| -Fabian- | 07.11.2014 18:28 |
Kurz zu den 3 Antiviren-Programmen: Die habe ich runtergeladen, um sie kurz zu "testen". Kaspersky dachte ich, wäre eine Testversion. Avira spammt mich mit Werbung im Browser zu... Da ich dann diesen Thread erstellt habe, habe ich sie bislang noch nicht gelöscht, da in euren Anweisungen stand, man soll den PC so belassen, wie er ist und nicht selbst Hand anlegen.
Ich werde nun Avira und Kaspersky löschen.
Zur FRST: Ich habe den Log doch editiert und den Scan noch einmal wiederholt, weil mir selbst auffiel, dass das Programm NICHT auf dem Desktop ist. Naja, ich mach´s nochmal und poste dann den Log. Danke schonmal, für die bisherige Hilfe. :)
Hier die (hoffentlich richtige) FRST:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-11-2014
Ran by Fabian (administrator) on FABIAN-PC on 07-11-2014 18:31:01
Running from C:\Users\Fabian\Desktop
Loaded Profile: Fabian (Available profiles: Fabian)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\System32\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WZQKPICK32.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [TrojanScanner] => C:\Program Files\Trojan Remover\Trjscan.exe [1704720 2014-01-23] (Simply Super Software)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-755397668-225718507-2843928349-1000\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-755397668-225718507-2843928349-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-755397668-225718507-2843928349-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-755397668-225718507-2843928349-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
AppInit_DLLs: c:\progra~3\fastan~1\fastan~1.dll => c:\progra~3\fastan~1\fastan~1.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files\WinZip\WZQKPICK32.EXE (WinZip Computing, S.L.)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fabian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default\Extensions\abs@avira.com [2014-11-06]
FF Extension: YouTube Unblocker - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default\Extensions\youtubeunblocker@unblocker.yt [2014-11-06]
FF Extension: Adblock Plus - C:\Users\Fabian\AppData\Roaming\Mozilla\Firefox\Profiles\hyhcb27n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-06]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-12]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-03]
CHR Extension: (Google Drive) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-03]
CHR Extension: (YouTube) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-03]
CHR Extension: (Google-Suche) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-03]
CHR Extension: (AdBlock Premium) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2014-09-07]
CHR Extension: (YouTurn) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\icphmmimmfdlgaaglejeokffekamhplg [2014-11-06]
CHR Extension: (Google Wallet) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03]
CHR Extension: (Google Mail) - C:\Users\Fabian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-03]
CHR Extension: (RandomPrice) - C:\ProgramData\hjlcmmijlddakenkeknhieglfblpbjnm\ [2014-09-03]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-09-21] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770944 2014-11-06] (Enigma Software Group USA, LLC.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-08] (Disc Soft Ltd)
R3 e1kexpress; C:\Windows\System32\DRIVERS\e1k6032.sys [189096 2009-06-19] (Intel Corporation)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2014-11-06] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2014-11-06] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-07] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S1 uqagzygy; \??\C:\Windows\system32\drivers\uqagzygy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-07 18:24 - 2014-11-07 18:31 - 00012948 _____ () C:\Users\Fabian\Desktop\FRST.txt
2014-11-07 18:24 - 2014-11-07 18:26 - 00028869 _____ () C:\Users\Fabian\Desktop\Addition.txt
2014-11-07 17:58 - 2014-11-07 17:58 - 00000000 ____D () C:\OETemp
