mein pc statet jetzt und sobald ich mich einlogge kommt blackscreen, jedoch kann ich meine maus sehen und taskmanager öffnen. Ich bin gerade über den taskmanager prozess starten im browser , hab eine frst gemacht. Es wird kein Desktop angezeigt, was kann ich tun ?
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by Laura (administrator) on 03-08-2013 16:10:12
Running from C:\Users\Laura\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\Windows\system32\runonce.exe
(Microsoft Corporation) C:\Windows\SysWOW64\runonce.exe
(Ask Partner Network) C:\ProgramData\APN\APN-Stub\AVIRA-V7\ApnSetup.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM-x32\...\RunOnce: [APN-Stub_AVIRA-V7] - "C:\ProgramData\APN\APN-Stub\AVIRA-V7\ApnSetup.exe" /hpr=0 /sa=0 /install=AVIRA-V7 /dtid= /trgb=ALL /trga=FF /type=secure /runonce /second /runonce /runonce /runonce /runonce /runonce /runonce [489392 2013-06-06] (Ask Partner Network)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Laura\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-11] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-09-27] (EasyBits Software AS)
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-08-12] (PDF Complete Inc)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-18] (Avira Operations GmbH & Co. KG)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {ABC7D8EF-242B-4946-BD0E-9B4B5B816F5D} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-03-01] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default\Extensions\7125a285-7e68-47aa-9d72-e81874f4d47e@d3fcdb92-135d-4a8a-8cf6-11e3b57c5fda.com
FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default\Extensions\ich@maltegoetz.de
FF Extension: toolbar_AVIRA-V7 - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: No Name - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default\Extensions\WTB_GLOBAL.sqlite
FF Extension: No Name - C:\Users\Laura\AppData\Roaming\Mozilla\Firefox\Profiles\pf2xznag.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] C:\Program Files (x86)\Kaspersky Security Suite CBE 12\FFExt\virtualKeyboard@kaspersky.ru
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=B2EDE8393546CE72&affID=119357&tt=040713_xmlful&tsp=4939"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DealPlyLive Update) - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (AdBlock) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.2_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-18] (Avira Operations GmbH & Co. KG)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-17] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2011-12-16] ()
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2012-08-21] (Overwolf Ltd)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-12] (PDF Complete Inc)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-07-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2012-03-01] ()
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2012-03-01] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-03 16:10 - 2013-08-03 16:10 - 00000000 ____D C:\FRST
2013-08-03 16:09 - 2013-08-03 16:09 - 01781485 _____ (Farbar) C:\Users\Laura\Desktop\FRST64.exe
2013-08-02 12:54 - 2013-08-02 12:54 - 00000000 ____D C:\Users\Laura\AppData\Roaming\Avira
2013-08-02 12:52 - 2013-08-02 12:52 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-02 12:52 - 2013-08-02 12:52 - 00000000 ____D C:\ProgramData\APN
2013-08-02 12:51 - 2013-08-02 12:51 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-02 12:51 - 2013-08-02 12:51 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-02 12:51 - 2013-07-18 08:02 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-02 12:51 - 2013-07-18 08:02 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-02 12:51 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-02 12:46 - 2013-08-02 12:49 - 108422648 _____ C:\Users\Laura\Downloads\avira_free_antivirus884_de(1).exe
2013-08-02 12:43 - 2013-08-02 21:54 - 00004018 _____ C:\Windows\PFRO.log
2013-08-02 12:38 - 2013-08-03 16:01 - 00000448 _____ C:\Windows\setupact.log
2013-08-02 12:38 - 2013-08-02 12:38 - 00000000 _____ C:\Windows\setuperr.log
