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 4017 179708899 0 0

# scanned=200346

# found=0

# cleaned=0

# scan_time=3456

Code:

 Results of screen317's Security Check version 0.99.99  

 Windows 7 Service Pack 1 x86 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Antivirus   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 WinPatrol 

 SpywareBlaster 5.0    

 Java 7 Update 51  

 Java 8 Update 25  

 Java version 32-bit out of Date! 

 Adobe Flash Player         17.0.0.134  

 Adobe Reader XI  

 Mozilla Firefox (36.0.1) 

 Google Chrome (41.0.2272.101) 

 Google Chrome (41.0.2272.118) 

 Google Chrome (update.dll..) 
 ````````Process Check: objlist.exe by Laurent````````  

 WinPatrol winpatrol.exe is disabled! 

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Antje (administrator) on ANTJE-PC on 03-04-2015 19:13:00

Running from C:\Users\Antje\Desktop

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-04] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-04] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Inbox Suchen

FF Homepage: hxxp://www.gmx.net/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-31] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-04] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-11-03] (Apple Inc.)

FF SearchPlugin: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\searchplugins\inbox-search.xml [2015-03-10]

FF Extension: WOT - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-03]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-03]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-03]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-04-03] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [File not signed]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-03 19:13 - 2015-04-03 19:13 - 00024835 _____ () C:\Users\Antje\Desktop\FRST.txt

2015-04-03 19:09 - 2015-04-03 19:09 - 00852607 _____ () C:\Users\Antje\Downloads\SecurityCheck.exe

2015-04-03 19:09 - 2015-04-03 19:09 - 00852607 _____ () C:\Users\Antje\Downloads\SecurityCheck(1).exe

2015-04-03 17:15 - 2015-04-03 17:15 - 00000000 ____D () C:\Program Files\ESET

2015-04-03 17:11 - 2015-04-03 17:11 - 02347384 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu(1).exe

2015-04-03 17:05 - 2015-04-03 17:05 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-04-02 22:09 - 2015-04-02 22:09 - 00001727 _____ () C:\Users\Antje\Desktop\JRT.txt

2015-04-02 22:01 - 2015-04-02 22:01 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ANTJE-PC-Windows-7-Ultimate-(32-bit).dat

2015-04-02 22:01 - 2015-04-02 22:01 - 00000000 ____D () C:\RegBackup

2015-04-02 21:52 - 2015-04-02 21:55 - 00000000 ____D () C:\AdwCleaner

2015-04-02 21:52 - 2015-04-02 21:52 - 02690981 _____ (Thisisu) C:\Users\Antje\Downloads\JRT.exe

2015-04-02 21:51 - 2015-04-02 21:51 - 02208768 _____ () C:\Users\Antje\Downloads\AdwCleaner_4.200.exe

2015-04-02 12:25 - 2015-04-02 12:25 - 00001417 _____ () C:\Users\Antje\Desktop\mbam.txt

2015-04-02 11:59 - 2015-04-03 18:26 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-02 11:59 - 2015-04-02 11:59 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-04-02 11:59 - 2015-04-02 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-04-02 11:59 - 2015-04-02 11:59 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-04-02 11:59 - 2015-03-17 06:15 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-04-02 11:59 - 2015-03-17 06:15 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-02 11:59 - 2015-03-17 06:15 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-04-02 11:58 - 2015-04-02 11:58 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018(1).exe

2015-04-02 11:48 - 2015-04-02 11:49 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018.exe

2015-04-01 21:50 - 2015-04-01 21:50 - 00021079 _____ () C:\ComboFix.txt

2015-04-01 21:27 - 2015-04-01 21:50 - 00000000 ____D () C:\Qoobox

2015-04-01 21:27 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-04-01 21:27 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-04-01 21:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-04-01 21:27 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-04-01 21:26 - 2015-04-01 21:26 - 05617096 ____R (Swearware) C:\Users\Antje\Downloads\ComboFix.exe

2015-04-01 21:21 - 2015-04-01 21:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95.exe

2015-04-01 10:23 - 2015-04-02 22:13 - 00035788 _____ () C:\Users\Antje\Downloads\Addition.txt

2015-04-01 10:22 - 2015-04-03 19:13 - 00000000 ____D () C:\FRST

2015-04-01 10:22 - 2015-04-02 22:13 - 00050412 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-04-01 10:22 - 2015-04-01 10:22 - 01135104 _____ (Farbar) C:\Users\Antje\Desktop\FRST.exe

2015-03-31 11:26 - 2015-03-31 11:44 - 00000000 ____D () C:\Users\Antje\Desktop\Reiki2

2015-03-23 13:15 - 2015-03-23 13:16 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-03-15 13:52 - 2015-03-15 13:52 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools USB

2015-03-12 13:57 - 2015-03-12 13:57 - 00000000 ____T () C:\Windows\system32\HP_192.168.1.6_CN15JJ40V105HR

2015-03-11 15:03 - 2015-03-11 15:03 - 00016408 _____ () C:\Users\Antje\Downloads\NETGEAR_WGR614v9.cfg

2015-03-11 14:38 - 2015-03-11 18:20 - 00000095 _____ () C:\Users\Antje\Desktop\Neues Textdokument.txt

2015-03-11 13:51 - 2015-03-11 13:51 - 00002012 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk

2015-03-11 13:51 - 2015-03-11 13:51 - 00002000 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk

2015-03-11 13:38 - 2015-03-11 13:38 - 00000000 ____D () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1)

2015-03-11 13:34 - 2015-03-11 13:34 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1).zip

2015-03-11 12:01 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 12:01 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 12:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 12:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 12:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 12:01 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 12:01 - 2015-02-20 04:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 12:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 12:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 12:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 12:01 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 12:01 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 12:01 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 12:01 - 2015-02-20 03:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 12:01 - 2015-02-20 03:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 12:01 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 12:01 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 12:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 12:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 12:01 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 12:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 12:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 12:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 12:01 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 12:01 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 12:01 - 2015-01-31 05:32 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 12:01 - 2015-01-31 04:52 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 12:01 - 2015-01-31 04:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-03-11 12:01 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 12:00 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 12:00 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 12:00 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 12:00 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 12:00 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 12:00 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 12:00 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 12:00 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 12:00 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 12:00 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 12:00 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 12:00 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 12:00 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 12:00 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 12:00 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 12:00 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 12:00 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 12:00 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 12:00 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 12:00 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 12:00 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 12:00 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-03-10 17:37 - 2015-03-10 17:37 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany).zip

2015-03-10 17:09 - 2015-04-03 16:59 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-10 17:00 - 2015-03-11 13:50 - 00000000 ____D () C:\Program Files\NETGEAR Genie

2015-03-10 16:36 - 2015-03-10 16:36 - 00000000 __SHD () C:\Users\Antje\AppData\Local\EmieBrowserModeList

2015-03-10 16:31 - 2015-03-10 16:31 - 00002009 _____ () C:\Users\Public\Desktop\NETGEAR WG111v3 Smart Wizard.lnk

2015-03-10 16:30 - 2015-03-19 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard

2015-03-10 16:17 - 2015-03-10 16:17 - 00010845 _____ () C:\Windows\system32\MultiLanguage.tmp

2015-03-10 16:17 - 2015-03-10 16:17 - 00000019 _____ () C:\Windows\system32\WG511v2_OEM.tmp

2015-03-10 14:05 - 2015-03-11 13:51 - 00000000 ____D () C:\Users\Antje\AppData\Local\NETGEARGenie

2015-03-10 14:04 - 2015-03-11 13:50 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2015-03-10 14:03 - 2015-03-10 14:04 - 39316824 _____ (NETGEAR Inc.) C:\Users\Antje\Downloads\NETGEARGenie-install2.3.1.57.exe

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom

2015-03-09 21:24 - 2015-03-09 21:24 - 00000000 ____D () C:\Program Files\TomTom HOME 2

2015-03-09 21:23 - 2015-03-09 21:23 - 31122120 _____ () C:\Users\Antje\Downloads\TomTomHOME2winlatest.exe

2015-03-06 13:47 - 2015-03-06 13:47 - 02347384 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-03 18:57 - 2015-02-06 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-03 18:47 - 2011-12-23 22:41 - 01097645 _____ () C:\Windows\WindowsUpdate.log

2015-04-03 18:30 - 2014-04-18 13:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-03 17:05 - 2014-08-05 09:45 - 00000000 ____D () C:\ProgramData\Package Cache

2015-04-03 17:05 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-03 17:05 - 2012-10-17 09:48 - 00000000 ____D () C:\Program Files\Avira

2015-04-03 17:03 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-03 17:03 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-03 17:02 - 2011-12-23 22:55 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-03 17:00 - 2011-12-29 16:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-04-03 16:57 - 2014-04-18 13:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-03 16:57 - 2013-06-25 15:14 - 00067560 _____ () C:\Windows\setupact.log

2015-04-03 16:57 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-02 21:36 - 2011-12-23 23:19 - 00888292 _____ () C:\Windows\PFRO.log

2015-04-01 21:46 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-04-01 21:44 - 2013-06-21 10:46 - 00000000 ____D () C:\Windows\erdnt

2015-04-01 21:22 - 2014-03-28 11:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-04-01 09:28 - 2012-10-17 09:53 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Avira

2015-04-01 09:27 - 2012-10-17 09:48 - 00001952 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2015-04-01 09:27 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Avira

2015-03-31 11:48 - 2011-12-23 23:15 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Adobe

2015-03-31 10:20 - 2015-02-06 18:13 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-03-31 10:20 - 2015-02-06 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-03-31 10:20 - 2014-07-04 17:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe

2015-03-23 13:16 - 2013-06-13 09:51 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Malwarebytes

2015-03-22 22:44 - 2013-04-11 16:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-03-22 22:43 - 2013-06-27 16:55 - 00000000 ____D () C:\Program Files\SpywareBlaster

2015-03-19 18:05 - 2011-12-23 22:50 - 00000000 ____D () C:\Users\Antje

2015-03-19 18:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration

2015-03-18 12:07 - 2014-03-30 18:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-03-17 18:28 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-03-15 14:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-12 13:59 - 2014-08-03 10:59 - 00241058 _____ () C:\Windows\hpwins28.dat

2015-03-12 13:59 - 2012-01-21 13:04 - 00017444 _____ () C:\ProgramData\hpzinstall.log

2015-03-12 13:56 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32

2015-03-12 11:33 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-03-11 14:28 - 2012-03-26 20:46 - 00000000 ____D () C:\Netgear

2015-03-11 12:49 - 2009-07-14 06:33 - 00493648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-11 12:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-03-11 12:40 - 2013-08-15 11:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-11 12:38 - 2009-10-14 04:21 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-03-10 16:31 - 2011-12-23 23:05 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-03-09 21:19 - 2012-02-22 12:56 - 00000000 ____D () C:\Users\Antje\AppData\Local\Downloaded Installations

2015-03-05 11:38 - 2013-05-07 16:00 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-03-05 11:38 - 2012-10-17 09:48 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
 

==================== Files in the root of some directories =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-15 13:49
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Antje at 2015-04-03 19:16:22

Running from C:\Users\Antje\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)

Avira (Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

15-03-2015 13:52:18 Gerätetreiber-Paketinstallation: Disc Soft Ltd USB-Controller

17-03-2015 18:15:56 Windows Update

19-03-2015 17:59:08 Konfiguriert NETGEAR WG111v3 wireless USB 2.0 adapter

19-03-2015 18:02:26 Wiederherstellungsvorgang

21-03-2015 10:24:32 Windows Update

24-03-2015 10:44:34 Windows Update

30-03-2015 21:17:28 Windows Update

01-04-2015 21:27:53 ComboFix created restore point

02-04-2015 11:52:13 Revo Uninstaller's restore point - Malwarebytes Anti-Malware Version 2.1.4.1018

03-04-2015 17:17:40 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-01-27 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-31] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-04-03 16:59 - 2015-04-03 16:59 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~df394b.tmp

2015-04-03 16:59 - 2015-04-03 16:59 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0000\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2015-04-03 16:59 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Antje\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/03/2015 05:00:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x1354

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/03/2015 05:00:14 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/03/2015 05:00:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/03/2015 05:00:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (04/03/2015 09:50:00 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x990

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/03/2015 09:49:42 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/03/2015 09:49:30 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/03/2015 09:49:30 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 
 

System errors:

=============

Error: (04/03/2015 07:15:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:13:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:12:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:12:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:09:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:09:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:08:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:06:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 07:01:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/03/2015 06:59:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 48%

Total physical RAM: 3054.7 MB

Available physical RAM: 1583.56 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4071.07 MB

Total Virtual: 2047.88 MB

Available Virtual: 1903.83 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:838.15 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

:taenzer:ok Schrauber ich habe alles gemacht.
Ob alles gut geht muß ich noch testen. Ich frage mich wie trotz Absicherung wieder so ein haufen Müll da drauf kommt.

Ich danke dir sehr.

LG Lotto:party::abklatsch:

schrauber

04.04.2015 10:36

Alte Java Versionen deinstallieren, aktuelle Version installieren, das ist schonmal Sicherheitslücke Nummer 1. Und bei Downloads und Installationen aufpassen.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Lotto

06.04.2015 19:35

Emsisoft Anti-Malware - Version 9.0
Letztes Update: 06.04.2015 19:14:07
Benutzerkonto: Antje-PC\Antje

Scan-Einstellungen:

Scan Methode: Smart Scan
Objekte: Rootkits, Speicher, Traces, C:\Windows\, C:\Program Files\

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn: 06.04.2015 19:14:32
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{1D4DB7D3-6EC9-47A3-BD87-1E41684E07BB} gefunden: Adware.Win32.Hubar (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS gefunden: Setting.DisableRegistryTools (A)
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F} gefunden: Application.Win32.InstallAd (A)
Key: HKEY_USERS\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F} gefunden: Application.Win32.InstallAd (A)
Key: HKEY_USERS\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\W3I gefunden: Application.InstallAd (A)

Gescannt 202378
Gefunden 6

Scan-Ende: 06.04.2015 19:50:33
Scan-Zeit: 0:36:01
Hallo Schrauber, das obere war das Ergebnis von dem Emisoft-Anti Maleware 9

Wollte ich dir mal schicken. Ansonsten bin ich fertig mit allen was du geschrieben hast.

Vielen Dank noch mal. Bis später.
LG Lotto:bussi:

schrauber

07.04.2015 11:25

Kannste alles löschen lassen :)

Lotto

09.04.2015 17:55

Hallo Schrauber
ich mußte eine Systemwiederherstellung machen:killpc::killpc::schrei:
Und nun ist wieder alles drauf was eigentlich weg sollte. Leider weis ich gar nicht mehr was das alles war und ob das neu runtergeladene noch da ist .Was machen wir denn nun?
Die Wiederherstellung mußte ich machen weil ich irgendwas gelöscht hab ...was auch immer...Schlüssel oder so was...:daumenrunter:
Es ging alles in Zeitlupe und manches gar nicht auf. Es hat immer Fehler oder Seite nicht gefunden angezeigt.

LG Lotto:dankeschoen::crazy::crazy:

schrauber

10.04.2015 07:51

Dann poste mal bitte ein frisches FRST log :)

Lotto

10.04.2015 17:47

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Antje (administrator) on ANTJE-PC on 10-04-2015 18:37:05

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Inbox Suchen

FF Homepage: hxxp://www.gmx.net/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-31] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-04-05] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-11-03] (Apple Inc.)

FF SearchPlugin: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\searchplugins\inbox-search.xml [2015-03-10]

FF Extension: WOT - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-03]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-03]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-03]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [File not signed]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-10 18:37 - 2015-04-10 18:37 - 00023591 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-04-10 18:37 - 2015-04-10 18:37 - 00000000 ____D () C:\FRST

2015-04-10 18:36 - 2015-04-10 18:36 - 01135104 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-04-08 20:39 - 2015-04-08 20:39 - 00000000 ____D () C:\ProgramData\Viewpoint

2015-04-08 20:39 - 2015-04-08 20:39 - 00000000 ____D () C:\Program Files\Viewpoint

2015-04-08 20:22 - 2015-04-09 18:35 - 00000000 ____D () C:\Program Files\AOL 9.0 VRb

2015-04-06 20:37 - 2015-04-09 18:36 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit

2015-04-06 20:37 - 2015-04-07 17:28 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit

2015-04-06 19:50 - 2015-04-06 19:50 - 00000000 ____D () C:\ProgramData\Emsisoft

2015-04-06 19:12 - 2015-04-09 18:35 - 00000000 ____D () C:\Program Files\Emsisoft Anti-Malware

2015-04-05 21:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-04-05 21:25 - 2015-04-05 21:25 - 00781312 _____ () C:\Users\Antje\Downloads\delfix_10.9.exe

2015-04-05 21:23 - 2015-04-09 18:35 - 00000000 ___SD () C:\ComboFix

2015-04-05 12:39 - 2015-04-09 18:35 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-05 10:32 - 2015-04-05 10:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95(2).exe

2015-04-03 17:05 - 2015-04-03 17:05 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-04-02 22:01 - 2015-04-02 22:01 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ANTJE-PC-Windows-7-Ultimate-(32-bit).dat

2015-04-02 22:01 - 2015-04-02 22:01 - 00000000 ____D () C:\RegBackup

2015-04-02 11:58 - 2015-04-02 11:58 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018(1).exe

2015-04-02 11:48 - 2015-04-02 11:49 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018.exe

2015-04-01 21:21 - 2015-04-01 21:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95.exe

2015-03-31 11:26 - 2015-03-31 11:44 - 00000000 ____D () C:\Users\Antje\Desktop\Reiki2

2015-03-23 13:15 - 2015-03-23 13:16 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-03-15 13:52 - 2015-03-15 13:52 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools USB

2015-03-12 13:57 - 2015-03-12 13:57 - 00000000 ____T () C:\Windows\system32\HP_192.168.1.6_CN15JJ40V105HR

2015-03-11 15:03 - 2015-03-11 15:03 - 00016408 _____ () C:\Users\Antje\Downloads\NETGEAR_WGR614v9.cfg

2015-03-11 14:38 - 2015-03-11 18:20 - 00000095 _____ () C:\Users\Antje\Desktop\Neues Textdokument.txt

2015-03-11 13:51 - 2015-03-11 13:51 - 00002012 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk

2015-03-11 13:51 - 2015-03-11 13:51 - 00002000 _____ () C:\Users\Public\Desktop\NETGEAR Genie.lnk

2015-03-11 13:38 - 2015-03-11 13:38 - 00000000 ____D () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1)

2015-03-11 13:34 - 2015-03-11 13:34 - 01924437 _____ () C:\Users\Antje\Downloads\WGR614v9 Firmware Version 1.2.24 (For users in Germany)(1).zip

2015-03-11 12:01 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-11 12:01 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-03-11 12:01 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-11 12:01 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-11 12:01 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-11 12:01 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-11 12:01 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-11 12:01 - 2015-02-20 04:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-03-11 12:01 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-03-11 12:01 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-03-11 12:01 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-03-11 12:01 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-11 12:01 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-11 12:01 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-03-11 12:01 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-03-11 12:01 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-11 12:01 - 2015-02-20 03:56 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-03-11 12:01 - 2015-02-20 03:50 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-03-11 12:01 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-03-11 12:01 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-03-11 12:01 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-11 12:01 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-11 12:01 - 2015-02-20 03:24 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-03-11 12:01 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-03-11 12:01 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-11 12:01 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-11 12:01 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-03-11 12:01 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-11 12:01 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-11 12:01 - 2015-01-31 05:32 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-03-11 12:01 - 2015-01-31 04:52 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-03-11 12:01 - 2015-01-31 04:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-03-11 12:01 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-11 12:00 - 2015-03-06 07:15 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-03-11 12:00 - 2015-03-06 07:15 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-11 12:00 - 2015-03-06 07:10 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-03-11 12:00 - 2015-03-06 07:10 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-03-11 12:00 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-03-11 12:00 - 2015-03-06 07:09 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-03-11 12:00 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-11 12:00 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-03-11 12:00 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-03-11 12:00 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-03-11 12:00 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-11 12:00 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-11 12:00 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-11 12:00 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-03-11 12:00 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-11 12:00 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2015-03-11 12:00 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2015-03-11 12:00 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2015-03-11 12:00 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2015-03-11 12:00 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2015-03-11 12:00 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2015-03-11 12:00 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-03-11 12:00 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-03-11 12:00 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2015-03-11 12:00 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-03-11 12:00 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-03-11 12:00 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-03-11 12:00 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-10 18:33 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-10 18:33 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-10 18:32 - 2011-12-23 22:55 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-10 18:32 - 2011-12-23 22:41 - 01275933 _____ () C:\Windows\WindowsUpdate.log