2014-11-07 16:11 - 2014-11-07 16:12 - 00030891 _____ () C:\Users\Fabian\Downloads\Addition.txt
2014-11-07 16:10 - 2014-11-07 16:12 - 00037592 _____ () C:\Users\Fabian\Downloads\FRST.txt
2014-11-07 16:09 - 2014-11-07 18:31 - 00000000 ____D () C:\FRST
2014-11-07 16:07 - 2014-11-07 16:09 - 01106432 _____ (Farbar) C:\Users\Fabian\Desktop\FRST.exe
2014-11-07 14:07 - 2006-09-18 22:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20141107-140700.backup
2014-11-06 22:30 - 2014-11-06 22:30 - 01706939 _____ (Thisisu) C:\Users\Fabian\Downloads\JRT.exe
2014-11-06 22:16 - 2014-11-06 22:16 - 01998336 _____ () C:\Users\Fabian\Downloads\AdwCleaner_4.002(1).exe
2014-11-06 22:05 - 2014-11-06 22:06 - 00845088 _____ ( ) C:\Users\Fabian\Downloads\trjsetup691_CB-DL-Manager.exe
2014-11-06 21:17 - 2014-11-07 18:13 - 00000644 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-11-06 21:17 - 2014-11-07 12:05 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-11-06 21:17 - 2014-11-07 12:05 - 00000446 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-11-06 21:17 - 2014-11-06 21:17 - 00001972 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-11-06 21:17 - 2014-11-06 21:17 - 00001960 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-11-06 21:17 - 2014-11-06 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-11-06 21:16 - 2014-11-07 13:54 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 21:16 - 2014-11-06 21:22 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-11-06 21:16 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2014-11-06 21:13 - 2014-11-06 21:13 - 01125200 _____ () C:\Users\Fabian\Downloads\SpyBot Search Destroy - CHIP-Installer.exe
2014-11-06 21:01 - 2014-11-06 21:01 - 02209056 _____ () C:\Users\Fabian\Downloads\avira-eu-cleaner_de.exe
2014-11-06 21:01 - 2014-11-06 21:01 - 00001823 _____ () C:\Users\Fabian\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-11-06 20:55 - 2014-11-07 18:22 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 20:54 - 2014-11-06 20:54 - 00000901 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-06 20:54 - 2014-11-06 20:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-06 20:53 - 2014-11-06 20:54 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-06 20:53 - 2014-11-06 20:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 20:53 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 20:53 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 20:53 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 20:51 - 2014-11-06 20:52 - 01048928 _____ () C:\Users\Fabian\Downloads\Malwarebytes-Anti-Malware-lnstall.exe
2014-11-06 20:50 - 2014-11-07 18:12 - 00000000 ____D () C:\Program Files\Avira
2014-11-06 20:49 - 2014-11-06 20:50 - 04583464 _____ (Avira Operations GmbH & Co. KG) C:\Users\Fabian\Downloads\avira_de_av___ws.exe
2014-11-06 20:49 - 2014-11-06 20:49 - 00000000 ____D () C:\Users\Fabian\Downloads\Avira-Free-Antivirus
2014-11-06 20:48 - 2014-11-06 20:49 - 01048928 _____ () C:\Users\Fabian\Downloads\Avira-Free-Antivirus-lnstall.exe
2014-11-06 11:50 - 2014-11-06 11:50 - 00262144 _____ () C:\Windows\system32\config\elam
2014-11-06 11:39 - 2014-11-06 11:39 - 00001828 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-11-06 11:39 - 2014-11-06 11:39 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-11-06 11:38 - 2010-04-05 21:00 - 00221568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-11-06 11:33 - 2014-11-06 11:34 - 118637304 _____ (Microsoft Corporation) C:\Users\Fabian\Downloads\msert.exe
2014-11-06 11:32 - 2014-11-06 11:32 - 11473216 _____ (Microsoft Corporation) C:\Users\Fabian\Downloads\mseinstall.exe
2014-11-06 11:15 - 2014-11-06 11:24 - 176561792 _____ () C:\Users\Fabian\Downloads\kis15.0.0.463de-de.exe
2014-11-06 11:13 - 2014-11-06 11:13 - 01998336 _____ () C:\Users\Fabian\Downloads\adwcleaner_4.002.exe
2014-11-06 11:09 - 2014-11-06 11:09 - 00000000 ____D () C:\Users\Fabian\Documents\Simply Super Software
2014-11-06 11:09 - 2014-11-06 11:09 - 00000000 ____D () C:\ProgramData\Licenses