2013-08-02 12:36 - 2013-08-02 12:36 - 00001316 _____ C:\DelFix.txt
2013-07-31 18:41 - 2013-07-31 18:41 - 00000000 ____D C:\Users\Laura\Downloads\Gameforge Live
2013-07-31 18:40 - 2013-07-31 18:40 - 00001073 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2013-07-31 18:40 - 2013-07-31 18:40 - 00000000 ____D C:\Users\Laura\AppData\Local\Gameforge4d
2013-07-31 18:40 - 2013-07-31 18:40 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2013-07-30 18:50 - 2013-08-02 12:36 - 00000000 ____D C:\Windows\ERUNT
2013-07-29 09:09 - 2013-07-29 09:09 - 00112338 _____ C:\Users\Laura\Desktop\166043864.jpeg
2013-07-27 22:05 - 2013-07-27 22:06 - 00000000 ____D C:\Windows\system32\MRT
2013-07-27 21:40 - 2013-07-27 21:43 - 108422648 _____ C:\Users\Laura\Downloads\avira_free_antivirus884_de.exe
2013-07-27 19:50 - 2013-07-27 19:57 - 00000000 ____D C:\Windows\erdnt
2013-07-24 10:40 - 2013-08-02 09:57 - 00000000 ____D C:\Users\Laura\Desktop\Bilder
2013-07-24 09:11 - 2013-07-24 10:36 - 00000000 ____D C:\Users\Laura\Desktop\ANGEBOTE UND IMPULSE FÜR DIE KITA UND AUSBILDUNGSPLAN
2013-07-23 19:15 - 2013-07-23 19:15 - 00000000 ____D C:\Users\Laura\AppData\Roaming\Malwarebytes
2013-07-23 19:15 - 2013-07-23 19:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-23 19:14 - 2013-07-23 19:14 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Laura\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-21 20:45 - 2013-07-21 20:45 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-21 20:45 - 2013-07-21 20:45 - 00000000 _____ C:\autoexec.bat
2013-07-21 20:44 - 2013-07-21 20:50 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP
2013-07-21 20:43 - 2013-07-21 20:43 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\Laura\Downloads\SpyHunter-Installer.exe
2013-07-12 15:33 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-12 15:33 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-12 15:33 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-12 15:33 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-12 15:33 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-12 15:33 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-12 15:33 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-12 15:33 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-12 15:33 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-12 15:33 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-12 15:33 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-12 15:33 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-12 13:30 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-12 13:30 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-12 13:30 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-12 13:30 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-12 13:29 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-12 13:29 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-12 13:29 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 17:56 - 2013-07-10 17:59 - 104943936 _____ C:\Users\Laura\Downloads\avira3737_free_antivirus_de.exe
2013-07-10 14:12 - 2013-08-01 13:27 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-10 14:10 - 2013-08-03 16:01 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-10 14:10 - 2013-08-02 22:26 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-10 14:10 - 2013-07-15 21:21 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-10 14:10 - 2013-07-15 21:21 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-10 14:10 - 2013-07-10 14:12 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-10 14:10 - 2013-07-10 14:10 - 00000000 ____D C:\Program Files\AVAST Software
2013-07-10 14:10 - 2013-07-10 14:10 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-07-10 14:10 - 2013-02-28 09:35 - 00287840 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-07-10 14:09 - 2013-07-10 17:52 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-10 14:08 - 2013-07-10 14:08 - 110539200 _____ C:\Users\Laura\Downloads\avast_free_av80 [1].exe
2013-07-10 14:08 - 2013-07-10 14:08 - 00000000 ____D C:\Users\Laura\AppData\Roaming\0F0W0T1V0D0L0M