2015-04-10 18:30 - 2014-04-18 13:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-10 18:29 - 2011-12-29 16:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-04-10 18:28 - 2015-03-10 17:09 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-04-10 18:27 - 2014-04-18 13:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-10 18:27 - 2013-06-25 15:14 - 00067784 _____ () C:\Windows\setupact.log

2015-04-10 18:27 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-09 19:57 - 2015-02-06 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-09 18:36 - 2014-11-03 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-04-09 18:36 - 2013-03-15 11:05 - 00000000 ____D () C:\Program Files\AOL 9.0 VRa

2015-04-09 18:36 - 2011-12-23 22:50 - 00000000 ____D () C:\Users\Antje

2015-04-09 18:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp

2015-04-09 18:35 - 2015-03-10 14:05 - 00000000 ____D () C:\Users\Antje\AppData\Local\NETGEARGenie

2015-04-09 18:35 - 2014-08-05 09:45 - 00000000 ____D () C:\ProgramData\Package Cache

2015-04-09 18:35 - 2014-06-28 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Avira

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\Program Files\Avira

2015-04-09 18:35 - 2011-12-24 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL

2015-04-09 18:35 - 2011-12-24 00:20 - 00000000 ____D () C:\Program Files\Common Files\aolshare

2015-04-09 18:35 - 2011-12-24 00:20 - 00000000 ____D () C:\Program Files\Common Files\aol

2015-04-09 18:34 - 2014-11-04 15:58 - 00000000 ____D () C:\Program Files\Common Files\Java

2015-04-09 18:34 - 2014-11-03 18:22 - 00000000 ____D () C:\Program Files\QuickTime

2015-04-09 18:34 - 2011-12-24 00:20 - 00000000 ____D () C:\ProgramData\AOL

2015-04-09 18:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration

2015-04-08 20:41 - 2011-12-24 00:21 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\AOL

2015-04-06 18:41 - 2014-07-04 17:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe

2015-04-05 21:29 - 2013-06-24 11:39 - 00002604 _____ () C:\DelFix.txt

2015-04-05 21:23 - 2013-06-21 10:46 - 00000000 ____D () C:\Windows\erdnt

2015-04-05 21:13 - 2011-12-23 23:19 - 00888900 _____ () C:\Windows\PFRO.log

2015-04-05 10:33 - 2014-03-28 11:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-04-05 10:33 - 2014-03-13 17:38 - 00000000 ____D () C:\Program Files\VS Revo Group

2015-04-01 21:46 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-04-01 09:27 - 2012-10-17 09:48 - 00001952 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2015-03-31 11:48 - 2011-12-23 23:15 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Adobe

2015-03-31 10:20 - 2015-02-06 18:13 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-03-31 10:20 - 2015-02-06 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-03-23 13:16 - 2013-06-13 09:51 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Malwarebytes

2015-03-22 22:44 - 2013-04-11 16:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-03-22 22:43 - 2013-06-27 16:55 - 00000000 ____D () C:\Program Files\SpywareBlaster

2015-03-19 18:04 - 2015-03-10 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard

2015-03-18 12:07 - 2014-03-30 18:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-03-17 18:28 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-03-15 14:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2015-03-12 13:59 - 2014-08-03 10:59 - 00241058 _____ () C:\Windows\hpwins28.dat

2015-03-12 13:59 - 2012-01-21 13:04 - 00017444 _____ () C:\ProgramData\hpzinstall.log

2015-03-12 13:56 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32

2015-03-12 11:33 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-03-11 14:28 - 2012-03-26 20:46 - 00000000 ____D () C:\Netgear

2015-03-11 13:50 - 2015-03-10 17:00 - 00000000 ____D () C:\Program Files\NETGEAR Genie

2015-03-11 13:50 - 2015-03-10 14:04 - 00035088 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2015-03-11 12:49 - 2009-07-14 06:33 - 00493648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-11 12:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-03-11 12:40 - 2013-08-15 11:02 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-11 12:38 - 2009-10-14 04:21 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\ERUNT.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-15 13:49
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Antje at 2015-04-10 18:38:15

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)

Avira (Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

05-04-2015 21:28:35 Ende der Bereinigung

05-04-2015 21:28:48 ComboFix created restore point

06-04-2015 18:20:42 Removed Java 8 Update 40

06-04-2015 18:27:19 Removed Java 8 Update 40

06-04-2015 18:30:42 Revo Uninstaller's restore point - QuickTime 7

06-04-2015 18:41:59 Revo Uninstaller's restore point - McAfee Security Scan Plus

06-04-2015 19:03:11 Revo Uninstaller's restore point - Avira

06-04-2015 19:06:28 Revo Uninstaller's restore point - Avira Antivirus

09-04-2015 18:31:46 Wiederherstellungsvorgang

09-04-2015 18:41:07 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-01-27 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3A78712C-70BB-44A2-95D2-5A0B50FB8CEA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {410B5E63-C9F7-46F3-8C09-58506AA0812F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-31] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A1080357-DBEE-4947-A79F-987FDCB8CA94} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {AAC4BFFE-37B4-4162-B3CB-EA8F46D6D244} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-04-10 18:27 - 2015-04-10 18:27 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0015\~df394b.tmp

2015-04-10 18:27 - 2015-04-10 18:27 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0015\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2004-01-09 22:02 - 2004-01-09 22:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/10/2015 06:28:38 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x8dc

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/10/2015 06:28:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/10/2015 06:28:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (04/10/2015 06:28:13 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/09/2015 06:38:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/09/2015 06:38:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (04/09/2015 06:38:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xc38

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/09/2015 06:37:56 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/09/2015 06:11:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: e4c
 

Startzeit: 01d072d6fcf18670
 

Endzeit: 5
 

Anwendungspfad: C:\Program Files\AOL 9.0 VRb\waol.exe
 

Berichts-ID:
 

Error: (04/09/2015 05:08:15 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x834

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 
 

System errors:

=============

Error: (04/10/2015 06:36:41 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:36:34 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:36:34 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:34:34 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:30:46 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:30:46 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:29:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:29:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:29:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (04/10/2015 06:28:35 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 39%

Total physical RAM: 3054.7 MB

Available physical RAM: 1835.39 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4596.07 MB

Total Virtual: 2047.88 MB

Available Virtual: 1883.93 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:843 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hallo Schrauber du bist ein Schatz!:party:

Im Moment ist folgendes.......ich arbeite mit Z.B. AOL..will das öffnen....dauert lange bis es aufgebaut ist dann grfriert das Bild ein und an der Maus ist so ein Kreis der sich nicht bewegt...nach einer Weile kann ich die Maus gar nicht mehr bewegen... nach einiger Zeit ist wieder alles ok.:stirn:
Jetzt bei dem FRST kommt miten im Scann keine Rückmeldung alles bleibt stehen und dann ging es weiter ganz normal.

Ich hab bestimmt was gelöscht was ich brauchte????:twak:

LG Lotto:dankeschoen::dankeschoen:

schrauber

11.04.2015 07:28

Mach mal bitte folgendes:

Windows Repair Tool laufen lassen:
Windows reparieren - so geht's - Anleitungen

Lotto

11.04.2015 11:53

Code:

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.
 

C:\Users\Antje\Downloads\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair>CD /D C:\
 

C:\>set path=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
 

C:\>

das war das log vom ersten schritt

schrauber

11.04.2015 18:23

Logs brauch ich keine. Mach das Tool komplett, dann bitte ein frisches FRST log, und nen Bericht wie die Kiste läuft :)

Lotto

12.04.2015 09:59

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Antje (administrator) on ANTJE-PC on 12-04-2015 10:55:41

Running from C:\Users\Antje\Downloads

Loaded Profiles: Antje (Available profiles: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe

(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-02-13] (Apple Inc.)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [AOL Fast Start] => C:\Program Files\AOL 9.0 VRa\AOL.EXE [50480 2007-06-21] (AOL, LLC.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Inbox Suchen

FF Homepage: hxxp://www.gmx.net/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-31] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-04-05] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-04-05] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-11-03] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-11-03] (Apple Inc.)

FF SearchPlugin: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\searchplugins\inbox-search.xml [2015-03-10]

FF Extension: WOT - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-02-03]

FF Extension: NoScript - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-02-03]

FF Extension: Adblock Plus - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\me88ggay.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-03]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx [Not Found]

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [File not signed]

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [File not signed]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [File not signed]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [File not signed]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-12 10:53 - 2015-04-12 10:54 - 00000000 ___HD () C:\Windows\AxInstSV

2015-04-11 12:26 - 2015-04-11 12:26 - 00000000 ____D () C:\Users\Antje\Downloads\tweaking.com_windows_repair_aio

2015-04-11 12:22 - 2015-04-11 12:24 - 10661081 _____ () C:\Users\Antje\Downloads\tweaking.com_windows_repair_aio.zip

2015-04-10 18:38 - 2015-04-10 18:38 - 00041896 _____ () C:\Users\Antje\Downloads\Addition.txt

2015-04-10 18:37 - 2015-04-12 10:55 - 00023755 _____ () C:\Users\Antje\Downloads\FRST.txt

2015-04-10 18:37 - 2015-04-12 10:55 - 00000000 ____D () C:\FRST

2015-04-10 18:36 - 2015-04-10 18:36 - 01135104 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-04-08 20:39 - 2015-04-08 20:39 - 00000000 ____D () C:\ProgramData\Viewpoint

2015-04-08 20:39 - 2015-04-08 20:39 - 00000000 ____D () C:\Program Files\Viewpoint

2015-04-08 20:22 - 2015-04-09 18:35 - 00000000 ____D () C:\Program Files\AOL 9.0 VRb

2015-04-06 20:37 - 2015-04-09 18:36 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Exploit

2015-04-06 20:37 - 2015-04-07 17:28 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit

2015-04-06 19:50 - 2015-04-06 19:50 - 00000000 ____D () C:\ProgramData\Emsisoft

2015-04-06 19:12 - 2015-04-09 18:35 - 00000000 ____D () C:\Program Files\Emsisoft Anti-Malware

2015-04-05 21:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-04-05 21:25 - 2015-04-05 21:25 - 00781312 _____ () C:\Users\Antje\Downloads\delfix_10.9.exe

2015-04-05 21:23 - 2015-04-09 18:35 - 00000000 ___SD () C:\ComboFix

2015-04-05 12:39 - 2015-04-09 18:35 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-05 10:32 - 2015-04-05 10:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95(2).exe

2015-04-03 17:05 - 2015-04-03 17:05 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk

2015-04-02 22:01 - 2015-04-02 22:01 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ANTJE-PC-Windows-7-Ultimate-(32-bit).dat

2015-04-02 22:01 - 2015-04-02 22:01 - 00000000 ____D () C:\RegBackup

2015-04-02 11:58 - 2015-04-02 11:58 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018(1).exe

2015-04-02 11:48 - 2015-04-02 11:49 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.4.1018.exe

2015-04-01 21:21 - 2015-04-01 21:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Antje\Downloads\revosetup95.exe

2015-03-31 11:26 - 2015-03-31 11:44 - 00000000 ____D () C:\Users\Antje\Desktop\Reiki2

2015-03-23 13:15 - 2015-03-23 13:16 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-03-15 13:52 - 2015-03-15 13:52 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\DAEMON Tools USB

2015-03-15 13:51 - 2015-03-15 13:53 - 00000000 ____D () C:\ProgramData\DAEMON Tools USB
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-12 10:30 - 2014-04-18 13:26 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-12 10:30 - 2014-04-18 13:26 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-12 10:20 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-12 10:20 - 2009-07-14 06:34 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-12 10:17 - 2011-12-23 22:41 - 01467893 _____ () C:\Windows\WindowsUpdate.log

2015-04-12 10:14 - 2011-12-29 16:18 - 00000000 ____D () C:\Users\Antje\AppData\Local\CrashDumps

2015-04-12 10:13 - 2013-06-25 15:14 - 00068008 _____ () C:\Windows\setupact.log

2015-04-12 10:13 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-11 13:40 - 2011-12-23 22:55 - 01599580 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-11 13:35 - 2011-12-23 23:24 - 00150816 _____ () C:\Users\Antje\AppData\Local\GDIPFONTCACHEV1.DAT

2015-04-11 13:35 - 2009-07-14 06:33 - 00493648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-04-11 13:34 - 2011-12-23 23:19 - 00889506 _____ () C:\Windows\PFRO.log

2015-04-11 13:34 - 2011-12-23 22:39 - 00000000 ____D () C:\Windows\CSC

2015-04-11 13:20 - 2015-03-10 17:09 - 00000439 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-04-11 12:57 - 2015-02-06 18:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-09 18:36 - 2014-11-03 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-04-09 18:36 - 2013-03-15 11:05 - 00000000 ____D () C:\Program Files\AOL 9.0 VRa

2015-04-09 18:36 - 2011-12-23 22:50 - 00000000 ____D () C:\Users\Antje

2015-04-09 18:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp

2015-04-09 18:35 - 2015-03-10 14:05 - 00000000 ____D () C:\Users\Antje\AppData\Local\NETGEARGenie

2015-04-09 18:35 - 2014-08-05 09:45 - 00000000 ____D () C:\ProgramData\Package Cache

2015-04-09 18:35 - 2014-06-28 12:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\ProgramData\Avira

2015-04-09 18:35 - 2012-10-17 09:48 - 00000000 ____D () C:\Program Files\Avira

2015-04-09 18:35 - 2011-12-24 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOL

2015-04-09 18:35 - 2011-12-24 00:20 - 00000000 ____D () C:\Program Files\Common Files\aolshare

2015-04-09 18:35 - 2011-12-24 00:20 - 00000000 ____D () C:\Program Files\Common Files\aol

2015-04-09 18:34 - 2014-11-04 15:58 - 00000000 ____D () C:\Program Files\Common Files\Java

2015-04-09 18:34 - 2014-11-03 18:22 - 00000000 ____D () C:\Program Files\QuickTime

2015-04-09 18:34 - 2011-12-24 00:20 - 00000000 ____D () C:\ProgramData\AOL

2015-04-09 18:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration

2015-04-08 20:41 - 2011-12-24 00:21 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\AOL

2015-04-06 18:41 - 2014-07-04 17:16 - 00000000 ____D () C:\Users\Antje\AppData\Local\Adobe

2015-04-05 21:29 - 2013-06-24 11:39 - 00002604 _____ () C:\DelFix.txt

2015-04-05 21:23 - 2013-06-21 10:46 - 00000000 ____D () C:\Windows\erdnt

2015-04-05 10:33 - 2014-03-28 11:12 - 00001226 _____ () C:\Users\Antje\Desktop\Revo Uninstaller.lnk

2015-04-05 10:33 - 2014-03-13 17:38 - 00000000 ____D () C:\Program Files\VS Revo Group

2015-04-01 21:46 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-04-01 09:27 - 2012-10-17 09:48 - 00001952 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2015-03-31 11:48 - 2011-12-23 23:15 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Adobe

2015-03-31 10:20 - 2015-02-06 18:13 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-03-31 10:20 - 2015-02-06 18:13 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-03-23 13:16 - 2013-06-13 09:51 - 00000000 ____D () C:\Users\Antje\AppData\Roaming\Malwarebytes

2015-03-22 22:44 - 2013-04-11 16:27 - 00000000 ____D () C:\ProgramData\TEMP

2015-03-22 22:43 - 2013-06-27 16:55 - 00000000 ____D () C:\Program Files\SpywareBlaster

2015-03-19 18:04 - 2015-03-10 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard

2015-03-18 12:07 - 2014-03-30 18:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-03-17 18:28 - 2014-03-28 11:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-03-15 14:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
 

==================== Files in the root of some directories =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\ERUNT.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-04-12 10:32
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Antje at 2015-04-12 10:56:10

Running from C:\Users\Antje\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)

Avira (Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ATTENTION

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{3A9FE6B1-EE7F-40AC-B831-AC7C9ABB58A0}) (Version: 12.1.1.4 - Apple Inc.)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 36.0.1 (x86 de) (HKLM\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version:  - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

05-04-2015 21:28:35 Ende der Bereinigung

05-04-2015 21:28:48 ComboFix created restore point

06-04-2015 18:20:42 Removed Java 8 Update 40

06-04-2015 18:27:19 Removed Java 8 Update 40

06-04-2015 18:30:42 Revo Uninstaller's restore point - QuickTime 7

06-04-2015 18:41:59 Revo Uninstaller's restore point - McAfee Security Scan Plus

06-04-2015 19:03:11 Revo Uninstaller's restore point - Avira

06-04-2015 19:06:28 Revo Uninstaller's restore point - Avira Antivirus

09-04-2015 18:31:46 Wiederherstellungsvorgang

09-04-2015 18:41:07 Windows Update

11-04-2015 13:06:28 Tweaking.com - Windows Repair
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-04-11 13:25 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3A78712C-70BB-44A2-95D2-5A0B50FB8CEA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {410B5E63-C9F7-46F3-8C09-58506AA0812F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41E884C9-AD6D-4197-8528-7D37E6577D28} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-31] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A1080357-DBEE-4947-A79F-987FDCB8CA94} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {AAC4BFFE-37B4-4162-B3CB-EA8F46D6D244} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-18] (Google Inc.)
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-04-12 10:13 - 2015-04-12 10:13 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0019\~df394b.tmp

2015-04-12 10:13 - 2015-04-12 10:13 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0019\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-01-20 23:35 - 2015-01-20 23:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

2004-01-09 22:02 - 2004-01-09 22:02 - 00045056 _____ () C:\Program Files\AOL 9.0 VRa\zlib.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00053248 _____ () C:\Program Files\AOL 9.0 VRa\xmlparse.dll

2002-04-22 23:08 - 2002-04-22 23:08 - 00081920 _____ () C:\Program Files\AOL 9.0 VRa\xmltok.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Faulty Device Manager Devices =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/12/2015 10:13:49 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x69c

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/12/2015 10:13:32 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/11/2015 09:59:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x960

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/11/2015 09:59:05 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/11/2015 01:36:21 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
 

Error: (04/11/2015 01:35:57 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x9a4

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (04/11/2015 01:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (04/11/2015 01:35:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (04/11/2015 01:35:34 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (04/11/2015 01:28:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: Antje-PC)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NET CLR Networking 4.0.0.0" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 
 

System errors:

=============

Error: (04/12/2015 10:51:13 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (04/12/2015 10:51:13 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (04/12/2015 10:13:38 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Avira Email-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (04/12/2015 10:13:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NETGEARGenieDaemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/12/2015 10:13:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NETGEARGenieDaemon erreicht.
 

Error: (04/12/2015 10:13:10 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (04/12/2015 10:13:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/12/2015 10:13:10 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Echtzeit-Scanner erreicht.
 

Error: (04/12/2015 10:13:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Planer" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/12/2015 10:13:09 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Planer erreicht.
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Percentage of memory in use: 39%

Total physical RAM: 3054.7 MB

Available physical RAM: 1844.86 MB

Total Pagefile: 6105.64 MB

Available Pagefile: 4620.01 MB

Total Virtual: 2047.88 MB

Available Virtual: 1891.9 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:842.04 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hallo schrauber erst mal frst ich teste noch bischen danke.:dankeschoen:

schrauber

12.04.2015 10:27

ok, ich warte dann auf Rückmeldung :)

Lotto

14.04.2015 16:07

Hallo Schrauber,
ich denke im Moment geht das alles wieder.:applaus:
Was muß ich jetzt noch mal machen wegen der Systemwiederherstellung die ich machen mußte.

LG Lotto

schrauber

15.04.2015 06:03

Da musste nix machen. Rückgängig machen kann man das nicht mehr :)

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Lotto

15.04.2015 11:54

Hallo Schrauber,
da hab ich erst mal zu tun.
Bis später.

LG Lotto:crazy::crazy:

schrauber

15.04.2015 19:48

ok :)

Lotto

11.05.2015 09:54

Hallo Schrauber.
der Mozilla schaltet sich immer mal weg entweder es steht da keine Rückmeldung , oder die Seite geht zu (ist egal welche) und mozilla läßt sich nicht mehr öffnen. Erst nach Neustart geht das wieder zum öffnen.

Vielleicht weist du Rat. Danke dir.

LG Lotto:abklatsch:

schrauber

12.05.2015 06:33

Versuchen wir mal was :)

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

Lotto

12.05.2015 12:40

Lieber Schrauber,
habe versucht das so zu machen wie du es oben geschrieben hast. Jedoch auf dieser Support-Seite beschreiben die viel und kommen von einem Punkt in den nächsten ohne das man daraus irgend was schließen kann....:eek:..jedenfalls ich nicht. Ich glaube als unwissender kann man sehr wenig verstehen. ich hoffe das dieses Problem jetzt behoben ist und danke dir .

LG Lotto:party:

schrauber

13.05.2015 07:01

Wenn Du in Firefox auf Hilfe > Troubleshooting klickst ist es gleich der erste Button oben :)

Lotto

13.05.2015 14:35

Das ist nett von dir Schrauber . Da werde ich gleich mal gucken.
Schönen Männertag wünsch ich dir.

LG Lotto:knuddel:

Ja toll das find ich nicht Troubleshooting. Gibts bei mir nicht . Auch nicht wenn ich die Sprache ändere. :nono::nono::nono:

schrauber

14.05.2015 09:28

Versuch mal Hilfe > Informationen zur Fehlerbehebung, oben rechts kommt dann Firefox restaurieren :)

Lotto

16.05.2015 15:44

Hallo Schrauber,
ich habs gefunden nun werde ich alles testen und mich gegebenfalls wieder bei dir melden.
Vielen Dank für deine Hilfe.

LG Lotto
:dankeschoen:

schrauber

17.05.2015 08:01

ok :)

Lotto

19.05.2015 17:43

Hallo Schrauber jetzt stürzt nix ab aber die webseiten gehen seeeeeeeeeeeeehr langsam auf.:aufsmaul::aufsmaul:.......

So ein müll.

LG Lotto

schrauber

20.05.2015 06:55

Und wie gehen sie vergleichsweise mit dem IE auf?

Lotto

20.05.2015 17:00

Hallo Schrauber ich nehme den IE ja nie...aber ich habe probiert und der ist bischen schneller.