2014-11-06 11:08 - 2014-11-06 11:08 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-11-06 11:08 - 2014-11-06 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover
2014-11-06 11:08 - 2014-11-06 11:08 - 00000000 ____D () C:\Program Files\Trojan Remover
2014-11-06 11:08 - 2012-06-15 15:39 - 00169744 _____ () C:\Windows\system32\ztvunrar36.dll
2014-11-06 11:08 - 2012-06-15 15:35 - 00185616 _____ () C:\Windows\system32\ztvunrar39.dll
2014-11-06 11:08 - 2012-06-15 15:33 - 00605968 _____ (Igor Pavlov) C:\Windows\system32\ztv7z.dll
2014-11-06 11:08 - 2012-06-15 15:33 - 00077072 _____ (Microsoft Corporation) C:\Windows\system32\ztvcabinet.dll
2014-11-06 11:08 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-11-06 11:08 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-11-06 11:08 - 2005-08-26 00:50 - 00077312 _____ () C:\Windows\system32\ztvunace26.dll
2014-11-06 11:08 - 2003-02-02 19:06 - 00153088 _____ () C:\Windows\system32\UNRAR3.dll
2014-11-06 11:08 - 2002-03-06 00:00 - 00075264 _____ () C:\Windows\system32\unacev2.dll
2014-11-06 11:07 - 2014-11-06 11:07 - 01125200 _____ () C:\Users\Fabian\Downloads\Trojan Remover - CHIP-Installer.exe
2014-11-06 09:23 - 2014-11-06 09:23 - 00001077 _____ () C:\Users\Fabian\Desktop\SpyHunter.lnk
2014-11-06 09:23 - 2014-11-06 09:23 - 00000000 ____D () C:\Users\Fabian\AppData\Roaming\Enigma Software Group
2014-11-06 09:22 - 2014-11-06 09:22 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\Fabian\Downloads\SpyHunter-Installer.exe
2014-11-06 09:22 - 2014-11-06 09:22 - 00019984 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2014-11-06 09:22 - 2014-11-06 09:22 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-11-06 07:18 - 2014-11-06 21:01 - 00000000 ____D () C:\ProgramData\AllSaver
2014-11-06 07:17 - 2014-11-06 07:17 - 00000000 ____D () C:\ProgramData\hjlcmmijlddakenkeknhieglfblpbjnm
2014-10-18 02:10 - 2014-06-15 23:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 02:10 - 2014-06-13 19:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 02:10 - 2014-06-13 19:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 02:07 - 2014-09-28 00:29 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 02:00 - 2014-09-16 17:56 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 02:00 - 2014-09-05 00:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2014-10-17 22:44 - 2014-09-19 23:53 - 12364288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 22:44 - 2014-09-19 23:44 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 22:44 - 2014-09-19 23:41 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 22:44 - 2014-09-19 23:39 - 01138688 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 22:44 - 2014-09-19 23:38 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 22:44 - 2014-09-19 23:37 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 22:44 - 2014-09-19 23:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-10-17 22:44 - 2014-09-19 23:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 22:44 - 2014-09-19 23:36 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 22:44 - 2014-09-19 23:35 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 22:44 - 2014-09-19 23:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-17 22:44 - 2014-09-19 23:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 22:44 - 2014-09-19 23:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-17 22:44 - 2014-09-19 23:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-10-17 22:44 - 2014-09-19 23:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 22:44 - 2014-09-19 23:34 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 22:44 - 2014-09-19 23:34 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 22:44 - 2014-09-19 23:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 22:44 - 2014-09-19 23:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-10-17 22:44 - 2014-09-19 23:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-10-17 22:44 - 2014-09-19 23:33 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-14 19:20 - 2014-10-14 19:20 - 00001492 _____ () C:\Users\Fabian\AppData\Local\recently-used.xbel