2013-07-10 14:06 - 2013-07-10 14:06 - 00003230 _____ C:\Windows\System32\Tasks\Dealply
2013-07-07 13:10 - 2013-08-03 15:11 - 01255292 _____ C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
2013-08-03 16:09 - 2013-08-03 16:09 - 01781485 _____ (Farbar) C:\Users\Laura\Desktop\FRST64.exe
2013-08-03 16:09 - 2009-07-14 06:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-03 16:09 - 2009-07-14 06:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-03 16:05 - 2013-07-07 13:10 - 01255292 _____ C:\Windows\WindowsUpdate.log
2013-08-03 16:01 - 2013-08-02 12:38 - 00000448 _____ C:\Windows\setupact.log
2013-08-03 16:01 - 2013-07-10 14:10 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-03 16:01 - 2012-03-01 03:32 - 00000000 ____D C:\ProgramData\PDFC
2013-08-03 16:01 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-03 15:09 - 2012-04-03 14:07 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7164D283-28B1-4C89-A403-48915D6E8CE1}
2013-08-02 23:03 - 2012-05-14 18:05 - 00000000 ____D C:\Users\Laura\AppData\Local\PMB Files
2013-08-02 23:03 - 2012-05-14 18:05 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-02 22:45 - 2012-11-08 20:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-02 22:26 - 2013-07-10 14:10 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 21:54 - 2013-08-02 12:43 - 00004018 _____ C:\Windows\PFRO.log
2013-08-02 12:54 - 2013-08-02 12:54 - 00000000 ____D C:\Users\Laura\AppData\Roaming\Avira
2013-08-02 12:52 - 2013-08-02 12:52 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-02 12:52 - 2013-08-02 12:52 - 00000000 ____D C:\ProgramData\APN
2013-08-02 12:51 - 2013-08-02 12:51 - 00002072 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-02 12:51 - 2013-08-02 12:51 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-02 12:51 - 2012-06-03 14:08 - 00000000 ____D C:\ProgramData\Avira
2013-08-02 12:49 - 2013-08-02 12:46 - 108422648 _____ C:\Users\Laura\Downloads\avira_free_antivirus884_de(1).exe
2013-08-02 12:38 - 2013-08-02 12:38 - 00000000 _____ C:\Windows\setuperr.log
2013-08-02 12:36 - 2013-08-02 12:36 - 00001316 _____ C:\DelFix.txt
2013-08-02 12:36 - 2013-07-30 18:50 - 00000000 ____D C:\Windows\ERUNT
2013-08-02 09:57 - 2013-07-24 10:40 - 00000000 ____D C:\Users\Laura\Desktop\Bilder
2013-08-01 13:27 - 2013-07-10 14:12 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-31 22:57 - 2012-10-10 09:32 - 00000000 ____D C:\Users\Laura\AppData\Roaming\SoftGrid Client
2013-07-31 19:06 - 2013-05-17 18:18 - 00000000 ____D C:\Users\Laura\Desktop\bewerbung
2013-07-31 18:41 - 2013-07-31 18:41 - 00000000 ____D C:\Users\Laura\Downloads\Gameforge Live
2013-07-31 18:41 - 2012-04-03 14:33 - 00000000 ____D C:\Program Files (x86)\Metin2
2013-07-31 18:40 - 2013-07-31 18:40 - 00001073 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2013-07-31 18:40 - 2013-07-31 18:40 - 00000000 ____D C:\Users\Laura\AppData\Local\Gameforge4d
2013-07-31 18:40 - 2013-07-31 18:40 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2013-07-31 15:01 - 2012-03-01 02:53 - 00711614 _____ C:\Windows\system32\perfh007.dat
2013-07-31 15:01 - 2012-03-01 02:53 - 00152628 _____ C:\Windows\system32\perfc007.dat
2013-07-31 15:01 - 2009-07-14 07:13 - 01642144 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-30 17:47 - 2013-05-05 13:20 - 00004130 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-30 17:47 - 2013-05-05 13:20 - 00004082 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-30 15:01 - 2012-04-17 20:29 - 00000000 ____D C:\Users\Laura\AppData\Local\CrashDumps
2013-07-29 09:09 - 2013-07-29 09:09 - 00112338 _____ C:\Users\Laura\Desktop\166043864.jpeg
2013-07-28 12:08 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-27 22:06 - 2013-07-27 22:05 - 00000000 ____D C:\Windows\system32\MRT
2013-07-27 22:04 - 2011-02-11 19:15 - 01619102 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-27 21:43 - 2013-07-27 21:40 - 108422648 _____ C:\Users\Laura\Downloads\avira_free_antivirus884_de.exe
2013-07-27 19:57 - 2013-07-27 19:50 - 00000000 ____D C:\Windows\erdnt