Also gehen sie langsamer auf als bei dem IE.

LG Lotto:crazy:

schrauber

21.05.2015 09:41

OK, aber gehen sie normal schnell mit dem IE auf? Oder auch langsam? Ich muss wissen ob das ein reines Firefox Problem ist, oder generell dein Internet-Speed.

Lotto

21.05.2015 16:52

Hallo Schrauber,

ja ich habe den IE und Mozilla mal verglichen indem ich gespielt habe my free zoo. Also beim IE geht das schneller. Beim Mozilla läd es ewig. Die verschiedenen Seiten laden lange . Beim IE ist die Ladezeit kürzer.
Ich weis nicht ob dir das jetzt was sagt. Ansonsten mußt du mir mal erklären wie ich das testen soll.

LG Lotto:dankeschoen:

schrauber

22.05.2015 08:59

Merkwürdig. Verstehe ich nicht wirklich. Starte den FF mal aus dem Programme Ordner heraus im Safe Mode, geht er dann schneller?

Lotto

25.05.2015 19:12

Hallo Schrauber,

ich weis natürlich wieder nicht was du genau meinst. Ich bin in Programme und habe den Mozilla von da gestartet. Das war nicht wirklich viel anders .

LG Lotto

schrauber

26.05.2015 17:30

schau mal hier :)

https://support.mozilla.org/de/kb/fi...icherter-modus

Lotto

03.06.2015 10:51

Hallo Schrauber,
ich habe erst mal einige sachen (Plugins ) auf den neusten stand gebracht. Den mozilla hab ich restauriert. Jetzt muß ich mal testen .
Ich melde mich wieder. Leider weis ich nicht was genau ich gemacht habe.:stirn::stirn:

Irgendwas.

Danke dir bis später
LG Lotto:party:

schrauber

04.06.2015 09:50

Ok :)

Lotto

11.09.2015 12:52

HALLO lieber Schrauber!
Habe wieder mal einen langsamen PC . Das neuste war DNS Server nicht gefunden. Also ich habe überall im Netzwerk und Freigabecenter" rumgeschalten"..habe ja keine Ahnung und dann ging das Internet wieder an, aber es ist beim hochfahren immer erst mal ein ! auf der Anzeige unten in der Leiste "Internet"leiste ganz unten rechts auf dem Bildschirm. Das ! geht manchmal weg und sonst starte ich einfach neu. Kannst du mir wieder helfen?

LG Lotto

schrauber

12.09.2015 09:41

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

UNd wenn das Netzwerkproblem da ist bitte das laufen lassen:

Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Minidump Files

Klicke Go und poste den Inhalt der Result.txt.

Lotto

12.09.2015 11:41

Hallo und Danke Schrauber,

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:10-09-2015 01

durchgeführt von Antje (Administrator) auf ANTJE-PC (12-09-2015 12:24:28)

Gestartet von C:\Users\Antje\Downloads

Geladene Profile: Antje (Verfügbare Profile: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.28.13\GoogleCrashHandler.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Farbar) C:\Users\Antje\Downloads\FRST(1).exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2014-12-31] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [TrayServer] => C:\Program Files\MAGIX\Filme_auf_DVD_8\TrayServer.exe [90112 2008-01-17] (MAGIX AG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157968 2015-08-13] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-08-03]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-03]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk [2015-03-10]

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{63A805D7-63E5-4A67-82C7-137541CDC2D5}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{7CAC6D11-DCBC-45D4-A3E7-E99C834D8BD6}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{BF9EBB8B-EC0A-441E-9E40-612563F706A2}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {BC51C75D-1339-43dd-921D-49F5D0A2F625} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A6976579318&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A6976579318&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-01] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-01] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF Homepage: chrome://unitedtb/content/newtab/startpage.xhtml

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Extension: GMX MailCheck - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274\Extensions\browser-mailcheck@gmx.net [2015-08-09]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-07-31]
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google Search) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Sheets) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browser Safety) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Gmail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx <nicht gefunden>

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [178424 2014-12-31] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Datei ist nicht signiert]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Datei ist nicht signiert]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [Datei ist nicht signiert]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [235696 2015-07-31] (McAfee, Inc.)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [Datei ist nicht signiert]

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [Datei ist nicht signiert]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [Datei ist nicht signiert]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)

S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [561920 2008-11-19] (eMPIA Technology, Inc.)

S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [455168 2008-11-19] (eMPIA Technology, Inc.)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-12 12:23 - 2015-09-12 12:24 - 01692672 _____ (Farbar) C:\Users\Antje\Downloads\FRST(1).exe

2015-09-11 12:53 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-09-11 12:42 - 2015-09-02 03:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-11 12:42 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-09-11 12:41 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-11 12:41 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-11 12:41 - 2015-08-15 07:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-11 12:41 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-11 12:41 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-11 12:41 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-11 12:41 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-11 12:41 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-11 12:41 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-11 12:41 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-11 12:41 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-11 12:41 - 2015-08-15 07:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-11 12:41 - 2015-08-15 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-11 12:41 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-11 12:41 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-11 12:41 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-11 12:41 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-11 12:41 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-11 12:41 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-11 12:41 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-11 12:41 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-11 12:41 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-11 12:41 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-11 12:41 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-11 12:41 - 2015-08-05 19:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-11 12:41 - 2015-08-04 19:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-11 12:41 - 2015-08-04 19:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-09-11 12:41 - 2015-08-04 19:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-09-11 12:41 - 2015-08-04 18:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-09-11 12:41 - 2015-07-22 19:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-09-11 12:41 - 2015-07-22 19:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-09-11 12:41 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-09-11 12:41 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-09-11 12:41 - 2015-07-22 18:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-09-11 12:41 - 2015-07-22 18:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-09-11 12:41 - 2015-07-22 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-09-11 12:41 - 2015-07-22 18:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-09-11 12:41 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-09-11 12:41 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-09-11 12:40 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-11 12:40 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-11 12:40 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-11 12:40 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-11 12:40 - 2015-06-25 11:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-09-11 12:40 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-09-11 12:40 - 2015-06-25 11:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-09-04 12:31 - 2015-09-04 12:31 - 00002007 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\Program Files\McAfee Security Scan

2015-09-01 18:38 - 2015-09-01 18:48 - 00000000 ____D C:\AdwCleaner

2015-09-01 18:37 - 2015-09-01 18:37 - 01654272 _____ C:\Users\Antje\Downloads\AdwCleaner_5.005.exe

2015-09-01 18:03 - 2015-09-01 18:03 - 00000000 ____D C:\Program Files\Common Files\Java

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Sun

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\.oracle_jre_usage

2015-08-24 19:22 - 2015-08-24 19:22 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\Program Files\QuickTime

2015-08-24 19:21 - 2015-08-24 19:21 - 00001753 _____ C:\Users\Public\Desktop\iTunes.lnk

2015-08-24 19:21 - 2015-08-24 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-08-24 19:19 - 2015-08-24 19:21 - 00000000 ____D C:\Program Files\iTunes

2015-08-24 19:19 - 2015-08-24 19:19 - 00000000 ____D C:\Program Files\iPod
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-12 12:24 - 2015-04-10 18:37 - 00025115 _____ C:\Users\Antje\Downloads\FRST.txt

2015-09-12 12:24 - 2015-04-10 18:37 - 00000000 ____D C:\FRST

2015-09-12 12:15 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-12 12:15 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-12 12:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET

2015-09-12 12:10 - 2011-12-23 22:55 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-12 12:08 - 2011-12-23 22:41 - 01059254 _____ C:\Windows\WindowsUpdate.log

2015-09-12 12:06 - 2014-04-18 13:26 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-12 12:06 - 2011-12-29 16:18 - 00000000 ____D C:\Users\Antje\AppData\Local\CrashDumps

2015-09-12 12:05 - 2013-06-25 15:14 - 00078256 _____ C:\Windows\setupact.log

2015-09-12 12:05 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-12 12:05 - 2009-07-14 06:33 - 00493648 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-12 12:03 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-12 12:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE

2015-09-11 16:57 - 2015-02-06 18:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-09-11 16:47 - 2014-04-18 13:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-11 12:32 - 2013-08-15 11:02 - 00000000 ____D C:\Windows\system32\MRT

2015-09-10 13:26 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF

2015-09-10 13:21 - 2011-12-23 22:50 - 00000000 ____D C:\Users\Antje

2015-09-10 13:20 - 2015-06-03 11:45 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2015-09-10 13:20 - 2015-04-05 12:39 - 00000000 ___SD C:\Windows\system32\GWX

2015-09-10 13:20 - 2015-03-10 14:05 - 00000000 ____D C:\Users\Antje\AppData\Local\NETGEARGenie

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration

2015-09-09 09:15 - 2013-04-11 16:27 - 00000000 ____D C:\ProgramData\TEMP

2015-09-01 18:03 - 2014-06-28 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-09-01 18:03 - 2012-02-28 12:18 - 00000000 ____D C:\Program Files\Java

2015-09-01 18:01 - 2014-06-28 12:48 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2015-09-01 17:55 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2015-09-01 17:55 - 2011-12-23 23:19 - 00894724 _____ C:\Windows\PFRO.log

2015-08-31 12:25 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-08-26 18:36 - 2009-10-14 04:21 - 132039072 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-08-24 19:19 - 2012-09-14 17:42 - 00000000 ____D C:\Program Files\Common Files\Apple

2015-08-23 19:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2013-06-27 18:14 - 2013-06-27 17:36 - 0186752 _____ () C:\Program Files\49res.dll

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Einige Dateien in TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\DseShExt-x86.dll

C:\Users\Antje\AppData\Local\temp\ERUNT.exe

C:\Users\Antje\AppData\Local\temp\jre-8u51-windows-au.exe

C:\Users\Antje\AppData\Local\temp\jre-8u60-windows-au.exe

C:\Users\Antje\AppData\Local\temp\mgxoschk.dll

C:\Users\Antje\AppData\Local\temp\MgxVistaTools.dll

C:\Users\Antje\AppData\Local\temp\SDShelEx-win32.dll

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-09-11 14:29
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:10-09-2015 01

durchgeführt von Antje (2015-09-12 12:27:26)

Gestartet von C:\Users\Antje\Downloads

Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2011-12-23 20:45:55)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)

Avira (Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Earth (HKLM\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ACHTUNG

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{025E78AC-BD91-4E9E-B165-3C09D4084BA4}) (Version: 12.2.2.25 - Apple Inc.)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Filme auf DVD 8 8.0.2.1 (D) (HKLM\...\MAGIX Filme auf DVD 8 D) (Version: 8.0.2.1 - MAGIX AG)

MAGIX Foto Manager 8 (HKLM\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.499 - MAGIX AG)

MAGIX Fotobuch 3.6 (HKLM\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)

MAGIX Online Druck Service (HKLM\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Screenshare (HKLM\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (HKLM\...\MAGIX Speed burnR D) (Version: 6.0.1.4 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX USB-Videowandler 2 Device Driver (HKLM\...\TVEpaDrv) (Version:  - )

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 40.0.3 (x86 de) (HKLM\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version: 7.3.1 - MP3 Rocket Inc)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Mufin MusicFinder Base 1.5.3.255 (D) (HKLM\...\Mufin MusicFinder Base D) (Version: 1.5.3.255 - MAGIX AG)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

15-08-2015 12:53:02 Windows Update

23-08-2015 18:52:42 Windows Update

23-08-2015 21:30:36 Windows Update

29-08-2015 13:22:00 Windows Update

01-09-2015 17:59:49 Windows Update

05-09-2015 11:34:24 Windows Update

09-09-2015 09:17:48 Windows Update

10-09-2015 13:17:26 Wiederherstellungsvorgang

10-09-2015 21:36:17 Windows Update

10-09-2015 21:40:17 Windows Update

11-09-2015 12:30:10 Windows Update

11-09-2015 17:00:15 Windows Update
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:04 - 2015-09-04 12:31 - 00000887 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

0.0.0.1        mssplus.mcafee.com
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {2521EAD9-A0BD-4CDA-A9C4-839C4F72F6CC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3DE9191B-EC3D-4C7A-8030-67A47C082AC3} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-09-12 12:06 - 2015-09-12 12:06 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0154\~df394b.tmp

2015-09-12 12:06 - 2015-09-12 12:06 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0154\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{6443F61C-3A3C-4597-A28C-31DB155CCB70}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{9C43709F-389B-4E81-A75B-8AA730238614}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{6C73E9D6-806F-44DA-B8A1-DC4AB60AD668}] => (Allow) LPort=1542

FirewallRules: [{5760ED37-ECF5-41B6-BF11-D2DD6522852B}] => (Allow) LPort=1542

FirewallRules: [{26120E0F-5846-4770-81E8-410A87C23E04}] => (Allow) LPort=53

FirewallRules: [{845F3AFD-21A3-4809-82ED-6E490531DA19}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{ED743F49-B445-4F6D-AD70-47F29C2CCBED}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{49D6C110-D33B-4239-B68C-A17DD263949D}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{8E43156A-8874-40C5-96B3-C87068B3C7E4}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{4F2AC97B-C2F8-4A94-B806-20AE13CBB89E}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{EAA15E68-0EBC-40E3-9371-F46B1DD8D154}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{4E589D43-BA14-425D-815E-9FDDBF11D6DC}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{8428F1E9-113F-4859-8D76-7D96F45969D3}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{D18F3C0B-07E4-41F6-8FED-97FE4EE08FFF}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{1FF00E57-0C3F-417E-82DF-589C8B7D8F8D}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{6EF47480-8E7E-46C8-84E6-38776DB65251}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F27CCE4F-D512-450D-80BE-71DF8217D23F}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F26FDD84-DBA4-4135-9524-54A9A2C0132A}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{994E5B95-AFBE-4833-B365-878DB0F6E1FF}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{D233A76F-FDFA-47DE-8642-2D17B434B537}] => (Allow) C:\Program Files\Iminent\IMBooster\IMBooster.exe

FirewallRules: [{BD14CBC7-EC80-4315-BC9A-603042AC72E6}] => (Allow) C:\Program Files\Iminent\IMBooster\IMBooster.exe

FirewallRules: [{563C087F-3C22-495D-8ED4-0CA558A39013}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{E087765F-7963-4295-B56C-78206E0620A0}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{3356F293-8B2C-4B7D-B953-34913152C84D}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{DE97E617-873D-426F-A82F-75AFBD5D865B}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{29F5092A-3596-4100-8E33-B331461E9EA4}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{2EC37B28-F031-4717-9354-565DC74CCD8C}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{1AC262E1-F3B3-475F-BDE7-EAC9BC1D65F6}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{251A7ED1-9B21-4335-A835-F080C11224DF}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{AD0CAAEF-53DE-4734-A30B-DACE2435B815}] => (Allow) D:\setup\hpznui01.exe

FirewallRules: [{A077FFAD-1E1E-477E-8E6D-D1EF76072FCD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{AD4F6935-251E-4A1C-B59B-4CC072954A7C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{8DC91D75-A5F9-4D27-B850-214575FB0458}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{BA99016D-6211-4E53-8E39-120D1AE95C0C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{440373C8-649D-4F8A-992E-866256700ECD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{A81C27C0-F88B-4129-8B69-5754FBF5961D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{71D254FB-2F9B-4508-87D2-89B77E360109}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{E151630B-A150-4AF3-8E1C-16B6BE2861B4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{0C60917C-EEF5-4AA4-ABE8-4888EAEB21F5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{A2D911FD-2AF7-495C-B92D-9B81AA60BE66}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{3F3C1372-9DF3-4EBA-9572-A7AF18B2B656}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{718BFE45-4AF7-4DBD-8A6C-F6A76D4CA300}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{B9F4BA73-51B1-47D2-86DC-7BD990E78A7D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{EE41020D-3107-47D3-B522-2286E2B10D26}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{DF1E8A34-2BDD-4118-A1FC-FD06EBCC624F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{0765C8F5-7EFA-4F28-811F-5D26F7BE8D6F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{033255DD-104F-46B5-BFF3-7E29F399E667}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{A99AADC3-6BD9-4CAF-8896-4000F4720398}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [{30B9B983-71C8-409B-9F68-2A557D1BC63C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{5CD3C397-7A40-4461-A47D-E52BF95B51D9}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{9A37A5E8-FCB5-46CE-B409-A6C5E9222EC0}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{D351BEDA-436B-464D-AFA7-5DBE6FDD5ECE}] => (Allow) C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [TCP Query User{167C9AFB-277B-4CE1-87DB-20CC8D9776EA}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{1A927E62-8276-46D9-A7DE-3DAE6B7D3DDF}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{037DD8C0-2256-4507-9E7C-50C82E2F9A22}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{FE9891CB-4AB8-4897-9C00-F7F1910FC164}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{24855897-A88C-46B8-99E3-004C6D6B3DAA}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{630177AD-44D8-449D-B905-8757D59131B7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1CFF399B-67B7-46DB-987F-7235ACADBF01}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{DA8CD2E3-867B-4333-82F3-49F8F6FFA170}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{3965B519-780E-44BB-BDD8-A94FB3D2E77A}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [UDP Query User{7AB29ACB-056B-4E4C-9074-6493C561E8EE}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [TCP Query User{EED53D04-4C82-406F-B396-7AF67BEABD56}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [UDP Query User{A8F8F891-643F-457B-8A6C-550373560C17}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [TCP Query User{EEBAB07B-6F90-4AC2-BBF1-40B2670D0EB9}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [UDP Query User{D1995635-EAE3-40DD-BB86-949F33CD18DA}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [{F9098E9C-0A93-4D76-B74A-BDB1BDA44724}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{C3E17FCB-BA22-4151-AA5F-2F27C2BF9DAA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FE3726DF-F604-49DA-B575-9CFA51BF0669}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{CBC96929-829D-4635-82F0-3667EEDB40D8}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/12/2015 12:06:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/12/2015 12:06:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/12/2015 12:06:26 PM) (Source: Avira Service Host) (EventID: 0) (User: )

Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)

   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
 

Error: (09/12/2015 12:06:26 PM) (Source: Avira Service Host) (EventID: 0) (User: )

Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)

   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
 

Error: (09/12/2015 12:06:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xf48

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/12/2015 12:06:23 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/11/2015 12:27:04 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x950

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/11/2015 12:26:50 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/11/2015 12:26:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/11/2015 12:26:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 
 

Systemfehler:

=============

Error: (09/12/2015 12:05:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Avira Email-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (09/12/2015 12:05:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NETGEARGenieDaemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:51 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NETGEARGenieDaemon erreicht.
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Echtzeit-Scanner erreicht.
 

Error: (09/12/2015 12:05:45 PM) (Source: NETLOGON) (EventID: 3095) (User: )

Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als

Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser

Konfiguration nicht gestartet zu sein.
 

Error: (09/12/2015 12:05:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Avira Planer" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Planer erreicht.
 

Error: (09/12/2015 12:05:20 PM) (Source: atikmdag) (EventID: 10261) (User: )

Description: Display is not active
 
 

Microsoft Office:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Prozentuale Nutzung des RAM: 42%

Installierter physikalischer RAM: 3054.7 MB

Verfügbarer physikalischer RAM: 1763.89 MB

Summe virtueller Speicher: 6105.66 MB

Verfügbarer virtueller Speicher: 4708.37 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:826.6 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

Lotto

12.09.2015 11:42

Nun das zweite

Code:

MiniToolBox by Farbar  Version: 25-07-2015 01

Ran by Antje (administrator) on 12-09-2015 at 12:31:53

Running from "C:\Users\Antje\Downloads"

Microsoft Windows 7 Ultimate  Service Pack 1 (X86)

Model: To Be Filled By O.E.M. Manufacturer: To Be Filled By O.E.M.

Boot Mode: Normal

***************************************************************************
 

========================= Flush DNS: ===================================
 

Windows-IP-Konfiguration
 

Der DNS-Aufl�sungscache wurde geleert.
 

========================= IE Proxy Settings: ============================== 
 

Proxy is not enabled.

No Proxy Server is set.
 

"Reset IE Proxy Settings": IE Proxy Settings were reset.
 

========================= FF Proxy Settings: ============================== 
 
 

"Reset FF Proxy Settings": Firefox Proxy settings were reset.
 

========================= Hosts content: =================================
 
 
 
 
 

0.0.0.1        mssplus.mcafee.com
 

127.0.0.1       localhost
 

========================= IP Configuration: ================================
 

NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter = Drahtlosnetzwerkverbindung (Connected)

Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20) = LAN-Verbindung (Media disconnected)
 
 

# ----------------------------------

# IPv4-Konfiguration

# ----------------------------------

pushd interface ipv4
 

reset
 
 

popd

# Ende der IPv4-Konfiguration
 
 
 

Windows-IP-Konfiguration
 

   Hostname  . . . . . . . . . . . . : Antje-PC

   Prim�res DNS-Suffix . . . . . . . : 

   Knotentyp . . . . . . . . . . . . : Hybrid

   IP-Routing aktiviert  . . . . . . : Nein

   WINS-Proxy aktiviert  . . . . . . : Nein
 

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung:
 

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter #2