2014-10-14 18:52 - 2014-10-14 19:18 - 00000000 ____D () C:\Users\Fabian\AppData\Local\gtk-2.0
2014-10-14 18:49 - 2014-10-14 19:21 - 00000000 ____D () C:\Users\Fabian\.gimp-2.8
2014-10-14 18:49 - 2014-10-14 18:49 - 00000000 ____D () C:\Users\Fabian\AppData\Local\gegl-0.2
2014-10-14 18:49 - 2014-10-14 18:49 - 00000000 ____D () C:\Users\Fabian\AppData\Local\fontconfig
2014-10-14 18:48 - 2014-10-14 18:48 - 00000884 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-10-14 18:46 - 2014-10-14 18:48 - 00000000 ____D () C:\Program Files\GIMP 2
2014-10-14 18:45 - 2014-10-14 18:46 - 91670064 _____ (The GIMP Team ) C:\Users\Fabian\Downloads\gimp-2.8.14-setup.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-07 18:22 - 2006-11-02 13:47 - 00003760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-07 18:22 - 2006-11-02 13:47 - 00003760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-07 18:19 - 2014-05-10 21:01 - 00000000 ____D () C:\Users\Fabian\AppData\Roaming\Skype
2014-11-07 18:19 - 2009-04-11 17:55 - 01590276 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 18:18 - 2009-04-11 13:37 - 01478153 _____ () C:\Windows\WindowsUpdate.log
2014-11-07 18:12 - 2014-06-10 01:57 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-07 18:12 - 2014-05-18 17:55 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-11-07 18:12 - 2008-01-21 03:47 - 00162272 _____ () C:\Windows\PFRO.log
2014-11-07 18:12 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 18:11 - 2006-11-02 14:01 - 00032538 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-07 18:09 - 2014-05-11 08:08 - 00000000 ____D () C:\Users\Public
2014-11-07 17:58 - 2014-05-15 00:10 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-07 17:50 - 2014-05-10 17:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-07 17:46 - 2014-06-10 01:57 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-07 15:54 - 2014-06-12 09:34 - 00000000 ____D () C:\AdwCleaner
2014-11-07 13:58 - 2014-05-10 21:13 - 00011264 _____ () C:\Users\Fabian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-07 13:57 - 2014-05-10 15:04 - 00000000 ____D () C:\Users\Fabian
2014-11-07 13:55 - 2014-08-30 22:45 - 00000000 ____D () C:\Users\Fabian\Desktop\screens
2014-11-07 12:26 - 2014-05-18 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-11-07 12:05 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\L2Schemas
2014-11-06 20:56 - 2014-05-12 19:45 - 00000000 ____D () C:\uTorrent
2014-11-06 20:49 - 2014-05-15 00:13 - 00000000 ____D () C:\Users\Fabian\AppData\Roaming\NVIDIA
2014-11-06 11:51 - 2014-06-02 17:57 - 00000000 ___HD () C:\Users\Fabian\AppData\Roaming\Origin
2014-11-06 10:49 - 2014-05-12 19:42 - 00000000 ____D () C:\Users\Fabian\AppData\Roaming\uTorrent
2014-11-06 07:18 - 2014-06-18 13:14 - 00000000 ____D () C:\ProgramData\46439393afb8f507
2014-10-30 12:24 - 2014-05-10 20:08 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-18 23:34 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-18 21:14 - 2006-11-02 13:47 - 00229592 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 02:04 - 2014-05-11 07:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-18 02:01 - 2006-11-02 11:24 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-10-14 23:05 - 2014-05-15 00:16 - 00348928 _____ () C:\Windows\system32\PnkBstrB.xtr
2014-10-14 23:05 - 2014-05-15 00:08 - 00348928 _____ () C:\Windows\system32\PnkBstrB.exe
2014-10-14 23:05 - 2014-05-15 00:08 - 00139944 _____ () C:\Windows\system32\Drivers\PnkBstrK.sys
2014-10-14 23:04 - 2014-05-15 00:08 - 00280904 _____ () C:\Windows\system32\PnkBstrB.ex0
2014-10-14 14:01 - 2014-06-02 17:46 - 00000000 ____D () C:\ProgramData\Origin
2014-10-14 14:01 - 2014-06-02 17:45 - 00000000 ____D () C:\Program Files\Origin
Some content of TEMP:
====================
C:\Users\Fabian\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-07 18:19
==================== End Of Log ============================
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-11-2014
Ran by Fabian at 2014-11-07 18:31:35