2013-07-26 14:10 - 2013-05-05 13:21 - 00004114 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2013-07-25 08:40 - 2012-04-03 14:07 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForLaura.job
2013-07-24 10:36 - 2013-07-24 09:11 - 00000000 ____D C:\Users\Laura\Desktop\ANGEBOTE UND IMPULSE FÜR DIE KITA UND AUSBILDUNGSPLAN
2013-07-24 10:35 - 2012-12-23 14:10 - 00000000 ___RD C:\Users\Laura\Desktop\musik
2013-07-24 10:34 - 2012-09-19 14:34 - 00000000 ____D C:\Users\Laura\Desktop\Neuer Ordner (5)
2013-07-24 09:22 - 2012-04-04 12:50 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-07-24 09:22 - 2012-04-03 14:07 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLaura
2013-07-24 09:21 - 2012-04-25 15:15 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-07-24 09:21 - 2012-04-04 12:47 - 00000000 ____D C:\Users\Laura\AppData\Roaming\HpUpdate
2013-07-24 09:21 - 2012-04-04 12:47 - 00000000 ____D C:\Users\Laura\AppData\Roaming\HP Support Assistant
2013-07-23 19:35 - 2012-03-01 03:23 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-07-23 19:15 - 2013-07-23 19:15 - 00000000 ____D C:\Users\Laura\AppData\Roaming\Malwarebytes
2013-07-23 19:15 - 2013-07-23 19:15 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-23 19:14 - 2013-07-23 19:14 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Laura\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-21 20:50 - 2013-07-21 20:44 - 00000000 ____D C:\Windows\8AE3CFB678B24F55A7BE618FCFF43A03.TMP
2013-07-21 20:45 - 2013-07-21 20:45 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-07-21 20:45 - 2013-07-21 20:45 - 00000000 _____ C:\autoexec.bat
2013-07-21 20:43 - 2013-07-21 20:43 - 00726464 _____ (Enigma Software Group USA, LLC.) C:\Users\Laura\Downloads\SpyHunter-Installer.exe
2013-07-18 08:02 - 2013-08-02 12:51 - 00130016 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-18 08:02 - 2013-08-02 12:51 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-07-15 21:21 - 2013-07-10 14:10 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 21:21 - 2013-07-10 14:10 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-14 20:27 - 2012-12-16 17:41 - 00000000 ____D C:\Users\Laura\AppData\Roaming\Skype
2013-07-13 20:05 - 2011-02-11 19:00 - 00000000 ____D C:\Windows\Panther
2013-07-13 12:57 - 2009-07-14 06:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 12:56 - 2013-03-13 20:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 12:56 - 2013-03-13 20:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-13 12:56 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-13 12:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-13 12:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 17:59 - 2013-07-10 17:56 - 104943936 _____ C:\Users\Laura\Downloads\avira3737_free_antivirus_de.exe
2013-07-10 17:52 - 2013-07-10 14:09 - 00000000 ____D C:\ProgramData\AVAST Software
2013-07-10 14:12 - 2013-07-10 14:10 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-10 14:10 - 2013-07-10 14:10 - 00000000 ____D C:\Program Files\AVAST Software
2013-07-10 14:10 - 2013-07-10 14:10 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-07-10 14:08 - 2013-07-10 14:08 - 110539200 _____ C:\Users\Laura\Downloads\avast_free_av80 [1].exe
2013-07-10 14:08 - 2013-07-10 14:08 - 00000000 ____D C:\Users\Laura\AppData\Roaming\0F0W0T1V0D0L0M
2013-07-10 14:06 - 2013-07-10 14:06 - 00003230 _____ C:\Windows\System32\Tasks\Dealply
2013-07-10 14:05 - 2013-06-10 17:36 - 00000000 ____D C:\ProgramData\AVG2013
2013-07-10 14:05 - 2013-06-10 17:31 - 00000000 ____D C:\ProgramData\MFAData
2013-07-10 14:04 - 2013-06-10 17:36 - 00000000 ____D C:\$AVG
2013-07-10 13:09 - 2012-03-01 03:14 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-07-04 21:26 - 2012-11-29 20:03 - 00003218 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLAURA-HP$
2013-07-04 21:26 - 2012-11-29 20:03 - 00000342 _____ C:\Windows\Tasks\HPCeeScheduleForLAURA-HP$.job
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-28 19:48
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013
Ran by Laura at 2013-08-03 16:11:02
Running from C:\Users\Laura\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
4500_G510gm_Help (x32 Version: 000.0.439.000)