   Physikalische Adresse . . . . . . : 00-1E-2A-AC-4C-7C

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja

   Verbindungslokale IPv6-Adresse  . : fe80::29f5:5bd8:323a:fca8%22(Bevorzugt) 

   IPv4-Adresse  . . . . . . . . . . : 192.168.1.2(Bevorzugt) 

   Subnetzmaske  . . . . . . . . . . : 255.255.255.0

   Lease erhalten. . . . . . . . . . : Samstag, 12. September 2015 12:05:46

   Lease l�uft ab. . . . . . . . . . : Sonntag, 13. September 2015 12:05:46

   Standardgateway . . . . . . . . . : 192.168.1.1

   DHCP-Server . . . . . . . . . . . : 192.168.1.1

   DHCPv6-IAID . . . . . . . . . . . : 436215338

   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-16-86-A7-0E-00-25-22-CA-27-6B

   DNS-Server  . . . . . . . . . . . : 192.168.1.1

   NetBIOS �ber TCP/IP . . . . . . . : Aktiviert
 

Ethernet-Adapter LAN-Verbindung:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20)

   Physikalische Adresse . . . . . . : 00-25-22-CA-27-6B

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja
 

Tunneladapter LAN-Verbindung* 15:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiviert. . . . . . . . . . : Nein

   Autokonfiguration aktiviert . . . : Ja
 

Tunneladapter isatap.{63A805D7-63E5-4A67-82C7-137541CDC2D5}:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2

   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiviert. . . . . . . . . . : Nein

   Autokonfiguration aktiviert . . . : Ja

Server:  UnKnown

Address:  192.168.1.1
 

Name:    google.com

Addresses:  2a00:1450:4008:801::1000

          62.117.4.241

          62.117.4.245

          62.117.4.249

          62.117.4.251

          62.117.4.208

          62.117.4.212

          62.117.4.216

          62.117.4.218

          62.117.4.219

          62.117.4.223

          62.117.4.227

          62.117.4.229

          62.117.4.230

          62.117.4.234

          62.117.4.238

          62.117.4.240
 
 

Ping wird ausgef�hrt f�r google.com [62.117.4.245] mit 32 Bytes Daten:

Antwort von 62.117.4.245: Bytes=32 Zeit=12ms TTL=57

Antwort von 62.117.4.245: Bytes=32 Zeit=11ms TTL=57
 

Ping-Statistik f�r 62.117.4.245:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 11ms, Maximum = 12ms, Mittelwert = 11ms

Server:  UnKnown

Address:  192.168.1.1
 

Name:    yahoo.com

Addresses:  2001:4998:58:c02::a9

          2001:4998:c:a06::2:4008

          2001:4998:44:204::a7

          98.138.253.109

          98.139.183.24

          206.190.36.45
 
 

Ping wird ausgef�hrt f�r yahoo.com [98.139.183.24] mit 32 Bytes Daten:

Antwort von 98.139.183.24: Bytes=32 Zeit=123ms TTL=47

Antwort von 98.139.183.24: Bytes=32 Zeit=124ms TTL=47
 

Ping-Statistik f�r 98.139.183.24:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 123ms, Maximum = 124ms, Mittelwert = 123ms
 

Ping wird ausgef�hrt f�r 127.0.0.1 mit 32 Bytes Daten:

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
 

Ping-Statistik f�r 127.0.0.1:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms

===========================================================================

Schnittstellenliste

 22...00 1e 2a ac 4c 7c ......NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter #2

 21...00 25 22 ca 27 6b ......Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20)

  1...........................Software Loopback Interface 1

 23...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

 25...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2

===========================================================================
 

IPv4-Routentabelle

===========================================================================

Aktive Routen:

     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik

          0.0.0.0          0.0.0.0      192.168.1.1      192.168.1.2     25

        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306

        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306

  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306

      192.168.1.0    255.255.255.0   Auf Verbindung       192.168.1.2    281

      192.168.1.2  255.255.255.255   Auf Verbindung       192.168.1.2    281

    192.168.1.255  255.255.255.255   Auf Verbindung       192.168.1.2    281

        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306

        224.0.0.0        240.0.0.0   Auf Verbindung       192.168.1.2    281

  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306

  255.255.255.255  255.255.255.255   Auf Verbindung       192.168.1.2    281

===========================================================================

St�ndige Routen:

  Keine
 

IPv6-Routentabelle

===========================================================================

Aktive Routen:

 If Metrik Netzwerkziel             Gateway

  1    306 ::1/128                  Auf Verbindung

 22    281 fe80::/64                Auf Verbindung

 22    281 fe80::29f5:5bd8:323a:fca8/128

                                    Auf Verbindung

  1    306 ff00::/8                 Auf Verbindung

 22    281 ff00::/8                 Auf Verbindung

===========================================================================

St�ndige Routen:

  Keine

========================= Winsock entries =====================================
 

Catalog5 01 C:\Windows\system32\NLAapi.dll [52224] (Microsoft Corporation)

Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)

Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog5 06 C:\Windows\system32\winrnr.dll [20992] (Microsoft Corporation)

Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Catalog9 01 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 02 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 03 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 04 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 06 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 07 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 08 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 09 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 10 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 11 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 12 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 13 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 14 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 15 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 16 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 17 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 18 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 19 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 20 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 21 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 22 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 23 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 24 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 25 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 26 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 27 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 28 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 29 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 30 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 31 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 32 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 33 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 34 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 35 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 36 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 37 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 38 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
 

========================= Event log errors: ===============================
 

Application errors:

==================

Error: (09/12/2015 12:06:36 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/12/2015 12:06:36 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/12/2015 12:06:26 PM) (Source: Avira Service Host) (User: )

Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)

   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
 

Error: (09/12/2015 12:06:26 PM) (Source: Avira Service Host) (User: )

Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

   bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)

   bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
 

Error: (09/12/2015 12:06:23 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xf48

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/12/2015 12:06:23 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/11/2015 12:27:04 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x950

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/11/2015 12:26:50 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/11/2015 12:26:21 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/11/2015 12:26:21 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 
 

System errors:

=============

Error: (09/12/2015 12:05:52 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Email-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (09/12/2015 12:05:51 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NETGEARGenieDaemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:51 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NETGEARGenieDaemon erreicht.
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:46 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Echtzeit-Scanner erreicht.
 

Error: (09/12/2015 12:05:45 PM) (Source: NETLOGON) (User: )

Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als

Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser

Konfiguration nicht gestartet zu sein.
 

Error: (09/12/2015 12:05:45 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Planer" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/12/2015 12:05:45 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Planer erreicht.
 

Error: (09/12/2015 12:05:20 PM) (Source: atikmdag) (User: )

Description: Display is not active
 
 

Microsoft Office Sessions:

=========================
 

=========================== Installed Programs ============================
 

32 Bit HP CIO Components Installer (HKLM\...\{A80FA752-C491-4ED9-ABF0-4278563160B2}) (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (HKLM\...\{690879A5-18EF-447B-98D6-B699D51008AB}) (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (HKLM\...\{5B05FF91-F20C-4832-A8DE-E1912639C17C}) (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (HKLM\...\{3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (HKLM\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Refresh Manager (HKLM\...\{AC76BA86-0804-1033-1959-001824147215}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira (HKLM\...\{2c18809c-4097-4b51-a4d0-3deade730ef3}) (Version: 1.1.29.22350 - Avira Operations & Co. KG)

Avira (HKLM\...\{791476BB-6A8F-4392-AE69-88B9C28B9522}) (Version: 1.1.29.22350 - Avira Operations & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (HKLM\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (HKLM\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (HKLM\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (HKLM\...\{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}) (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (HKLM\...\{92A51949-EE4C-466D-AAF0-99E74A49A63F}) (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (HKLM\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (HKLM\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (HKLM\...\{440B915A-0C85-45DB-92AE-75AE14704A64}) (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Earth (HKLM\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.28.13 - Google Inc.) Hidden

Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

GPBaseService2 (HKLM\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (HKLM\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (HKLM\...\{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)

Iminent (HKLM\...\{DD4CEACE-8B19-4B1C-AE82-DE0FC5787D4C}) (Version: 4.10.0.0 - Iminent) Hidden

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (HKLM\...\{A0250B44-DF91-4B66-85AF-45FA5B5512FC}) (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{025E78AC-BD91-4E9E-B165-3C09D4084BA4}) (Version: 12.2.2.25 - Apple Inc.)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Java Auto Updater (HKLM\...\{4A03706F-666A-4037-7777-5F2748764D10}) (Version: 2.8.60.27 - Oracle Corporation) Hidden

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

LWS Facebook (HKLM\...\{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}) (Version: 13.31.1038.0 - Logitech) Hidden

LWS Gallery (HKLM\...\{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}) (Version: 13.31.1038.0 - Logitech) Hidden

LWS Help_main (HKLM\...\{1651216E-E7AD-4250-92A1-FB8ED61391C9}) (Version: 13.31.1044.0 - Logitech) Hidden

LWS Launcher (HKLM\...\{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}) (Version: 13.31.1038.0 - Logitech) Hidden

LWS Motion Detection (HKLM\...\{71E66D3F-A009-44AB-8784-75E2819BA4BA}) (Version: 13.30.1395.0 - Logitech) Hidden

LWS Pictures And Video (HKLM\...\{08610298-29AE-445B-B37D-EFBE05802967}) (Version: 13.31.1038.0 - Logitech) Hidden

LWS Twitter (HKLM\...\{174A3B31-4C43-43DD-866F-73C9DB887B48}) (Version: 13.30.1346.0 - Logitech) Hidden

LWS Video Mask Maker (HKLM\...\{EED027B7-0DB6-404B-8F45-6DFEE34A0441}) (Version: 13.30.1379.0 - Logitech) Hidden

LWS VideoEffects (HKLM\...\{138A4072-9E64-46BD-B5F9-DB2BB395391F}) (Version: 13.30.1379.0 - Logitech) Hidden

LWS Webcam Software (HKLM\...\{8937D274-C281-42E4-8CDB-A0B2DF979189}) (Version: 13.31.1038.0 - Logitech) Hidden

LWS WLM Plugin (HKLM\...\{9DAEA76B-E50F-4272-A595-0124E826553D}) (Version: 1.30.1201.0 - Logitech) Hidden

LWS YouTube Plugin (HKLM\...\{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}) (Version: 13.31.1038.0 - Logitech) Hidden

MAGIX Filme auf DVD 8 8.0.2.1 (D) (HKLM\...\MAGIX Filme auf DVD 8 D) (Version: 8.0.2.1 - MAGIX AG)

MAGIX Foto Manager 8 (HKLM\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.499 - MAGIX AG)

MAGIX Fotobuch 3.6 (HKLM\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)

MAGIX Online Druck Service (HKLM\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Screenshare (HKLM\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (HKLM\...\MAGIX Speed burnR D) (Version: 6.0.1.4 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX USB-Videowandler 2 Device Driver (HKLM\...\TVEpaDrv) (Version:  - )

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\{8EF276E0-1D97-4B9D-BB29-013165F567CA}) (Version: 10.0.1.14 - MAGIX AG) Hidden

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MarketResearch (HKLM\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 40.0.3 (x86 de) (HKLM\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version: 7.3.1 - MP3 Rocket Inc)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Mufin MusicFinder Base 1.5.3.255 (D) (HKLM\...\Mufin MusicFinder Base D) (Version: 1.5.3.255 - MAGIX AG)

Nero Burning ROM (HKLM\...\{CF508721-0E1E-4F99-A359-59E4EA8DAEC1}) (Version: 12.5.5001 - Nero AG) Hidden

Nero Burning ROM Help (CHM) (HKLM\...\{2890E324-6F3B-4975-8B95-E7D6D80E0226}) (Version: 12.0.3000 - Nero AG) Hidden

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

Nero ControlCenter (HKLM\...\{ABC88553-8770-4B97-B43E-5A90647A5B63}) (Version: 11.0.15600 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (HKLM\...\{C994C746-C6D0-4EBA-B09E-DF7B18381B69}) (Version: 12.0.12000 - Nero AG) Hidden

Nero Core Components (HKLM\...\{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}) (Version: 11.0.21800 - Nero AG) Hidden

Nero SharedVideoCodecs (HKLM\...\{2432E589-6256-4513-B0BF-EFA8E325D5F0}) (Version: 1.0.12100.2.0 - Nero AG) Hidden

Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 11.0.11800.31.0 - Nero AG) Hidden

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR) Hidden

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

Network (HKLM\...\{B2455727-ED8F-4643-8A6E-F4AB8DE3633D}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (HKLM\...\{7B15D70E-9449-4CFB-B9BC-798465B2BD5C}) (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (HKLM\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (HKLM\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (HKLM\...\{3D8D8094-9789-402E-BD28-337343F1DE6F}) (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (HKLM\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (HKLM\...\{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (HKLM\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (HKLM\...\{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (HKLM\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (HKLM\...\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}) (Version: 130.0.376.000 - Hewlett-Packard) Hidden

TuneUp Utilities 2014 (de-DE) (HKLM\...\{EA594E28-547D-4FB5-AED8-3628EFB1474D}) (Version: 14.0.1000.340 - TuneUp Software) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WebReg (HKLM\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

========================= Memory info: ===================================
 

Percentage of memory in use: 36%

Total physical RAM: 3054.7 MB

Available physical RAM: 1938.23 MB

Total Virtual: 6105.66 MB

Available Virtual: 4945.77 MB
 

========================= Partitions: =====================================
 

1 Drive c: () (Fixed) (Total:931.41 GB) (Free:826.59 GB) NTFS
 

========================= Users: ========================================
 

Benutzerkonten fr \\ANTJE-PC
 

Administrator            Antje                    Gast                     

Der Befehl wurde erfolgreich ausgefhrt.
 

========================= Minidump Files ==================================
 

C:\Windows\Minidump\063014-41699-01.dmp
 

**** End of log ****

Das wars erst mal. Vielen dank Schrauber LG Lotto

schrauber

13.09.2015 09:04

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ACHTUNG

Hosts:

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Iminent
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Lotto

14.09.2015 10:11

Hallo Schrauber, erst mal das erste Ergebnis.

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:13-09-2015 01

durchgeführt von Antje (2015-09-13 21:44:51) Run:2

Gestartet von C:\Users\Antje\Desktop

Geladene Profile: Antje (Verfügbare Profile: Antje)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

Iminent (Version: 4.10.0.0 - Iminent) Hidden <==== ACHTUNG

Hosts:

Emptytemp:

*****************
 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD4CEACE-8B19-4B1C-AE82-DE0FC5787D4C}\\SystemComponent => Wert nicht gefunden.

C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben

Hosts erfolgreich wiederhergestellt.

EmptyTemp: => 16.6 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 21:44:54 ====

Durch diesen Vorgang war erst mal das Internet total lahmgelegt. Ich habe es aber wieder hinbekommen....

Das 2. habe ich auch erledigt, dieses Programm war tatsächlich drauf.

Den Rest mach ich später.

LG lotto

Hallo Schrauber ,
als erstes das ADW ....

Code:

# AdwCleaner v5.007 - Bericht erstellt am 14/09/2015 um 11:03:17

# Aktualisiert am 08/09/2015 von Xplode

# Datenbank : 2015-09-10.1 [Server]

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x86)

# Benutzername : Antje - ANTJE-PC

# Gestartet von : C:\Users\Antje\Downloads\AdwCleaner_5.007.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 

[-] Ordner Gelöscht : C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}

[-] Ordner Gelöscht : C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

[-] Ordner Gelöscht : C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

[-] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

[-] Ordner Gelöscht : C:\Users\Antje\AppData\Roaming\Yahoo!\Companion
 

***** [ Dateien ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Geplante Tasks ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}

[-] Schlüssel Gelöscht : HKCU\Software\Yahoo\Companion

[-] Schlüssel Gelöscht : HKCU\Software\Yahoo\YFriendsBar

[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Yahoo\Companion

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Yahoo\Companion

[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\AppDataLow\Software\Yahoo\Companion
 

***** [ Internetbrowser ] *****
 

[-] [C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274\prefs.js] [Preference] Gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");
 

*************************
 

:: Winsock Einstellungen zurückgesetzt
 

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [2209 Bytes] ##########

nun das Maleware

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Error, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Update, Bad md5 or size: akadomains, 11, 

Error, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Update, Bad md5 or size: akaips, 11, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, Remediation Database, 2015.5.13.1, 2015.9.11.1, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, AKA IP Database, 0.0.0.0, 2015.9.11.2, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, AKA Domain Database, 0.0.0.0, 2015.9.11.2, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, Rootkit Database, 2015.6.2.1, 2015.8.16.1, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, Domain Database, 0.0.0.0, 2015.9.13.3, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, IP Database, 0.0.0.0, 2015.9.11.5, 

Update, 14.09.2015 10:27, SYSTEM, ANTJE-PC, Manual, Malware Database, 2015.6.3.3, 2015.9.14.1, 

Scan, 14.09.2015 10:46, SYSTEM, ANTJE-PC, Manual, Start: 14.09.2015 10:27, Dauer: 13 Min. 27 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 8 Nicht-Malware-Erkennungen, 

Error, 14.09.2015 10:50, SYSTEM, ANTJE-PC, Protection, IsLicensed, 13, 

Protection, 14.09.2015 10:50, SYSTEM, ANTJE-PC, Protection, Malware Protection, Stopping, 

Protection, 14.09.2015 10:50, SYSTEM, ANTJE-PC, Protection, Malware Protection, Stopped, 
 

(end)

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 14.09.2015

Suchlaufzeit: 10:27

Protokolldatei: mbam1.txt

Administrator: Ja
 

Version: 2.1.8.1057

Malware-Datenbank: v2015.09.14.01

Rootkit-Datenbank: v2015.08.16.01

Lizenz: Kostenlose Version

Malware-Schutz: Deaktiviert

Schutz vor bösartigen Websites: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x86

Dateisystem: NTFS

Benutzer: Antje
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 461889

Abgelaufene Zeit: 13 Min., 27 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Warnen

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 3

PUP.Optional.Bandoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA08C27D-92D6-476B-959C-0C8B2F911242}, In Quarantäne, [d6f3a38c2566a591b9c1562a37cd17e9], 

PUP.Optional.Bandoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFB82720-78E2-475F-AA12-A25DC47B8E12}, In Quarantäne, [428788a70487c76f35458bf5d52fca36], 

PUP.Optional.W3i, HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6D0FF7A0-C6C5-4A24-8F09-C074ED2B20A0}, In Quarantäne, [02c757d8a0eb023487e82698768e01ff], 
 

Registrierungswerte: 3

PUP.Optional.Bandoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA08C27D-92D6-476B-959C-0C8B2F911242}|AppPath, C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar, In Quarantäne, [d6f3a38c2566a591b9c1562a37cd17e9]

PUP.Optional.Bandoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFB82720-78E2-475F-AA12-A25DC47B8E12}|AppPath, C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar, In Quarantäne, [428788a70487c76f35458bf5d52fca36]

PUP.Optional.W3i, HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0}|URL, hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,105,0_0,Search,20140622,20250,0,FF29,6923, In Quarantäne, [02c757d8a0eb023487e82698768e01ff]
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 2

PUP.Optional.MP3Rocket, C:\Users\Public\Desktop\MP3 Rocket 7.3.1.lnk, Keine Aktion durch Benutzer, [2b9e52dd2c5f1422f619d7ce956f9a66], 

PUP.Optional.MindSpark, C:\Program Files\49res.dll, In Quarantäne, [557426091873d66052ed4a5654b135cb], 
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

schrauber

14.09.2015 20:00

Fehlt noch JUnkware Removal Tool und das frische FRST log :)

Lotto

15.09.2015 12:00

Hallo Schrauber, ich hatte das Adw cleaner nicht richtig eingestellt ! Noch mal das ganze.

Code:

# AdwCleaner v5.007 - Bericht erstellt am 15/09/2015 um 11:47:05

# Aktualisiert am 08/09/2015 von Xplode

# Datenbank : 2015-09-10.1 [Server]

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x86)

# Benutzername : Antje - ANTJE-PC

# Gestartet von : C:\Users\Antje\Downloads\AdwCleaner_5.007(1).exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 
 

***** [ Dateien ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Geplante Tasks ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Internetbrowser ] *****
 

[-] [C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274\prefs.js] [Preference] Gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");
 

*************************
 

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Chrome Richtlinien gelöscht
 

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [966 Bytes] ##########

Ansonsten habe ich grade totale probleme Seiten zu öffnen, Programme zu starten und den Internetbrowser zu öffnen. Entweder öffnet sich ein programm 4o mal und mehr ...oder gar nicht . Der taskmanager kann diese programme dann auch sehr schwer zu machen sehr komisch. Soll ich erst mal den rest noch machen ??? Oder was anderes?
LG lotto

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.1 (09.08.2015:1)

OS: Windows 7 Ultimate x86

Ran by Antje on 15.09.2015 at 12:04:55,19

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Tasks
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BC51C75D-1339-43dd-921D-49F5D0A2F625}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update AtuZi
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] C:\Program Files\mp3 rocket

Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mp3 rocket
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Antje\AppData\Roaming\mozilla\firefox\profiles\ja1ioq3g.default-1433324730274\prefs.js
 

user_pref(browser.newtab.url, chrome://unitedtb/content/newtab/newtab-page.xhtml);

user_pref(extensions.unitedinternet.email.runonceNewUsersShown, true);
 
 
 