Running from C:\Users\Fabian\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32239 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Alan Wake (HKLM\...\Alan Wake_is1) (Version: - )
AllSaver (HKLM\...\{F5853CDF-2C63-6D1D-B286-CBB1CD5DFD62}) (Version: - "") <==== ATTENTION
Bandicam (HKLM\...\Bandicam) (Version: 1.9.5.510 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM\...\BandiMPEG1) (Version: - Bandisoft.com)
Battlefield 3™ (HKLM\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
BeamNG-Techdemo-0.3 (remove only) (HKCU\...\BeamNG-Techdemo-0.3) (Version: - )
CL-Eye Driver (HKLM\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Die Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (HKLM\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Euro Truck Simulator 2 (HKLM\...\Steam App 227300) (Version: - SCS Software)
Euro Truck Simulator 2 Multiplayer 0.1.0.3 Alpha (HKLM\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.3 Alpha - ETS2MP Team)
Fallout 3 (HKLM\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM\...\Steam App 22380) (Version: - Obsidian Entertainment)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 14.3 - Intel)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM\...\{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}) (Version: 2.0.675.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{FD052FB9-FE90-4438-B355-15EDC89D8FB1}) (Version: 2.0.673.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 32.0.2 (x86 de) (HKLM\...\Mozilla Firefox 32.0.2 (x86 de)) (Version: 32.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Need for Speed™ Carbon (HKLM\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version: - )
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Open Broadcaster Software (HKLM\...\Open Broadcaster Software) (Version: - )
Origin (HKLM\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
San Andreas Mod Installer (HKLM\...\San Andreas Mod Installer1.0) (Version: - )
San Andreas Mod Installer (HKLM\...\San Andreas Mod Installer1.1) (Version: 1.1 - cpmusick)
SimCity™ (HKLM\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 6.18 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SpyHunter 4 (HKLM\...\SpyHunter) (Version: 4.18.9.4384 - Enigma Software Group, LLC)
Steam (HKLM\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Crew (Beta) (HKLM\...\Uplay Install 750) (Version: - Ubisoft)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM\...\Steam App 272350) (Version: - Ubisoft Singapore)
Trojan Remover 6.9.0 (HKLM\...\Trojan Remover_is1) (Version: 6.9.0 - Simply Super Software)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)
Uplay (HKLM\...\Uplay) (Version: 4.7 - Ubisoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E2}) (Version: 18.5.11111 - WinZip Computing, S.L. )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-755397668-225718507-2843928349-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Fabian\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
==================== Restore Points =========================
30-10-2014 01:43:15 Geplanter Prüfpunkt
04-11-2014 18:37:12 Geplanter Prüfpunkt
05-11-2014 23:00:01 Geplanter Prüfpunkt
06-11-2014 10:25:47 First Restore Point
06-11-2014 10:28:12 Gerätetreiber-Paketinstallation: Kaspersky Lab Netzwerkdienst
06-11-2014 10:38:29 Windows Update
06-11-2014 11:04:28 Entfernte(s) Kaspersky Internet Security.
06-11-2014 11:30:54 First Restore Point
06-11-2014 11:56:02 First Restore Point
07-11-2014 11:13:35 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {135A9041-58B6-4CD0-A310-23D694A21920} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-03] (Google Inc.)
Task: {1ACC2F5A-5448-4482-AC20-56621DA69F98} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {83574718-11FA-45CD-9E0C-9305EEB7AB9C} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {89F0D5A2-CFBE-4234-BDE4-58286E5E9DD9} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: {9A757EF6-9FD1-48EF-AA28-D145395BC54B} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {C310CBCD-FE98-47CC-A44B-3E240BE01F00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-03] (Google Inc.)