4500G510gm (x32 Version: 000.0.423.000)
4500G510gm_Software_Min (x32 Version: 000.0.423.000)
64 Bit HP CIO Components Installer (Version: 7.2.8)
Adobe AIR (x32 Version: 2.6.0.19120)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Akamai NetSession Interface (HKCU)
AMD APP SDK Runtime (Version: 2.5.732.1)
AMD Catalyst Install Manager (Version: 3.0.842.0)
Avira Free Antivirus (x32 Version: 13.0.0.3884)
Avira SearchFree Toolbar plus Web Protection (x32 Version: 12.2.2.663)
Bejeweled 3 (x32 Version: 2.2.0.98)
BufferChm (x32 Version: 130.0.331.000)
Cake Mania (x32 Version: 2.2.0.98)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.1024.117.375)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1024.117.375)
Catalyst Control Center InstallProxy (x32 Version: 2011.1024.117.375)
Catalyst Control Center Localization All (x32 Version: 2011.1024.117.375)
Catalyst Control Center Profiles Desktop (x32 Version: 2011.1024.117.375)
CCC Help Chinese Standard (x32 Version: 2011.1024.0116.375)
CCC Help Chinese Traditional (x32 Version: 2011.1024.0116.375)
CCC Help Czech (x32 Version: 2011.1024.0116.375)
CCC Help Danish (x32 Version: 2011.1024.0116.375)
CCC Help Dutch (x32 Version: 2011.1024.0116.375)
CCC Help English (x32 Version: 2011.1024.0116.375)
CCC Help Finnish (x32 Version: 2011.1024.0116.375)
CCC Help French (x32 Version: 2011.1024.0116.375)
CCC Help German (x32 Version: 2011.1024.0116.375)
CCC Help Greek (x32 Version: 2011.1024.0116.375)
CCC Help Hungarian (x32 Version: 2011.1024.0116.375)
CCC Help Italian (x32 Version: 2011.1024.0116.375)
CCC Help Japanese (x32 Version: 2011.1024.0116.375)
CCC Help Korean (x32 Version: 2011.1024.0116.375)
CCC Help Norwegian (x32 Version: 2011.1024.0116.375)
CCC Help Polish (x32 Version: 2011.1024.0116.375)
CCC Help Portuguese (x32 Version: 2011.1024.0116.375)
CCC Help Russian (x32 Version: 2011.1024.0116.375)
CCC Help Spanish (x32 Version: 2011.1024.0116.375)
CCC Help Swedish (x32 Version: 2011.1024.0116.375)
CCC Help Thai (x32 Version: 2011.1024.0116.375)
CCC Help Turkish (x32 Version: 2011.1024.0116.375)
ccc-utility64 (Version: 2011.1024.117.375)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Cradle of Rome 2 (x32 Version: 2.2.0.98)
D3DX10 (x32 Version: 15.4.2368.0902)
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904)
eaner (Version: 3.17)
Facebook (x32 Version: 1.1.0004)
Farm Frenzy (x32 Version: 2.2.0.98)
Farmscapes (x32 Version: 2.2.0.98)
FATE (x32 Version: 2.2.0.97)
Final Drive Fury (x32 Version: 2.2.0.95)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Free System Utilities (x32 Version: 1.0.0.28)
Free SystemUtilities (x32 Version: 1.0.0.28)
Gameforge Live 1.5.0 "Legend" (x32 Version: 1.5.0)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.23.0)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)
HP Auto (Version: 1.0.12935.3667)
HP Calendar (x32 Version: 5.1.4245.23508)
HP Client Services (Version: 1.1.12938.3539)
HP Clock (x32 Version: 5.1.4244.16367)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Games (x32 Version: 1.0.2.5)
HP LinkUp (x32 Version: 2.01.029)
HP Magic Canvas (x32 Version: 5.1.15.0)
HP Magic Canvas Tutorials (x32 Version: 5.0.0.3)
HP Notes (x32 Version: 5.1.4274.30382)
HP Odometer (x32 Version: 2.10.0000)
HP Officejet 4500 G510g-m (Version: 13.0)
HP RSS (x32 Version: 5.1.4301.21494)
HP Setup (x32 Version: 9.0.15130.3904)
HP Setup Manager (x32 Version: 1.2.15145.3905)
HP Support Assistant (x32 Version: 7.0.39.15)
HP Support Information (x32 Version: 11.00.0001)
HP TouchSmart RecipeBox (x32 Version: 3.0.3830.27730)
HP Update (x32 Version: 5.003.001.001)
HP Vision Hardware Diagnostics (Version: 2.12.1.0)
HydraVision (x32 Version: 4.2.212.0)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 8.0.0.1351)
Intel® Trusted Connect Service Client (Version: 1.23.216.0)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest II (x32 Version: 2.2.0.97)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LabelPrint (x32 Version: 2.5.4507)
League of Legends (x32 Version: 1.3)
Magic Desktop (x32 Version: 3.0)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Mesh Runtime (x32 Version: 15.4.5722.2)