~~~ Chrome
 
 

[C:\Users\Antje\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
 

[C:\Users\Antje\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
 

[C:\Users\Antje\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
 

[C:\Users\Antje\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.09.2015 at 12:17:30,08

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:13-09-2015 01

durchgeführt von Antje (Administrator) auf ANTJE-PC (15-09-2015 12:19:25)

Gestartet von C:\Users\Antje\Desktop

Geladene Profile: Antje (Verfügbare Profile: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.28.13\GoogleCrashHandler.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [TrayServer] => C:\Program Files\MAGIX\Filme_auf_DVD_8\TrayServer.exe [90112 2008-01-17] (MAGIX AG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157968 2015-08-13] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [782008 2015-08-06] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-08-03]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-03]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk [2015-03-10]

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{63A805D7-63E5-4A67-82C7-137541CDC2D5}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{7CAC6D11-DCBC-45D4-A3E7-E99C834D8BD6}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{BF9EBB8B-EC0A-441E-9E40-612563F706A2}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-01] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-01] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF Homepage: chrome://unitedtb/content/newtab/startpage.xhtml

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Extension: GMX MailCheck - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274\Extensions\browser-mailcheck@gmx.net [2015-08-09]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-07-31]
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google-Suche) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Tabellen) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browserschutz) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Google Mail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx <nicht gefunden>

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [887128 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [461672 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [461672 2015-08-06] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1213072 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

S2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]

S2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Datei ist nicht signiert]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Datei ist nicht signiert]

S2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [Datei ist nicht signiert]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

S2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [235696 2015-07-31] (McAfee, Inc.)

S2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [Datei ist nicht signiert]

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

U4 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-08-06] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-08-06] (Avira Operations GmbH & Co. KG)

U4 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-08-06] (Avira Operations GmbH & Co. KG)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [Datei ist nicht signiert]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [Datei ist nicht signiert]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-08-06] (Avira Operations GmbH & Co. KG)

S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [561920 2008-11-19] (eMPIA Technology, Inc.)

S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [455168 2008-11-19] (eMPIA Technology, Inc.)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-15 12:19 - 2015-09-15 12:20 - 00022878 _____ C:\Users\Antje\Desktop\FRST.txt

2015-09-15 12:17 - 2015-09-15 12:17 - 00001907 _____ C:\Users\Antje\Desktop\JRT.txt

2015-09-15 12:03 - 2015-09-09 20:11 - 01800104 _____ (Malwarebytes Corporation) C:\Users\Antje\Desktop\JRT.exe

2015-09-15 12:00 - 2015-09-15 12:01 - 01799392 _____ (Malwarebytes Corporation) C:\Users\Antje\Downloads\JRT_7600(1).exe

2015-09-15 12:00 - 2015-09-15 12:00 - 01799392 _____ (Malwarebytes Corporation) C:\Users\Antje\Downloads\JRT_7600.exe

2015-09-15 11:43 - 2015-09-15 11:43 - 01660416 _____ C:\Users\Antje\Downloads\AdwCleaner_5.007(1).exe

2015-09-14 11:40 - 2015-09-14 11:40 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Avira

2015-09-14 11:33 - 2015-08-06 20:58 - 00136728 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-09-14 11:33 - 2015-08-06 20:58 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-09-14 11:33 - 2015-08-06 20:58 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-09-14 11:33 - 2015-08-06 20:58 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-09-14 11:29 - 2015-09-14 11:29 - 04772888 _____ (Avira Operations GmbH & Co. KG) C:\Users\Antje\Downloads\avira_de_av_55f692f2bed32__ws.exe

2015-09-14 11:27 - 2015-09-14 11:30 - 00001172 _____ C:\Users\Public\Desktop\Avira Launcher.lnk

2015-09-14 11:01 - 2015-09-14 11:02 - 01660416 _____ C:\Users\Antje\Downloads\AdwCleaner_5.007.exe

2015-09-14 10:58 - 2015-09-14 10:58 - 00002708 _____ C:\Users\Antje\Desktop\mbam1.txt

2015-09-14 10:58 - 2015-09-14 10:58 - 00001338 _____ C:\Users\Antje\Desktop\mbam.txt

2015-09-14 10:25 - 2015-09-14 10:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.8.1057.exe

2015-09-13 21:36 - 2015-09-13 21:36 - 01694208 _____ (Farbar) C:\Users\Antje\Desktop\FRST.exe

2015-09-13 21:24 - 2015-09-13 21:29 - 00000000 ____D C:\Users\Antje\Downloads\FRST-OlderVersion

2015-09-12 12:31 - 2015-09-12 12:32 - 00036298 _____ C:\Users\Antje\Downloads\MTB.txt

2015-09-12 12:29 - 2015-09-12 12:29 - 00891392 _____ (Farbar) C:\Users\Antje\Downloads\MiniToolBox.exe

2015-09-11 12:53 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-09-11 12:42 - 2015-09-02 03:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-11 12:42 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-09-11 12:41 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-11 12:41 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-11 12:41 - 2015-08-15 07:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-11 12:41 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-11 12:41 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-11 12:41 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-11 12:41 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-11 12:41 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-11 12:41 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-11 12:41 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-11 12:41 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-11 12:41 - 2015-08-15 07:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-11 12:41 - 2015-08-15 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-11 12:41 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-11 12:41 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-11 12:41 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-11 12:41 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-11 12:41 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-11 12:41 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-11 12:41 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-11 12:41 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-11 12:41 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-11 12:41 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-11 12:41 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-11 12:41 - 2015-08-05 19:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-11 12:41 - 2015-08-04 19:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-11 12:41 - 2015-08-04 19:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-09-11 12:41 - 2015-08-04 19:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-09-11 12:41 - 2015-08-04 18:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-09-11 12:41 - 2015-07-22 19:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-09-11 12:41 - 2015-07-22 19:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-09-11 12:41 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-09-11 12:41 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-09-11 12:41 - 2015-07-22 18:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-09-11 12:41 - 2015-07-22 18:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-09-11 12:41 - 2015-07-22 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-09-11 12:41 - 2015-07-22 18:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-09-11 12:41 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-09-11 12:41 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-09-11 12:40 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-11 12:40 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-11 12:40 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-11 12:40 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-11 12:40 - 2015-06-25 11:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-09-11 12:40 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-09-11 12:40 - 2015-06-25 11:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-09-04 12:31 - 2015-09-04 12:31 - 00002007 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\Program Files\McAfee Security Scan

2015-09-01 18:38 - 2015-09-15 11:47 - 00000000 ____D C:\AdwCleaner

2015-09-01 18:37 - 2015-09-01 18:37 - 01654272 _____ C:\Users\Antje\Downloads\AdwCleaner_5.005.exe

2015-09-01 18:03 - 2015-09-01 18:03 - 00000000 ____D C:\Program Files\Common Files\Java

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Sun

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\.oracle_jre_usage

2015-08-24 19:22 - 2015-08-24 19:22 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\Program Files\QuickTime

2015-08-24 19:21 - 2015-08-24 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-08-24 19:19 - 2015-08-24 19:21 - 00000000 ____D C:\Program Files\iTunes

2015-08-24 19:19 - 2015-08-24 19:19 - 00000000 ____D C:\Program Files\iPod
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-15 12:19 - 2015-04-10 18:37 - 00000000 ____D C:\FRST

2015-09-15 11:57 - 2015-02-06 18:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-09-15 11:57 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-15 11:57 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-15 11:52 - 2011-12-23 22:41 - 01256910 _____ C:\Windows\WindowsUpdate.log

2015-09-15 11:51 - 2011-12-29 16:18 - 00000000 ____D C:\Users\Antje\AppData\Local\CrashDumps

2015-09-15 11:48 - 2014-04-18 13:26 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-15 11:48 - 2013-06-25 15:14 - 00078816 _____ C:\Windows\setupact.log

2015-09-15 11:48 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-15 11:47 - 2014-04-18 13:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-15 10:55 - 2012-10-17 09:48 - 00000000 ____D C:\ProgramData\Avira

2015-09-15 10:55 - 2012-10-17 09:48 - 00000000 ____D C:\Program Files\Avira

2015-09-15 10:55 - 2011-12-23 23:19 - 01037012 _____ C:\Windows\PFRO.log

2015-09-14 11:45 - 2012-02-06 12:40 - 00000000 ____D C:\Users\Antje\AppData\Roaming\vlc

2015-09-14 11:34 - 2012-10-17 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-09-14 11:28 - 2014-08-05 09:45 - 00000000 ____D C:\ProgramData\Package Cache

2015-09-14 11:03 - 2012-01-21 13:11 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Yahoo!