Task: {DAE86650-C5D9-42A3-B7FB-6104D142D77F} - \Origin No Task File <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
==================== Loaded Modules (whitelisted) =============
2014-11-06 21:16 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-06 21:16 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2014-05-15 00:08 - 2014-09-21 09:34 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2014-11-06 21:16 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-06 21:16 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-06 21:16 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-05-10 17:20 - 2014-09-19 21:54 - 03734640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupreg: NvBackend => "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide
========================= Accounts: ==========================
Administrator (S-1-5-21-755397668-225718507-2843928349-500 - Administrator - Disabled)
ASPNET (S-1-5-21-755397668-225718507-2843928349-1003 - Limited - Enabled)
Fabian (S-1-5-21-755397668-225718507-2843928349-1000 - Administrator - Enabled) => C:\Users\Fabian
Gast (S-1-5-21-755397668-225718507-2843928349-501 - Limited - Disabled)
==================== Faulty Device Manager Devices =============
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Videocontroller für Multimedia
Description: Videocontroller für Multimedia
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/07/2014 06:14:57 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/07/2014 00:32:31 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/07/2014 00:13:15 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/06/2014 00:55:29 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {6d842f47-73fb-472e-9342-09b7a3a97107}
Error: (11/06/2014 00:30:45 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {6d842f47-73fb-472e-9342-09b7a3a97107}
Error: (11/06/2014 00:18:15 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/06/2014 11:57:58 AM) (Source: Winlogon) (EventID: 4004) (User: )
Description: Fehler beim Beenden der Prozesse des aktuell angemeldeten Benutzers durch den Windows-Anmeldeprozess.
Error: (11/06/2014 11:50:05 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/06/2014 11:40:43 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
Error: (11/06/2014 11:38:24 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: Die Lizenzaktivierung (SLUINotify.dll) ist mit folgendem Fehlercode fehlgeschlagen:
0x80070057
System errors:
=============
Error: (11/07/2014 00:07:21 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Avira Service Host
Error: (11/07/2014 00:05:45 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 06.11.2014 um 22:30:53 unerwartet heruntergefahren.
Error: (11/06/2014 08:56:32 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Avira Echtzeit-Scanner303 (0x12F)
Error: (11/06/2014 08:54:12 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )
Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %VirTool:Win32/Obfuscator.XZ60 ein schwerwiegender Fehler festgestellt.
Weitere Informationen finden Sie hier:
%VirTool:Win32/Obfuscator.XZ603
Name: VirTool:Win32/Obfuscator.XZ
ID: 2147625929
Schweregrad: %VirTool:Win32/Obfuscator.XZ600
Kategorie: %VirTool:Win32/Obfuscator.XZ602
Pfad: 4.6.0305.02
Ursprung der Erkennung: 4.6.0305.04
Typ der Erkennung: 4.6.0305.08
Quelle der Erkennung: %VirTool:Win32/Obfuscator.XZ608
Benutzer: {94B90B28-39D7-41FD-BBD9-4C578B9543C3}9
Prozessname: %VirTool:Win32/Obfuscator.XZ609
Aktion: {94B90B28-39D7-41FD-BBD9-4C578B9543C3}1
Aktionsstatus: {94B90B28-39D7-41FD-BBD9-4C578B9543C3}8
Fehlercode: {94B90B28-39D7-41FD-BBD9-4C578B9543C3}3
Fehlerbeschreibung: {94B90B28-39D7-41FD-BBD9-4C578B9543C3}4
Signaturversion: 2014-11-06T19:52:49.024Z1
Modulversion: 2014-11-06T19:52:49.024Z2
Error: (11/06/2014 08:48:42 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )
Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %VirTool:Win32/Obfuscator.XZ60 ein schwerwiegender Fehler festgestellt.