Metin2 (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (x32 Version: 4.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Firefox Packages (HKCU)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Network64 (Version: 130.0.374.000)
Network64 (Version: 140.0.221.000)
opensource (x32 Version: 1.0.14960.3876)
Overwolf (x32 Version: 0.36.212)
Pando Media Booster (x32 Version: 2.6.0.7)
PDF Complete Special Edition (x32 Version: 4.0.65)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (x32 Version: 2.2.0.97)
Power2Go (x32 Version: 6.1.5705)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6463)
Recovery Manager (x32 Version: 5.5.0.4424)
Remote Graphics Receiver (x32 Version: 5.4.5)
Scan (x32 Version: 13.0.0.0)
Skype™ 6.3 (x32 Version: 6.3.105)
TeamSpeak 3 Client (HKCU Version: 3.0.10.1)
Toolbox (x32 Version: 130.0.648.000)
Torchlight (x32 Version: 2.2.0.98)
TSHostedAppLauncher (x32 Version: 5.1.15.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Virtual Families (x32 Version: 2.2.0.98)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
WebReg (x32 Version: 130.0.132.017)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (32-Bit) (x32 Version: 4.11.0)
Zinio Reader 4 (x32 Version: 4.2.4164)
Zuma's Revenge (x32 Version: 2.2.0.98)
==================== Restore Points =========================
02-08-2013 10:36:14 Ende der Bereinigung
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-07-27 19:56 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1F6891E0-D1F9-4762-9028-0CC5C8A32D8B} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\Protected Search\ProtectedSearch.exe No File
Task: {2525520B-EA9F-45AD-B292-1608EFC899BF} - System32\Tasks\RunOW => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [2012-08-21] ()
Task: {2FBC5199-7E27-42D0-8548-B5F4E9DC6CFC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)
Task: {34A952F5-DAEC-4347-B5CD-8BF49B28C995} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe No File
Task: {35F0D4C5-5BD1-41D3-B8A9-6D25F0973C1C} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {3C276B5A-09A4-4385-B5CD-91F01D136AF7} - System32\Tasks\User_Feed_Synchronization-{7164D283-28B1-4C89-A403-48915D6E8CE1} => C:\Windows\system32\msfeedssync.exe [2013-06-21] (Microsoft Corporation)
Task: {4C9DC6C2-CB66-4207-BB85-400670ED3F1E} - System32\Tasks\Freemium1ClickMaint => C:\Users\Laura\Downloads\1Click.exe No File
Task: {72AF3ECD-9BA3-495B-BA34-89072B403122} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)
Task: {8E233096-ED1C-4A35-88A5-85B43345FE2E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-07-16] (Hewlett-Packard)
Task: {90B6E660-0CB2-4412-9480-49183AD29A85} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {935472ED-66A1-4222-B4D7-819A25A432B3} - System32\Tasks\HPCeeScheduleForLAURA-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {93DF7A24-89CA-4C24-991A-E569142515BC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {A6E5DBB1-EC36-4CFB-9E4A-D69A20B9893B} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe [2013-05-28] (Adobe Systems Incorporated)
Task: {A8BFE9EE-4571-4B61-A8AA-85B6A5707A63} - System32\Tasks\Dealply => C:\Users\Laura\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE No File
Task: {AC082820-2BDF-40FD-85EF-076195F3967E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-10] (Google Inc.)
Task: {B499AEDE-F385-47C3-A9CD-773C8DA7F2A8} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File
Task: {CD652B3E-A789-40F7-9CD4-4DBA24F8E4AB} - System32\Tasks\HPCeeScheduleForLaura => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {D50A1953-BE4D-4CAB-960B-5BA07486B78B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {D767F2C4-F0A4-4489-817F-895AFB440C0A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {E9DE4EE2-5F50-4528-822F-9ABF10CF3233} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-07-16] (Hewlett-Packard)
Task: {F65801AF-A6F5-4F0D-9447-377D316C1F3A} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {F887FD93-8201-476E-A050-EFED0391048A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-10] (Google Inc.)
Task: {F9085A91-45FA-457E-A1AF-96030347DA08} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLAURA-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLaura.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/02/2013 10:45:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e243
ID des fehlerhaften Prozesses: 0x10f0
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1
Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2
Berichtskennung: FlashPlayerUpdateService.exe3
Error: (08/02/2013 10:26:04 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi
Error: (08/02/2013 02:26:00 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi
Error: (08/02/2013 01:45:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e243
ID des fehlerhaften Prozesses: 0x59c
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1
Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2
Berichtskennung: FlashPlayerUpdateService.exe3
Error: (08/02/2013 01:26:01 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi
Error: (08/02/2013 00:45:09 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e243
ID des fehlerhaften Prozesses: 0x1338
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1
Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2
Berichtskennung: FlashPlayerUpdateService.exe3
Error: (08/02/2013 00:26:01 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi
Error: (08/02/2013 11:45:00 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e243
ID des fehlerhaften Prozesses: 0x414
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1
Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2
Berichtskennung: FlashPlayerUpdateService.exe3
Error: (08/02/2013 11:26:01 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi
Error: (08/02/2013 10:45:01 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerUpdateService.exe, Version: 11.6.602.180, Zeitstempel: 0x51a4ab8c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e243
ID des fehlerhaften Prozesses: 0x11b4
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerUpdateService.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerUpdateService.exe1
Pfad des fehlerhaften Moduls: FlashPlayerUpdateService.exe2
Berichtskennung: FlashPlayerUpdateService.exe3
System errors:
=============
Error: (08/03/2013 04:00:46 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.
Error: (08/03/2013 04:00:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023781.
Error: (08/03/2013 04:00:46 PM) (Source: Microsoft-Windows-Bits-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147943515.
Error: (08/03/2013 04:00:46 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007042d
Error: (08/03/2013 04:00:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (08/03/2013 04:00:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TrustedInstaller" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1352
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (08/03/2013 04:00:46 PM) (Source: DCOM) (User: )
Description: 1069TrustedInstaller{752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (07/30/2013 07:10:27 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Microsoft Office Sessions:
=========================
Error: (08/02/2013 10:45:02 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.177254ec49b8fc00000050002e24310f001ce8fc12802039eC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SysWOW64\ntdll.dll66ca246d-fbb4-11e2-9e75-e8393546ce72
Error: (08/02/2013 10:26:04 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/02/2013 02:26:00 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/02/2013 01:45:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.177254ec49b8fc00000050002e24359c01ce8f75b800559aC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SysWOW64\ntdll.dllf5fe45a4-fb68-11e2-9b68-e8393546ce72
Error: (08/02/2013 01:26:01 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/02/2013 00:45:09 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.177254ec49b8fc00000050002e243133801ce8f6d56302a3dC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SysWOW64\ntdll.dll993a2f1b-fb60-11e2-9b68-e8393546ce72
Error: (08/02/2013 00:26:01 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/02/2013 11:45:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.177254ec49b8fc00000050002e24341401ce8f64f480f2c4C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SysWOW64\ntdll.dll327f08ac-fb58-11e2-ad2a-e8393546ce72
Error: (08/02/2013 11:26:01 AM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Google\Update\1.3.21.153\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (08/02/2013 10:45:01 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.1.7601.177254ec49b8fc00000050002e24311b401ce8f5c92c80e51C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\Windows\SysWOW64\ntdll.dlld16e27b1-fb4f-11e2-ad2a-e8393546ce72
CodeIntegrity Errors:
===================================
Date: 2013-07-27 19:55:53.611
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-07-27 19:55:53.564
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-09 13:14:50.876
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-09 13:14:50.876
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-09 13:14:50.876
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-09 13:14:50.860
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-09 13:14:50.860
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-09 13:14:50.860
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-08 16:48:15.211
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-08 16:48:15.211
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 4076.83 MB
Available physical RAM: 2799.02 MB
Total Pagefile: 8151.85 MB
Available Pagefile: 6422.17 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:448.19 GB) (Free:391.08 GB) NTFS (Disk=0 Partition=2)
Drive d: (HP_RECOVERY) (Fixed) (Total:17.47 GB) (Free:2.19 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 45860CFF)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=448 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich habe den Pc im abgesicherten Modus gestarten und den letzen Systemwiederhestellungspunkt gewählt. Alles ist jetzt wieder zu sehen jedoch bekomm ich immer noch die Fehlermeldung:
RunDLL:
Problem beim Starten von C:\Program Files (x86)\BrowserUpdater\TBUpdater.dll |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