2015-09-14 10:49 - 2009-07-14 10:56 - 00000000 ____D C:\Windows\ShellNew

2015-09-13 21:53 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF

2015-09-13 21:24 - 2015-04-10 18:36 - 01694208 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-09-12 14:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache

2015-09-12 12:27 - 2015-04-10 18:38 - 00051931 _____ C:\Users\Antje\Downloads\Addition.txt

2015-09-12 12:27 - 2015-04-10 18:37 - 00043493 _____ C:\Users\Antje\Downloads\FRST.txt

2015-09-12 12:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET

2015-09-12 12:10 - 2011-12-23 22:55 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-12 12:05 - 2009-07-14 06:33 - 00493648 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-12 12:03 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-12 12:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE

2015-09-11 12:42 - 2013-08-15 11:02 - 00000000 ____D C:\Windows\system32\MRT

2015-09-10 13:21 - 2011-12-23 22:50 - 00000000 ____D C:\Users\Antje

2015-09-10 13:20 - 2015-06-03 11:45 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2015-09-10 13:20 - 2015-04-05 12:39 - 00000000 ___SD C:\Windows\system32\GWX

2015-09-10 13:20 - 2015-03-10 14:05 - 00000000 ____D C:\Users\Antje\AppData\Local\NETGEARGenie

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration

2015-09-09 09:15 - 2013-04-11 16:27 - 00000000 ____D C:\ProgramData\TEMP

2015-09-01 18:03 - 2014-06-28 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-09-01 18:03 - 2012-02-28 12:18 - 00000000 ____D C:\Program Files\Java

2015-09-01 18:01 - 2014-06-28 12:48 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2015-09-01 17:55 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2015-08-31 12:25 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-08-26 18:36 - 2009-10-14 04:21 - 132039072 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-08-24 19:19 - 2012-09-14 17:42 - 00000000 ____D C:\Program Files\Common Files\Apple
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Einige Dateien in TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-09-11 14:29
 

==================== Ende vom FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:13-09-2015 01

durchgeführt von Antje (2015-09-15 12:20:19)

Gestartet von C:\Users\Antje\Desktop

Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2011-12-23 20:45:55)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)

Avira Browser Safety (HKLM\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)

Avira Launcher (HKLM\...\{315dd168-0794-4cf1-8355-f195cde642fc}) (Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG)

Avira Launcher (Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG) Hidden

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Earth (HKLM\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{025E78AC-BD91-4E9E-B165-3C09D4084BA4}) (Version: 12.2.2.25 - Apple Inc.)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Filme auf DVD 8 8.0.2.1 (D) (HKLM\...\MAGIX Filme auf DVD 8 D) (Version: 8.0.2.1 - MAGIX AG)

MAGIX Foto Manager 8 (HKLM\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.499 - MAGIX AG)

MAGIX Fotobuch 3.6 (HKLM\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)

MAGIX Online Druck Service (HKLM\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Screenshare (HKLM\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (HKLM\...\MAGIX Speed burnR D) (Version: 6.0.1.4 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX USB-Videowandler 2 Device Driver (HKLM\...\TVEpaDrv) (Version:  - )

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 40.0.3 (x86 de) (HKLM\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version: 7.3.1 - MP3 Rocket Inc)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Mufin MusicFinder Base 1.5.3.255 (D) (HKLM\...\Mufin MusicFinder Base D) (Version: 1.5.3.255 - MAGIX AG)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

23-08-2015 21:30:36 Windows Update

29-08-2015 13:22:00 Windows Update

01-09-2015 17:59:49 Windows Update

05-09-2015 11:34:24 Windows Update

09-09-2015 09:17:48 Windows Update

10-09-2015 13:17:26 Wiederherstellungsvorgang

10-09-2015 21:36:17 Windows Update

10-09-2015 21:40:17 Windows Update

11-09-2015 12:30:10 Windows Update

11-09-2015 17:00:15 Windows Update

13-09-2015 21:58:15 Revo Uninstaller's restore point - Iminent

15-09-2015 12:05:06 JRT Pre-Junkware Removal
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:04 - 2015-09-13 21:44 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {2521EAD9-A0BD-4CDA-A9C4-839C4F72F6CC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3DE9191B-EC3D-4C7A-8030-67A47C082AC3} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {78E3F0F9-AEA8-4BDD-87DF-AFE83D6F7BEF} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG)

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{6443F61C-3A3C-4597-A28C-31DB155CCB70}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{9C43709F-389B-4E81-A75B-8AA730238614}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{6C73E9D6-806F-44DA-B8A1-DC4AB60AD668}] => (Allow) LPort=1542

FirewallRules: [{5760ED37-ECF5-41B6-BF11-D2DD6522852B}] => (Allow) LPort=1542

FirewallRules: [{26120E0F-5846-4770-81E8-410A87C23E04}] => (Allow) LPort=53

FirewallRules: [{845F3AFD-21A3-4809-82ED-6E490531DA19}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{ED743F49-B445-4F6D-AD70-47F29C2CCBED}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{49D6C110-D33B-4239-B68C-A17DD263949D}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{8E43156A-8874-40C5-96B3-C87068B3C7E4}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{4F2AC97B-C2F8-4A94-B806-20AE13CBB89E}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{EAA15E68-0EBC-40E3-9371-F46B1DD8D154}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{4E589D43-BA14-425D-815E-9FDDBF11D6DC}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{8428F1E9-113F-4859-8D76-7D96F45969D3}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{D18F3C0B-07E4-41F6-8FED-97FE4EE08FFF}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{1FF00E57-0C3F-417E-82DF-589C8B7D8F8D}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{6EF47480-8E7E-46C8-84E6-38776DB65251}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F27CCE4F-D512-450D-80BE-71DF8217D23F}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F26FDD84-DBA4-4135-9524-54A9A2C0132A}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{994E5B95-AFBE-4833-B365-878DB0F6E1FF}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{563C087F-3C22-495D-8ED4-0CA558A39013}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{E087765F-7963-4295-B56C-78206E0620A0}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{3356F293-8B2C-4B7D-B953-34913152C84D}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{DE97E617-873D-426F-A82F-75AFBD5D865B}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{29F5092A-3596-4100-8E33-B331461E9EA4}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{2EC37B28-F031-4717-9354-565DC74CCD8C}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{1AC262E1-F3B3-475F-BDE7-EAC9BC1D65F6}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{251A7ED1-9B21-4335-A835-F080C11224DF}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{AD0CAAEF-53DE-4734-A30B-DACE2435B815}] => (Allow) D:\setup\hpznui01.exe

FirewallRules: [{A077FFAD-1E1E-477E-8E6D-D1EF76072FCD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{AD4F6935-251E-4A1C-B59B-4CC072954A7C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{8DC91D75-A5F9-4D27-B850-214575FB0458}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{BA99016D-6211-4E53-8E39-120D1AE95C0C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{440373C8-649D-4F8A-992E-866256700ECD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{A81C27C0-F88B-4129-8B69-5754FBF5961D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{71D254FB-2F9B-4508-87D2-89B77E360109}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{E151630B-A150-4AF3-8E1C-16B6BE2861B4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{0C60917C-EEF5-4AA4-ABE8-4888EAEB21F5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{A2D911FD-2AF7-495C-B92D-9B81AA60BE66}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{3F3C1372-9DF3-4EBA-9572-A7AF18B2B656}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{718BFE45-4AF7-4DBD-8A6C-F6A76D4CA300}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{B9F4BA73-51B1-47D2-86DC-7BD990E78A7D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{EE41020D-3107-47D3-B522-2286E2B10D26}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{DF1E8A34-2BDD-4118-A1FC-FD06EBCC624F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{0765C8F5-7EFA-4F28-811F-5D26F7BE8D6F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{033255DD-104F-46B5-BFF3-7E29F399E667}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{A99AADC3-6BD9-4CAF-8896-4000F4720398}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [{30B9B983-71C8-409B-9F68-2A557D1BC63C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{5CD3C397-7A40-4461-A47D-E52BF95B51D9}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{9A37A5E8-FCB5-46CE-B409-A6C5E9222EC0}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{D351BEDA-436B-464D-AFA7-5DBE6FDD5ECE}] => (Allow) C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [TCP Query User{167C9AFB-277B-4CE1-87DB-20CC8D9776EA}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{1A927E62-8276-46D9-A7DE-3DAE6B7D3DDF}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{037DD8C0-2256-4507-9E7C-50C82E2F9A22}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{FE9891CB-4AB8-4897-9C00-F7F1910FC164}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{24855897-A88C-46B8-99E3-004C6D6B3DAA}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{630177AD-44D8-449D-B905-8757D59131B7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1CFF399B-67B7-46DB-987F-7235ACADBF01}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{DA8CD2E3-867B-4333-82F3-49F8F6FFA170}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{3965B519-780E-44BB-BDD8-A94FB3D2E77A}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [UDP Query User{7AB29ACB-056B-4E4C-9074-6493C561E8EE}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [TCP Query User{EED53D04-4C82-406F-B396-7AF67BEABD56}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [UDP Query User{A8F8F891-643F-457B-8A6C-550373560C17}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [TCP Query User{EEBAB07B-6F90-4AC2-BBF1-40B2670D0EB9}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [UDP Query User{D1995635-EAE3-40DD-BB86-949F33CD18DA}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [{F9098E9C-0A93-4D76-B74A-BDB1BDA44724}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{C3E17FCB-BA22-4151-AA5F-2F27C2BF9DAA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FE3726DF-F604-49DA-B575-9CFA51BF0669}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{CBC96929-829D-4635-82F0-3667EEDB40D8}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/15/2015 12:04:53 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm avcenter.exe, Version 15.0.12.420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 32d4
 

Startzeit: 01d0ef9de2d49b27
 

Endzeit: 180
 

Anwendungspfad: C:\Program Files\Avira\Antivirus\avcenter.exe
 

Berichts-ID: 2cf207d1-5b91-11e5-b864-00038a000015
 

Error: (09/15/2015 11:51:31 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/15/2015 11:51:31 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/15/2015 11:49:19 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xc48

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/15/2015 11:48:55 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/15/2015 11:47:24 AM) (Source: ESENT) (EventID: 485) (User: )

Description: avguard (3212) GaviDB_0: Versuch, Datei "C:\ProgramData\Avira\Antivirus\EVENTDB\Logs\edbtmp.log" zu löschen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Löschen von Dateien.
 

Error: (09/15/2015 11:47:14 AM) (Source: ESENT) (EventID: 490) (User: )

Description: avguard (3212) GaviDB_0: Versuch, Datei "C:\ProgramData\Avira\Antivirus\EVENTDB\edb.chk" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 

Error: (09/15/2015 11:40:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/15/2015 11:40:55 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/15/2015 11:39:55 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0x9bc

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 
 

Systemfehler:

=============

Error: (09/15/2015 12:13:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:13:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:13:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:12:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "HP Support Solutions Framework Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:12:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "FsUsbExService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:12:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "FABS - Helping agent for MAGIX media database" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:12:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/15/2015 12:12:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/15/2015 12:10:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Avira Planer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/15/2015 12:10:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Creative Audio Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Prozentuale Nutzung des RAM: 35%

Installierter physikalischer RAM: 3054.7 MB

Verfügbarer physikalischer RAM: 1973.73 MB

Summe virtueller Speicher: 6105.66 MB

Verfügbarer virtueller Speicher: 4655.63 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:826.85 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

Hallo Schrauber , ich habe das alte avira gelöscht seit dem geht der pc wieder schneller und hängt sich nicht auf. LG Lotto

schrauber

16.09.2015 06:15

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Lotto

16.09.2015 20:33

Hallo Schrauber, der eset hatte 2 trojaner gefunden . Die log File finde ich aber nicht. Hm jetzt darf das noch mal suchen. Ich weis trotzdem nicht wie ich das Ergebnis rauskriege .

LG lotto

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# end=init

# utc_time=2015-09-16 09:11:59

# local_time=2015-09-16 11:11:59 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 25787

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# end=updated

# utc_time=2015-09-16 09:15:50

# local_time=2015-09-16 11:15:50 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# engine=25787

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-09-16 10:41:46

# local_time=2015-09-16 12:41:46 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 5399 194031297 0 0

# scanned=244810

# found=2

# cleaned=0

# scan_time=5156

sh=503EB799C61C6E4E0951536A8320AF92CC68938B ft=1 fh=f87e77f83030339c vn="Variante von Win32/ExtenBro.BK Trojaner" ac=I fn="C:\Program Files\Google\Chrome\Application\chrome.dll"

sh=6BF4F8D7E23CC3084F6C87A4181EB0963DFE349C ft=1 fh=64df0569273bc429 vn="Variante von Win32/ExtenBro.BK Trojaner" ac=I fn="C:\Program Files\Google\Chrome\Application\update.dll"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# end=init

# utc_time=2015-09-16 10:50:12

# local_time=2015-09-16 12:50:12 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 25787

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# end=updated

# utc_time=2015-09-16 10:50:58

# local_time=2015-09-16 12:50:58 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=2314c09dc4e9244eaf6d3314fa80a8b6

# engine=25787

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-09-16 12:14:46

# local_time=2015-09-16 02:14:46 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 10979 194036877 0 0

# scanned=245448

# found=2

# cleaned=0

# scan_time=5027

sh=503EB799C61C6E4E0951536A8320AF92CC68938B ft=1 fh=f87e77f83030339c vn="Variante von Win32/ExtenBro.BK Trojaner" ac=I fn="C:\Program Files\Google\Chrome\Application\chrome.dll"

sh=6BF4F8D7E23CC3084F6C87A4181EB0963DFE349C ft=1 fh=64df0569273bc429 vn="Variante von Win32/ExtenBro.BK Trojaner" ac=I fn="C:\Program Files\Google\Chrome\Application\update.dll"

Code:

 Results of screen317's Security Check version 1.008  

 Windows 7 Service Pack 1 x86 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 WinPatrol 

 SpywareBlaster 5.0    

 TuneUp Utilities 2014 (de-DE)  

 Java 8 Update 60  

 Adobe Flash Player         18.0.0.232  

 Mozilla Firefox (40.0.3) 

 Google Chrome (45.0.2454.85) 

 Google Chrome (45.0.2454.93) 

 Google Chrome (update.dll..) 
 ````````Process Check: objlist.exe by Laurent````````  

 WinPatrol winpatrol.exe is disabled! 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:13-09-2015 01

durchgeführt von Antje (2015-09-16 21:31:23)

Gestartet von C:\Users\Antje\Desktop

Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2011-12-23 20:45:55)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1184766340-1357020511-1184547663-500 - Administrator - Disabled)

Antje (S-1-5-21-1184766340-1357020511-1184547663-1000 - Administrator - Enabled) => C:\Users\Antje

Gast (S-1-5-21-1184766340-1357020511-1184547663-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1184766340-1357020511-1184547663-1002 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden

4500_G510nz_Help (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz (Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510nz_Software_Min (Version: 000.0.423.000 - Hewlett-Packard) Hidden

ABBYY FineReader 11 (HKLM\...\{F1100000-0008-0000-0001-074957833700}) (Version: 11.0.289 - ABBYY)

Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden

Adblock IE 2.2 (HKLM\...\{56D01524-CD68-4576-B1AE-D572E8EAFF3D}) (Version: 2.2.1524 - MGTEK)

Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.)

AOL Deinstallation (HKLM\...\AOL Deinstallation) (Version:  - )

AP Tuner 3.08 (HKLM\...\AP Tuner 3.08) (Version:  - )

Apple Application Support (32-Bit) (HKLM\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{538227C6-C74B-4A74-99E1-2C0B4F9DA5E1}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)

ASRock eXtreme Tuner v0.1.53 (HKLM\...\ASRock eXtreme Tuner_is1) (Version:  - )

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.35 - Atheros Communications Inc.)

BestPractice (remove only) (HKLM\...\BestPractice) (Version:  - )

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden

CK Gruß- und Einladungskarten Designer (HKLM\...\{579C4753-8A98-403C-8A04-C576BA8CE26A}) (Version: 1.80.0000 - CK Software)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden

ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )

Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden

FileHippo App Manager (HKLM\...\FileHippo.com) (Version:  - FileHippo.com)

Firebird SQL Server - MAGIX Edition (HKLM\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)

Google Earth (HKLM\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510n-z (HKLM\...\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM\...\{C43602FE-988C-47BA-9F9F-B95FDDAFB624}) (Version: 11.50.0031 - Hewlett-Packard Company)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 130.0.371.000 - Hewlett-Packard) Hidden

iCloud (HKLM\...\{9A07AB4F-6B53-43E9-B7FC-7892E8C26BE3}) (Version: 4.1.1.53 - Apple Inc.)

Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Internet Explorer (Version: 9 - Microsoft Corporation) Hidden

iTuner (HKLM\...\{C49CBF9A-4AD7-4045-92BD-2C6E45680070}) (Version: 1.0.3 - iAppsPoint)

iTunes (HKLM\...\{025E78AC-BD91-4E9E-B165-3C09D4084BA4}) (Version: 12.2.2.25 - Apple Inc.)

Java 8 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.30 - Logitech Inc.)

MAGIX Filme auf DVD 8 8.0.2.1 (D) (HKLM\...\MAGIX Filme auf DVD 8 D) (Version: 8.0.2.1 - MAGIX AG)

MAGIX Foto Manager 8 (HKLM\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.499 - MAGIX AG)

MAGIX Fotobuch 3.6 (HKLM\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)

MAGIX Online Druck Service (HKLM\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)

MAGIX Screenshare (HKLM\...\{BB565180-FA52-40DA-A65E-651537008C34}) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Screenshare (HKLM\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)

MAGIX Speed burnR (HKLM\...\MAGIX Speed burnR D) (Version: 6.0.1.4 - MAGIX AG)

MAGIX Speed burnR (MSI) (HKLM\...\{B0975D89-8D51-445C-BB71-95826A96780C}) (Version: 7.0.2.6 - MAGIX AG)

MAGIX USB-Videowandler 2 Device Driver (HKLM\...\TVEpaDrv) (Version:  - )

MAGIX Video deluxe 17 Premium Download-Version (HKLM\...\MAGIX_MSI_Videodeluxe17_premium) (Version: 10.0.1.14 - MAGIX AG)

MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14 - MAGIX AG) Hidden

MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.163.2 - McAfee, Inc.)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft SkyDrive (HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\SkyDriveSetup.exe) (Version: 16.4.6010.0727 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 40.0.3 (x86 de) (HKLM\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)

MP3 Rocket (HKLM\...\MP3 Rocket) (Version: 7.3.1 - MP3 Rocket Inc)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

Mufin MusicFinder Base 1.5.3.255 (D) (HKLM\...\Mufin MusicFinder Base D) (Version: 1.5.3.255 - MAGIX AG)

Nero BurningROM 12 (HKLM\...\{3DAFE920-1B88-4C66-A39B-D743F28AF10D}) (Version: 12.5.01300 - Nero AG)

NETGEAR Genie (HKLM\...\NETGEAR Genie) (Version: 2.3.1.57 - NETGEAR Inc.)

NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.00.0000 - NETGEAR)

NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000 - NETGEAR) Hidden

Network (Version: 130.0.374.000 - Hewlett-Packard) Hidden

Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden

NVIDIA Grafiktreiber 267.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 267.42 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (HKLM\...\NVIDIAStereo) (Version: 7.17.12.6742 - NVIDIA Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

Platform (Version: 1.36 - VIA Technologies, Inc.) Hidden

Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden

QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samplitude Music Studio 17 Content Pack (HKLM\...\{B6FE6F0D-688B-458B-9E12-0F55E4009561}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0 - MAGIX AG) Hidden

Samplitude Music Studio 17 Vita Pack 1 (HKLM\...\{EE3264C1-2501-4D58-9B57-4D3F2F502599}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 2 (HKLM\...\{63D7FB4F-01A1-4A8B-9180-FF2FEF369AC8}) (Version: 1.0.0.0 - MAGIX AG)

Samplitude Music Studio 17 Vita Pack 3 (HKLM\...\{33F9A189-4F02-4784-8A57-F3983F9F9217}) (Version: 1.0.0.0 - MAGIX AG)

Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.)

Samsung Kies (Version: 2.0.2.11071_128 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.8.8855 - Skype Technologies S.A.)

Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)

Smart OCR 3.2.1.417 (HKLM\...\Smart OCR_is1) (Version: 3.2.1.417 - SmartSoft, LLC.)

SmartWebPrinting (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Sound Blaster X-Fi MB (HKLM\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)

Sound Effects (HKLM\...\{A044C900-5DE1-4986-B0B8-D6A40271A929}) (Version: 2.0 - Music Oasis)

Splashtop Connect IE (HKLM\...\{F9F5EF72-18CF-4DCF-A721-EC86B94DAC46}) (Version: 1.1.12.1 - Splashtop Inc.)

SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)

Status (Version: 130.0.373.000 - Hewlett-Packard) Hidden

SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.2.1 - Krzysztof Kowalczyk)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Text-To-Speech-Runtime (HKLM\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

TomTom HOME (HKLM\...\{BB05590A-6602-43F3-A400-77EA0976BC0A}) (Version: 2.9.8 - Ihr Firmenname)

TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (Version: 130.0.376.000 - Hewlett-Packard) Hidden

TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden

VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.0.2014.0 - BillP Studios)

WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

XFastUsb (HKLM\...\XFastUsb) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{1853e19a-4e54-4190-8deb-2e1cc947cd60}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{248FDB00-ABE4-DA9A-AEAA-45651873E13C}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7629C9DE-2E38-4963-A01C-02FFAC203D87}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{B9F3009B-976B-41C4-A992-229DCCF3367C}\InprocServer32 -> C:\Program Files\AOL 9.0 VRa\axtrack.dll (AOL, LLC.)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\FileSyncApi.dll (Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

09-09-2015 09:17:48 Windows Update

10-09-2015 13:17:26 Wiederherstellungsvorgang

10-09-2015 21:36:17 Windows Update

10-09-2015 21:40:17 Windows Update

11-09-2015 12:30:10 Windows Update

11-09-2015 17:00:15 Windows Update

13-09-2015 21:58:15 Revo Uninstaller's restore point - Iminent

15-09-2015 12:05:06 JRT Pre-Junkware Removal

15-09-2015 12:23:23 Revo Uninstaller's restore point - Avira Launcher

15-09-2015 12:34:08 Revo Uninstaller's restore point - Avira Antivirus

15-09-2015 12:55:17 Removed Avira Browser Safety

16-09-2015 10:05:13 Windows Update
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:04 - 2015-09-13 21:44 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {03AF9F3C-D4C3-4C66-B3FF-94385E5067CD} - System32\Tasks\{B884BA27-1BA3-408A-81E3-F2C080791443} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\Temp1_BEHRINGER_2902_WIN32_2.8.40.zip\BEHRINGER_2902_WIN32_2.8.40\BEHRINGER_2902_WIN32_2.8.40\Setup.exe

Task: {045F01F1-6A51-4ECF-B1DD-8CCF826C5DFB} - System32\Tasks\{FFB24C49-EC37-46CD-A216-976544BB8314} => pcalua.exe -a C:\Users\Antje\Desktop\JRT.exe -d C:\Users\Antje\Desktop

Task: {1B17EE13-DDDB-43F6-B6DA-3C97F500DE28} - System32\Tasks\{E29FCD4D-FA12-4FEF-BF78-7C0A23C47959} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {22297514-A4E0-4D1E-9455-F8E19C59CD27} - System32\Tasks\{7D903461-66BC-4061-85C9-3F8FA32A51B9} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {2521EAD9-A0BD-4CDA-A9C4-839C4F72F6CC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {34A7E8FD-E08C-40C8-B837-2E80BE0A306C} - System32\Tasks\{8F4BC908-16EF-4848-947E-84237ECB4017} => pcalua.exe -a "C:\Users\Antje\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39AZ0FF2\JavaSetup6u30[1].exe" -d "C:\Program Files\AOL 9.0 VR\download"

Task: {3DE9191B-EC3D-4C7A-8030-67A47C082AC3} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {3E3A8E37-D463-4D55-AB37-945CB206B155} - System32\Tasks\{C6D23163-BC45-4502-81AE-7D050066D03F} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {40EFC56F-9252-4B38-B5DD-057EF1F79324} - System32\Tasks\{CB4134A4-24E6-4801-AD5D-F14F348B4F3F} => pcalua.exe -a C:\Users\Antje\Desktop\bpsetup_1_03_1.exe -d C:\Users\Antje\Desktop

Task: {4150AEE5-969E-4E5B-AEF6-97BE6F730F84} - System32\Tasks\{A08F0753-CF5F-49AB-AB7B-80A0EE041CAF} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {41FC715C-F2C7-4235-9B69-75187C62DB23} - System32\Tasks\{4587AF3A-277F-45C9-B12C-16027686B52D} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller"

Task: {57C67384-4613-42B2-ADC7-92B87B8578F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)

Task: {5DEFCCC0-E74F-468D-A8F6-4F22F81036C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {64D1831E-C822-4FCA-947A-B5016AD58892} - System32\Tasks\{3675A0DE-B202-46D2-A003-B992F464AB20} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {6BBEDC29-9ED3-4B72-B7A1-56887C6AC390} - System32\Tasks\{E82B671B-CDF5-42C2-AEA8-83DBABC52173} => C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14] ()

Task: {6C8698AE-7749-4212-A20A-971E7DC8167B} - System32\Tasks\{7BB1B85E-B970-42DE-84B0-FFA8991400FA} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {839FFEC1-FAB5-48BE-BCE8-5EAD317B5770} - System32\Tasks\{688F6887-C1D1-482E-902A-47A98F6F8E73} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {8F558DF4-0619-444D-9F4F-4EF9E314EDFC} - System32\Tasks\{2924322F-7F67-4D89-8E43-BB513C3355D9} => pcalua.exe -a "C:\Program Files\PDFReader\Uninstall\Uninstall.exe" -c /Uninstall

Task: {8FCC054A-B5A2-4FE4-A336-47D2FE2D5A53} - System32\Tasks\{DB43B7DB-CE90-4FCC-9313-0E86C931D367} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe

Task: {97F8691A-B0E3-4043-8305-1F364FA2C414} - System32\Tasks\{16F0FB3C-EDC9-4C3C-8E77-E44A47D38837} => pcalua.exe -a C:\Users\Antje\Downloads\OJ4500vG510n-z_Full_13.exe -d C:\Users\Antje\Downloads

Task: {9B27E834-691C-45FF-829F-B0A49E17AE7F} - System32\Tasks\{D85521BE-0739-42B1-A58D-22BB371F9D3F} => pcalua.exe -a C:\Users\Antje\AppData\Local\temp\Temp1_hm5-de-demo.zip\setup.exe

Task: {A10ECCC0-1B66-4A86-9C89-4C1818EBA884} - System32\Tasks\{B10FAAC6-490F-473F-82EE-FAC8F3944A72} => pcalua.exe -a "C:\Program Files\Common Files\aolshare\aolunins_de.exe" -d "C:\Program Files\Common Files\aolshare"

Task: {A772F5F9-4A3A-4937-BFB2-CD9F2B84E04E} - System32\Tasks\{AAEC8B2B-ED52-49A0-BD09-2F6923957A60} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u20-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {C85A48C0-2367-4172-9824-7B85B5DC8CE3} - System32\Tasks\{93CF804C-D379-4814-A73F-889901F831EE} => C:\Program Files\AOL 9.0 VRa\aol.exe [2007-06-21] (AOL, LLC.)

Task: {CAEE6CC7-AD53-4CC1-A7C7-9724173B870C} - System32\Tasks\{9FF61FC0-5E04-43DB-A5E4-669321A28ECB} => pcalua.exe -a C:\Users\Antje\Documents\APTunerInstall308.exe -d C:\Users\Antje\Documents

Task: {DA7A9810-A0B0-4FF4-82D3-BF57EE4B1784} - System32\Tasks\{FC053655-A6D1-46F9-809B-FA9D8B478771} => pcalua.exe -a C:\Users\Antje\AppData\Local\Temp\jre-8u25-windows-au.exe -d C:\Windows\system32 -c /installmethod=jau FAMILYUPGRADE=1

Task: {F4035C44-AD7B-4E5D-9FA6-46E9869883B3} - System32\Tasks\{0FD22678-8CEF-4815-98DF-A913E6C27D9C} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA2FC3A1-D577-4DBD-8EE6-43CB134A41DC} - System32\Tasks\{41CAD3C0-F353-4768-9A3E-93A6FC397468} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FA46B6C5-FA4C-40B2-AEE3-E802C0455ED9} - System32\Tasks\{5B46B342-73BF-4A89-9BA7-8DB3E9A931EE} => C:\Program Files\NETGEAR\WG111 Configuration Utility\WG111CFG.exe [2004-09-16] ()

Task: {FECA1FA1-49AA-4917-877A-F2454176197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00080496 ____R () C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00113264 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll

2011-12-23 23:11 - 2011-02-22 08:02 - 00623216 ____R () C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll

2015-09-16 10:00 - 2015-09-16 10:00 - 00697884 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0002\~df394b.tmp

2015-09-16 10:00 - 2015-09-16 10:00 - 00592896 _____ () C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0002\~de6248.tmp

2011-12-23 23:18 - 2009-02-06 19:52 - 00073728 _____ () C:\Windows\SYSTEM32\CmdRtr.DLL

2011-12-23 23:18 - 2009-04-20 12:55 - 00148480 _____ () C:\Windows\SYSTEM32\APOMngr.DLL

2013-09-29 03:14 - 2013-09-29 03:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll

2013-09-29 03:14 - 2013-09-29 03:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll

2015-01-09 08:40 - 2015-01-09 08:40 - 00640000 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll

2014-12-19 08:03 - 2014-12-19 08:03 - 01686016 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll

2015-01-09 08:01 - 2015-01-09 08:01 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2014-11-05 09:37 - 2014-11-05 09:37 - 00632832 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 06477824 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll

2014-06-30 04:05 - 2014-06-30 04:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll

2015-01-08 03:57 - 2015-01-08 03:57 - 02493952 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 22:27 - 2012-10-15 22:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll

2014-12-05 07:32 - 2014-12-05 07:32 - 01056768 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 10:39 - 2014-09-11 10:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll

2015-01-09 08:03 - 2015-01-09 08:03 - 01195008 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-01-14 07:45 - 2015-01-14 07:45 - 10388480 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-01-15 05:04 - 2015-01-15 05:04 - 02545664 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2014-12-18 09:49 - 2014-12-18 09:49 - 00177152 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2014-12-05 07:35 - 2014-12-05 07:35 - 00890368 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2014-11-05 10:00 - 2014-11-05 10:00 - 00435712 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll

2014-06-30 03:55 - 2014-06-30 03:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll

2014-11-03 10:23 - 2014-11-03 10:23 - 00143360 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 22:28 - 2012-10-15 22:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2013-09-29 03:13 - 2013-09-29 03:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2014-11-05 09:59 - 2014-11-05 09:59 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll

2014-11-05 10:01 - 2014-11-05 10:01 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-30 04:33 - 2014-06-30 04:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 08:00 - 2014-09-04 08:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll

2014-12-15 04:27 - 2014-12-15 04:27 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Antje\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun

MSCONFIG\startupreg: HostManager => C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KiesPDLR => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

MSCONFIG\startupreg: NUSB3MON => "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyDrive => "C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s

MSCONFIG\startupreg: TrayServer => C:\PROGRA~1\MAGIX\VIDEO_~2\TrayServer.exe

MSCONFIG\startupreg: WinPatrol => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
 

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{6443F61C-3A3C-4597-A28C-31DB155CCB70}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{9C43709F-389B-4E81-A75B-8AA730238614}] => (Allow) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

FirewallRules: [{6C73E9D6-806F-44DA-B8A1-DC4AB60AD668}] => (Allow) LPort=1542

FirewallRules: [{5760ED37-ECF5-41B6-BF11-D2DD6522852B}] => (Allow) LPort=1542

FirewallRules: [{26120E0F-5846-4770-81E8-410A87C23E04}] => (Allow) LPort=53

FirewallRules: [{845F3AFD-21A3-4809-82ED-6E490531DA19}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{ED743F49-B445-4F6D-AD70-47F29C2CCBED}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLDial.exe

FirewallRules: [{49D6C110-D33B-4239-B68C-A17DD263949D}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{8E43156A-8874-40C5-96B3-C87068B3C7E4}] => (Allow) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

FirewallRules: [{4F2AC97B-C2F8-4A94-B806-20AE13CBB89E}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{EAA15E68-0EBC-40E3-9371-F46B1DD8D154}] => (Allow) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe

FirewallRules: [{4E589D43-BA14-425D-815E-9FDDBF11D6DC}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{8428F1E9-113F-4859-8D76-7D96F45969D3}] => (Allow) C:\Program Files\AOL 9.0 VR\waol.exe

FirewallRules: [{D18F3C0B-07E4-41F6-8FED-97FE4EE08FFF}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{1FF00E57-0C3F-417E-82DF-589C8B7D8F8D}] => (Allow) C:\Program Files\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe

FirewallRules: [{6EF47480-8E7E-46C8-84E6-38776DB65251}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F27CCE4F-D512-450D-80BE-71DF8217D23F}] => (Allow) C:\Program Files\Common Files\aol\Loader\aolload.exe

FirewallRules: [{F26FDD84-DBA4-4135-9524-54A9A2C0132A}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{994E5B95-AFBE-4833-B365-878DB0F6E1FF}] => (Allow) C:\Program Files\Common Files\aol\System Information\sinf.exe

FirewallRules: [{563C087F-3C22-495D-8ED4-0CA558A39013}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{E087765F-7963-4295-B56C-78206E0620A0}] => (Allow) C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe

FirewallRules: [{3356F293-8B2C-4B7D-B953-34913152C84D}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{DE97E617-873D-426F-A82F-75AFBD5D865B}] => (Allow) C:\Users\Antje\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{29F5092A-3596-4100-8E33-B331461E9EA4}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{2EC37B28-F031-4717-9354-565DC74CCD8C}] => (Allow) C:\Windows\System32\lxbkcoms.exe

FirewallRules: [{1AC262E1-F3B3-475F-BDE7-EAC9BC1D65F6}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{251A7ED1-9B21-4335-A835-F080C11224DF}] => (Allow) C:\Windows\System32\spool\drivers\w32x86\3\lxbkpswx.exe

FirewallRules: [{AD0CAAEF-53DE-4734-A30B-DACE2435B815}] => (Allow) D:\setup\hpznui01.exe

FirewallRules: [{A077FFAD-1E1E-477E-8E6D-D1EF76072FCD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{AD4F6935-251E-4A1C-B59B-4CC072954A7C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{8DC91D75-A5F9-4D27-B850-214575FB0458}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{BA99016D-6211-4E53-8E39-120D1AE95C0C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{440373C8-649D-4F8A-992E-866256700ECD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{A81C27C0-F88B-4129-8B69-5754FBF5961D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{71D254FB-2F9B-4508-87D2-89B77E360109}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{E151630B-A150-4AF3-8E1C-16B6BE2861B4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{0C60917C-EEF5-4AA4-ABE8-4888EAEB21F5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{A2D911FD-2AF7-495C-B92D-9B81AA60BE66}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{3F3C1372-9DF3-4EBA-9572-A7AF18B2B656}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{718BFE45-4AF7-4DBD-8A6C-F6A76D4CA300}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{B9F4BA73-51B1-47D2-86DC-7BD990E78A7D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{EE41020D-3107-47D3-B522-2286E2B10D26}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{DF1E8A34-2BDD-4118-A1FC-FD06EBCC624F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{0765C8F5-7EFA-4F28-811F-5D26F7BE8D6F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{033255DD-104F-46B5-BFF3-7E29F399E667}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{A99AADC3-6BD9-4CAF-8896-4000F4720398}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [{30B9B983-71C8-409B-9F68-2A557D1BC63C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{5CD3C397-7A40-4461-A47D-E52BF95B51D9}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{9A37A5E8-FCB5-46CE-B409-A6C5E9222EC0}] => (Allow) C:\Windows\System32\muzapp.exe

FirewallRules: [{D351BEDA-436B-464D-AFA7-5DBE6FDD5ECE}] => (Allow) C:\Users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [TCP Query User{167C9AFB-277B-4CE1-87DB-20CC8D9776EA}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{1A927E62-8276-46D9-A7DE-3DAE6B7D3DDF}C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\antje\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{037DD8C0-2256-4507-9E7C-50C82E2F9A22}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{FE9891CB-4AB8-4897-9C00-F7F1910FC164}] => (Allow) C:\Program Files\AOL 9.0 VRa\waol.exe

FirewallRules: [{24855897-A88C-46B8-99E3-004C6D6B3DAA}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{630177AD-44D8-449D-B905-8757D59131B7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1CFF399B-67B7-46DB-987F-7235ACADBF01}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{DA8CD2E3-867B-4333-82F3-49F8F6FFA170}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{3965B519-780E-44BB-BDD8-A94FB3D2E77A}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [UDP Query User{7AB29ACB-056B-4E4C-9074-6493C561E8EE}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe

FirewallRules: [TCP Query User{EED53D04-4C82-406F-B396-7AF67BEABD56}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [UDP Query User{A8F8F891-643F-457B-8A6C-550373560C17}D:\bin\ia\core\mdm_util.exe] => (Allow) D:\bin\ia\core\mdm_util.exe

FirewallRules: [TCP Query User{EEBAB07B-6F90-4AC2-BBF1-40B2670D0EB9}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [UDP Query User{D1995635-EAE3-40DD-BB86-949F33CD18DA}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [{F9098E9C-0A93-4D76-B74A-BDB1BDA44724}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{C3E17FCB-BA22-4151-AA5F-2F27C2BF9DAA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FE3726DF-F604-49DA-B575-9CFA51BF0669}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{A8C94CA9-28DD-4BB7-BE48-7C7D222132B2}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service: 

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Officejet 4500 G510n-z

Description: Officejet 4500 G510n-z

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/16/2015 10:00:56 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xae4

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/16/2015 10:00:48 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/16/2015 10:00:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/16/2015 10:00:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/15/2015 12:53:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Kies.exe, Version: 2.0.0.11044, Zeitstempel: 0x4e2ea381

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18847, Zeitstempel: 0x554d7b00

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000812f

ID des fehlerhaften Prozesses: 0xf40

Startzeit der fehlerhaften Anwendung: 0xKies.exe0

Pfad der fehlerhaften Anwendung: Kies.exe1

Pfad des fehlerhaften Moduls: Kies.exe2

Berichtskennung: Kies.exe3
 

Error: (09/15/2015 12:53:46 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: Kies.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.Windows.Markup.XamlParseException

Stapel:

   bei System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)

   bei System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)

   bei System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)

   bei System.Windows.Application.LoadComponent(System.Object, System.Uri)

   bei Kies.App.InitializeComponent()

   bei Kies.App.Main()
 

Error: (09/15/2015 12:53:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 

Error: (09/15/2015 12:53:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.1.2:5353   18 2.1.168.192.in-addr.arpa. PTR Antje-PC-2.local.
 

Error: (09/15/2015 12:04:53 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm avcenter.exe, Version 15.0.12.420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 32d4
 

Startzeit: 01d0ef9de2d49b27
 

Endzeit: 180
 

Anwendungspfad: C:\Program Files\Avira\Antivirus\avcenter.exe
 

Berichts-ID: 2cf207d1-5b91-11e5-b864-00038a000015
 

Error: (09/15/2015 11:51:31 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 2.1.168.192.in-addr.arpa. PTR Antje-PC.local.
 
 

Systemfehler:

=============

Error: (09/16/2015 10:00:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NETGEARGenieDaemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/16/2015 10:00:46 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NETGEARGenieDaemon erreicht.
 

Error: (09/16/2015 10:00:25 AM) (Source: NETLOGON) (EventID: 3095) (User: )

Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als

Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser

Konfiguration nicht gestartet zu sein.
 

Error: (09/16/2015 10:00:19 AM) (Source: atikmdag) (EventID: 10261) (User: )

Description: Display is not active
 

Error: (09/16/2015 10:00:19 AM) (Source: atikmdag) (EventID: 19468) (User: )

Description: CPLIB :: General - Invalid Parameter
 

Error: (09/15/2015 12:51:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NETGEARGenieDaemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/15/2015 12:51:48 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NETGEARGenieDaemon erreicht.
 

Error: (09/15/2015 12:51:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "HP Support Solutions Framework Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/15/2015 12:51:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst HP Support Solutions Framework Service erreicht.
 

Error: (09/15/2015 12:51:11 PM) (Source: atikmdag) (EventID: 10261) (User: )

Description: Display is not active
 
 

Microsoft Office:

=========================
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz

Prozentuale Nutzung des RAM: 39%

Installierter physikalischer RAM: 3054.7 MB

Verfügbarer physikalischer RAM: 1850.25 MB

Summe virtueller Speicher: 6105.66 MB

Verfügbarer virtueller Speicher: 4649.16 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:827.96 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A27B1D46)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
 

==================== Ende vom Addition.txt ============================

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:13-09-2015 01

durchgeführt von Antje (Administrator) auf ANTJE-PC (16-09-2015 21:30:54)

Gestartet von C:\Users\Antje\Desktop

Geladene Profile: Antje (Verfügbare Profile: Antje)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.28.13\GoogleCrashHandler.exe

(AOL LLC) C:\Program Files\Common Files\aol\acs\AOLacsd.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

(Teruten) C:\Windows\System32\FsUsbExService.Exe

(Hewlett-Packard Company) C:\Program Files\HP\Common\HPSupportSolutionsFrameworkService.exe

(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe

(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe

(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe

(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe

(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\temp\Sound_Blaster_X-Fi_MB_Cleanup.0001

() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Nero AG) C:\Program Files\Nero\Update\NASvc.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [2145904 2011-02-22] (VIA)

HKLM\...\Run: [XFastUsb] => C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)

HKLM\...\Run: [CTSyncService] => C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)

HKLM\...\Run: [VolPanel] => C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)

HKLM\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)

HKLM\...\Run: [TrayServer] => C:\Program Files\MAGIX\Filme_auf_DVD_8\TrayServer.exe [90112 2008-01-17] (MAGIX AG)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157968 2015-08-13] (Apple Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [958352 2011-07-26] (Samsung)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2014-12-15] (NETGEAR Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-08-03]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-03]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk [2015-03-10]

ShortcutTarget: NETGEAR WG111v3 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WG111v3\WG111v3.exe ()

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{63A805D7-63E5-4A67-82C7-137541CDC2D5}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{7CAC6D11-DCBC-45D4-A3E7-E99C834D8BD6}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{BF9EBB8B-EC0A-441E-9E40-612563F706A2}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://de.search.yahoo.com/?fr=w3i&type=W3i_SP,204,0_0,StartPage,20120101,16988,0,8,0

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {6DA59B2F-C380-26BF-75EF-54850C7D29F4} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi

SearchScopes: HKU\S-1-5-21-1184766340-1357020511-1184547663-1000 -> {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO: Adblock IE -> {667BEE43-20BD-4CE3-94AC-E63E04D4B191} -> C:\Program Files\MGTEK\Adblock IE\adblockie.dll [2013-01-28] (MGTEK)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-01] (Oracle Corporation)

BHO: AOL Toolbar Launcher -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-01] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll [2007-03-14] (AOL LLC)

DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.)
 

FireFox:

========

FF ProfilePath: C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF Homepage: chrome://unitedtb/content/newtab/startpage.xhtml

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-01] (Oracle Corporation)

FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-02-28] (NVIDIA Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-31] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Extension: GMX MailCheck - C:\Users\Antje\AppData\Roaming\Mozilla\Firefox\Profiles\ja1ioq3g.default-1433324730274\Extensions\browser-mailcheck@gmx.net [2015-08-09]

FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-08-03]

FF HKU\S-1-5-21-1184766340-1357020511-1184547663-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-07-31]
 

Chrome: 

=======

CHR Profile: C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-29]

CHR Extension: (Google Docs) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-18]

CHR Extension: (Google Drive) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-18]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-30]

CHR Extension: (YouTube) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-18]

CHR Extension: (Amazon) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-01-29]

CHR Extension: (Google-Suche) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-18]

CHR Extension: (Google Tabellen) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-29]

CHR Extension: (Avira Browserschutz) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-01-29]

CHR Extension: (Google Wallet) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]

CHR Extension: (Google Mail) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-18]

CHR HKLM\...\Chrome\Extension: [aaaaojdbdbhbbkpenbmlejjngphokgnp] - C:\Users\Antje\AppData\Local\APN\GoogleCRXs\aaaaojdbdbhbbkpenbmlejjngphokgnp_7.17.2.0.crx <nicht gefunden>

CHR HKLM\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Antje\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-11-11]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Datei ist nicht signiert]

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Datei ist nicht signiert]

R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-12-30] (Teruten) [Datei ist nicht signiert]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [660992 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [72992 2014-07-07] (Hewlett-Packard Company)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [235696 2015-07-31] (McAfee, Inc.)

R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S2 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2014-12-15] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs) [Datei ist nicht signiert]

R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)

S3 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [Datei ist nicht signiert]

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)

R3 eapihdrv; C:\Users\Antje\AppData\Local\Temp\ehdrv.sys [135760 2015-09-16] (ESET)

S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)

R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)

R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-12-30] () [Datei ist nicht signiert]

R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)

R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [227328 2007-04-23] (NETGEAR Inc.                           ) [Datei ist nicht signiert]

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-08-06] (Avira Operations GmbH & Co. KG)

S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [561920 2008-11-19] (eMPIA Technology, Inc.)

S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [455168 2008-11-19] (eMPIA Technology, Inc.)

R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)

R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)

S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [X]

S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

S3 MSICDSetup; \??\D:\CDriver.sys [X]

S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-16 21:27 - 2015-09-16 21:27 - 00852704 _____ C:\Users\Antje\Downloads\SecurityCheck.exe

2015-09-16 11:11 - 2015-09-16 11:11 - 02870984 _____ (ESET) C:\Users\Antje\Downloads\esetsmartinstaller_deu.exe

2015-09-16 11:11 - 2015-09-16 11:11 - 00000000 ____D C:\Program Files\ESET

2015-09-15 12:30 - 2015-09-15 12:30 - 00001082 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2015-09-15 12:20 - 2015-09-15 12:20 - 00051140 _____ C:\Users\Antje\Desktop\Addition.txt

2015-09-15 12:19 - 2015-09-16 21:31 - 00022873 _____ C:\Users\Antje\Desktop\FRST.txt

2015-09-15 12:17 - 2015-09-15 12:17 - 00001907 _____ C:\Users\Antje\Desktop\JRT.txt

2015-09-15 12:03 - 2015-09-09 20:11 - 01800104 _____ (Malwarebytes Corporation) C:\Users\Antje\Desktop\JRT.exe

2015-09-15 12:00 - 2015-09-15 12:01 - 01799392 _____ (Malwarebytes Corporation) C:\Users\Antje\Downloads\JRT_7600(1).exe

2015-09-15 12:00 - 2015-09-15 12:00 - 01799392 _____ (Malwarebytes Corporation) C:\Users\Antje\Downloads\JRT_7600.exe

2015-09-15 11:43 - 2015-09-15 11:43 - 01660416 _____ C:\Users\Antje\Downloads\AdwCleaner_5.007(1).exe

2015-09-14 11:29 - 2015-09-14 11:29 - 04772888 _____ (Avira Operations GmbH & Co. KG) C:\Users\Antje\Downloads\avira_de_av_55f692f2bed32__ws.exe

2015-09-14 11:01 - 2015-09-14 11:02 - 01660416 _____ C:\Users\Antje\Downloads\AdwCleaner_5.007.exe

2015-09-14 10:58 - 2015-09-14 10:58 - 00002708 _____ C:\Users\Antje\Desktop\mbam1.txt

2015-09-14 10:58 - 2015-09-14 10:58 - 00001338 _____ C:\Users\Antje\Desktop\mbam.txt

2015-09-14 10:25 - 2015-09-14 10:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Antje\Downloads\mbam-setup-2.1.8.1057.exe

2015-09-13 21:36 - 2015-09-13 21:36 - 01694208 _____ (Farbar) C:\Users\Antje\Desktop\FRST.exe

2015-09-13 21:24 - 2015-09-13 21:29 - 00000000 ____D C:\Users\Antje\Downloads\FRST-OlderVersion

2015-09-12 12:31 - 2015-09-12 12:32 - 00036298 _____ C:\Users\Antje\Downloads\MTB.txt

2015-09-12 12:29 - 2015-09-12 12:29 - 00891392 _____ (Farbar) C:\Users\Antje\Downloads\MiniToolBox.exe

2015-09-11 12:53 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-09-11 12:42 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-09-11 12:42 - 2015-09-02 03:36 - 02384896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-11 12:42 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-09-11 12:42 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-09-11 12:42 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-11 12:42 - 2015-08-05 19:40 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-09-11 12:41 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-11 12:41 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-11 12:41 - 2015-08-15 07:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-11 12:41 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-11 12:41 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-11 12:41 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-11 12:41 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-11 12:41 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-11 12:41 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-11 12:41 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-11 12:41 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-11 12:41 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-11 12:41 - 2015-08-15 07:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-11 12:41 - 2015-08-15 07:24 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-11 12:41 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-11 12:41 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-11 12:41 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-11 12:41 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-11 12:41 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-11 12:41 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-11 12:41 - 2015-08-15 07:02 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-11 12:41 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-11 12:41 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-11 12:41 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-11 12:41 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-11 12:41 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-11 12:41 - 2015-08-05 19:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-11 12:41 - 2015-08-04 19:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-11 12:41 - 2015-08-04 19:47 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-11 12:41 - 2015-08-04 19:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-09-11 12:41 - 2015-08-04 19:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-09-11 12:41 - 2015-08-04 18:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-09-11 12:41 - 2015-07-22 19:57 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-09-11 12:41 - 2015-07-22 19:57 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-09-11 12:41 - 2015-07-22 19:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-09-11 12:41 - 2015-07-22 19:53 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-09-11 12:41 - 2015-07-22 19:52 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-09-11 12:41 - 2015-07-22 19:52 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-09-11 12:41 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-09-11 12:41 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-09-11 12:41 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-09-11 12:41 - 2015-07-22 18:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-09-11 12:41 - 2015-07-22 18:34 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-09-11 12:41 - 2015-07-22 18:34 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-09-11 12:41 - 2015-07-22 18:33 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-09-11 12:41 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-09-11 12:41 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02953728 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-09-11 12:40 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-09-11 12:40 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-11 12:40 - 2015-08-26 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-09-11 12:40 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-11 12:40 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-11 12:40 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-11 12:40 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-11 12:40 - 2015-06-25 11:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-09-11 12:40 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-09-11 12:40 - 2015-06-25 11:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-09-04 12:31 - 2015-09-04 12:31 - 00002007 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2015-09-04 12:31 - 2015-09-04 12:31 - 00000000 ____D C:\Program Files\McAfee Security Scan

2015-09-01 18:38 - 2015-09-15 11:47 - 00000000 ____D C:\AdwCleaner

2015-09-01 18:37 - 2015-09-01 18:37 - 01654272 _____ C:\Users\Antje\Downloads\AdwCleaner_5.005.exe

2015-09-01 18:03 - 2015-09-01 18:03 - 00000000 ____D C:\Program Files\Common Files\Java

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Sun

2015-09-01 18:02 - 2015-09-01 18:02 - 00000000 ____D C:\Users\Antje\.oracle_jre_usage

2015-08-24 19:22 - 2015-08-24 19:22 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-08-24 19:22 - 2015-08-24 19:22 - 00000000 ____D C:\Program Files\QuickTime

2015-08-24 19:21 - 2015-08-24 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-08-24 19:19 - 2015-08-24 19:21 - 00000000 ____D C:\Program Files\iTunes

2015-08-24 19:19 - 2015-08-24 19:19 - 00000000 ____D C:\Program Files\iPod
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-16 21:30 - 2015-04-10 18:37 - 00000000 ____D C:\FRST

2015-09-16 20:59 - 2011-12-23 22:41 - 01357014 _____ C:\Windows\WindowsUpdate.log

2015-09-16 20:57 - 2015-02-06 18:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-09-16 20:47 - 2014-04-18 13:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-16 12:47 - 2014-04-18 13:26 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-16 10:25 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-16 10:25 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-16 10:01 - 2011-12-29 16:18 - 00000000 ____D C:\Users\Antje\AppData\Local\CrashDumps

2015-09-16 10:00 - 2013-06-25 15:14 - 00078928 _____ C:\Windows\setupact.log

2015-09-16 10:00 - 2012-10-17 09:48 - 00000000 ____D C:\Program Files\Avira

2015-09-16 10:00 - 2011-12-23 23:19 - 01037318 _____ C:\Windows\PFRO.log

2015-09-16 10:00 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-15 12:54 - 2012-10-17 09:48 - 00000000 ____D C:\ProgramData\Avira

2015-09-14 11:45 - 2012-02-06 12:40 - 00000000 ____D C:\Users\Antje\AppData\Roaming\vlc

2015-09-14 11:03 - 2012-01-21 13:11 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Yahoo!

2015-09-14 10:49 - 2009-07-14 10:56 - 00000000 ____D C:\Windows\ShellNew

2015-09-13 21:53 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF

2015-09-13 21:24 - 2015-04-10 18:36 - 01694208 _____ (Farbar) C:\Users\Antje\Downloads\FRST.exe

2015-09-12 14:41 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache

2015-09-12 12:27 - 2015-04-10 18:38 - 00051931 _____ C:\Users\Antje\Downloads\Addition.txt

2015-09-12 12:27 - 2015-04-10 18:37 - 00043493 _____ C:\Users\Antje\Downloads\FRST.txt

2015-09-12 12:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET

2015-09-12 12:10 - 2011-12-23 22:55 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-12 12:05 - 2009-07-14 06:33 - 00493648 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-12 12:03 - 2009-07-14 10:56 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-12 12:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE

2015-09-11 12:42 - 2013-08-15 11:02 - 00000000 ____D C:\Windows\system32\MRT

2015-09-10 13:21 - 2011-12-23 22:50 - 00000000 ____D C:\Users\Antje

2015-09-10 13:20 - 2015-06-03 11:45 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2015-09-10 13:20 - 2015-04-05 12:39 - 00000000 ___SD C:\Windows\system32\GWX

2015-09-10 13:20 - 2015-03-10 14:05 - 00000000 ____D C:\Users\Antje\AppData\Local\NETGEARGenie

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp

2015-09-10 13:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration

2015-09-09 09:15 - 2013-04-11 16:27 - 00000000 ____D C:\ProgramData\TEMP

2015-09-01 18:03 - 2014-06-28 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-09-01 18:03 - 2012-02-28 12:18 - 00000000 ____D C:\Program Files\Java

2015-09-01 18:01 - 2014-06-28 12:48 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2015-09-01 17:55 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2015-08-31 12:25 - 2015-05-12 12:37 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-08-26 18:36 - 2009-10-14 04:21 - 132039072 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-08-24 19:19 - 2012-09-14 17:42 - 00000000 ____D C:\Program Files\Common Files\Apple
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2013-01-10 12:53 - 2013-01-10 13:07 - 0015360 _____ () C:\Users\Antje\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2012-11-11 18:13 - 2012-11-11 18:13 - 0000048 ___SH () C:\ProgramData\.zreglib

2012-01-21 13:04 - 2015-03-12 13:59 - 0017444 _____ () C:\ProgramData\hpzinstall.log
 

Einige Dateien in TEMP:

====================

C:\Users\Antje\AppData\Local\temp\avgnt.exe

C:\Users\Antje\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-09-11 14:29
 

==================== Ende vom FRST.txt ============================

schrauber

17.09.2015 19:15

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files\Google\Chrome\Application\chrome.dll
 

C:\Program Files\Google\Chrome\Application\update.dll

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF Homepage: chrome://unitedtb/content/newtab/startpage.xhtml

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

Lotto

18.09.2015 10:54

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:15-09-2015

durchgeführt von Antje (2015-09-18 10:33:40) Run:3

Gestartet von C:\Users\Antje\Desktop

Geladene Profile: Antje (Verfügbare Profile: Antje)

Start-Modus: Normal
 

==============================================
 

fixlist Inhalt:

*****************

C:\Program Files\Google\Chrome\Application\chrome.dll
 

C:\Program Files\Google\Chrome\Application\update.dll

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF Homepage: chrome://unitedtb/content/newtab/startpage.xhtml

Emptytemp:

*****************
 

C:\Program Files\Google\Chrome\Application\chrome.dll => erfolgreich verschoben

C:\Program Files\Google\Chrome\Application\update.dll => erfolgreich verschoben

Firefox "newtab" erfolgreich entfernt

Firefox "homepage" erfolgreich entfernt

EmptyTemp: => 374.2 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende vom Fixlog 10:33:47 ====

Hallo Schrauber, ich habe den Chrom gelöscht und neu installiert. Es lässt sich bei dem neuen Chrom nicht die Taste mit Einstellungen öffnen. Demzufolge gehen auch die weiteren Schritte nicht.

LG Lotto

schrauber

18.09.2015 20:51

Zitat:

Es lässt sich bei dem neuen Chrom nicht die Taste mit Einstellungen öffnen

:wtf:

Beschreib das mal bitte genauer, oder mach bitte mal einen Screenshot.

Lotto

19.09.2015 10:18

Hallo Schrauber, ja deutsche Sprache. Es hatte warscheinlich nicht richtig installiert. Jedenfalls ging es heute wie beschrieben.

LG Lotto

schrauber

20.09.2015 11:23

Ok. Bestehen jetzt aktuell noch irgendwelche Probleme?

Lotto

20.09.2015 12:29

Ich werde mal prüfen und sage Bescheid.

LG Lotto

Also ich denke es geht alles sehr gut lieber Schrauber. Du bist einfach genial. Vielen Dank.

Ich hab nur noch ne Frage. Welcher Virenscanner ist am besten für meinen PC. Der soll den PC aber nicht so verlangsamen. Hast du einen Tip.

LG Lotto

schrauber

21.09.2015 07:22

Ich empfehle immer Emsisoft

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren .

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.pngAbsicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Lotto

21.09.2015 19:07

ok dankeeeeeeeeeeeeee

schrauber

22.09.2015 16:28

Gern Geschehen :)

Lotto

27.09.2015 11:45

Hallo Schrauber,

ich habe Probleme mit dem Firefox. Der bleibt laufend stehen und es steht da keine Rückmeldung. Einen Screenshot hab ich gemacht. Ich bekomme den aber nicht in dieses Nachrichtenblatt an dich. Ja keine Ahnung wie das geht.

LG lotto

Hallo noch mal kurz.Über Anhang hochladen geht nicht wegen zu großer JPEg Datei. Wie kann man das verkleinern?

LG Lotto

schrauber

27.09.2015 16:06

Schalt mal die Hardwarebeschleunigung aus in Firefox.

Lotto

28.09.2015 09:59

Hallo Schrauber,
ich weis nicht wie das geht.

LG Lotto

Alle Zeitangaben in WEZ +1. Es ist jetzt 23:51 Uhr.

Seite 2 von 3

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131