Weitere Informationen finden Sie hier:
%VirTool:Win32/Obfuscator.XZ603
Name: VirTool:Win32/Obfuscator.XZ
ID: 2147625929
Schweregrad: %VirTool:Win32/Obfuscator.XZ600
Kategorie: %VirTool:Win32/Obfuscator.XZ602
Pfad: 4.6.0305.02
Ursprung der Erkennung: 4.6.0305.04
Typ der Erkennung: 4.6.0305.08
Quelle der Erkennung: %VirTool:Win32/Obfuscator.XZ608
Benutzer: {981A49F6-2208-44A0-BD58-7388DEEDC746}9
Prozessname: %VirTool:Win32/Obfuscator.XZ609
Aktion: {981A49F6-2208-44A0-BD58-7388DEEDC746}1
Aktionsstatus: {981A49F6-2208-44A0-BD58-7388DEEDC746}8
Fehlercode: {981A49F6-2208-44A0-BD58-7388DEEDC746}3
Fehlerbeschreibung: {981A49F6-2208-44A0-BD58-7388DEEDC746}4
Signaturversion: 2014-11-06T19:46:26.933Z1
Modulversion: 2014-11-06T19:46:26.933Z2
Error: (11/06/2014 08:42:50 PM) (Source: Microsoft Antimalware) (EventID: 1119) (User: )
Description: Beim Anwenden von Aktionen auf Schadsoftware und potenziell unerwünschte Software wurde von %VirTool:Win32/Obfuscator.XZ60 ein schwerwiegender Fehler festgestellt.
Weitere Informationen finden Sie hier:
%VirTool:Win32/Obfuscator.XZ603
Name: VirTool:Win32/Obfuscator.XZ
ID: 2147625929
Schweregrad: %VirTool:Win32/Obfuscator.XZ600
Kategorie: %VirTool:Win32/Obfuscator.XZ602
Pfad: 4.6.0305.02
Ursprung der Erkennung: 4.6.0305.04
Typ der Erkennung: 4.6.0305.08
Quelle der Erkennung: %VirTool:Win32/Obfuscator.XZ608
Benutzer: {EA33DF44-08B2-4C96-850F-7C7CFB7A5663}9
Prozessname: %VirTool:Win32/Obfuscator.XZ609
Aktion: {EA33DF44-08B2-4C96-850F-7C7CFB7A5663}1
Aktionsstatus: {EA33DF44-08B2-4C96-850F-7C7CFB7A5663}8
Fehlercode: {EA33DF44-08B2-4C96-850F-7C7CFB7A5663}3
Fehlerbeschreibung: {EA33DF44-08B2-4C96-850F-7C7CFB7A5663}4
Signaturversion: 2014-11-06T11:22:13.008Z1
Modulversion: 2014-11-06T11:22:13.008Z2
Error: (11/06/2014 00:06:46 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Windows Update
Error: (11/06/2014 00:05:43 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: 30000ShellHWDetection
Error: (11/06/2014 11:59:58 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 06.11.2014 um 11:58:26 unerwartet heruntergefahren.
Error: (11/06/2014 11:57:21 AM) (Source: DCOM) (EventID: 10000) (User: )
Description: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}5{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (11/07/2014 06:14:57 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/07/2014 00:32:31 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/07/2014 00:13:15 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/06/2014 00:55:29 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {6d842f47-73fb-472e-9342-09b7a3a97107}
Error: (11/06/2014 00:30:45 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {6d842f47-73fb-472e-9342-09b7a3a97107}
Error: (11/06/2014 00:18:15 PM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/06/2014 11:57:58 AM) (Source: Winlogon) (EventID: 4004) (User: )
Description:
Error: (11/06/2014 11:50:05 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/06/2014 11:40:43 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
Error: (11/06/2014 11:38:24 AM) (Source: Software Licensing Service) (EventID: 8198) (User: )
Description: 0x80070057
CodeIntegrity Errors:
===================================
Date: 2014-11-07 18:31:28.518
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:31:28.409
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:31:28.300
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:31:28.175
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:24:29.443
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:24:29.334
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:24:29.225
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:24:29.116
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:23:20.769
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-11-07 18:23:20.659
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
Percentage of memory in use: 42%
Total physical RAM: 3062.38 MB
Available physical RAM: 1759.92 MB
Total Pagefile: 6359.79 MB
Available Pagefile: 4744.69 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.34 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:457.96 GB) (Free:61.69 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 27623D62)
Partition 1: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 2: (Active) - (Size=458 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=457.9 GB) - (Type=05)
==================== End Of Log ============================
|
So funktioniert es:
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
Emsisoft Emergency Kit herunter.
SecurityCheck und:
