Jetzt sicherheitshalber noch mal alles in der richtigen Reihenfolge
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 27.07.2015
Suchlaufzeit: 19:05:12
Protokolldatei: mbam.txt
Administrator: Ja
Version: 2.1.8.1057
Malware-Datenbank: v2015.07.27.05
Rootkit-Datenbank: v2015.07.22.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: maik
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 353280
Abgelaufene Zeit: 43 Min., 0 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(keine bösartigen Elemente erkannt)
Module: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswerte: 1
PUP.Optional.DefaultSearchProtected.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|defsearchp@gmail.com, C:\Users\maik\AppData\Roaming\Mozilla\Firefox\Profiles\tv44vd65.default-1381521552836\extensions\defsearchp@gmail.com, In Quarantäne, [853cc22497f36bcbc234c9d8ef15c13f]
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Dateien: 1
PUP.Optional.QuickStart.A, C:\Users\maik\AppData\Roaming\Mozilla\Firefox\Profiles\tv44vd65.default-1381521552836\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[e4ddad39ed9d2e0844f4d1a438cd54ac]
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
# AdwCleaner v4.208 - Bericht erstellt 27/07/2015 um 20:01:53
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-09.2 [Lokal]
# Betriebssystem : Windows (TM) Vista Ultimate Service Pack 2 (x64)
# Benutzername : maik - SCHAREK
# Gestarted von : C:\Users\maik\Downloads\AdwCleaner_4.208(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
[!] Ordner Gelöscht : C:\Program Files (x86)\Elex-tech
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Elex-tech
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
***** [ Internetbrowser ] *****
-\\ Internet Explorer v9.0.8112.16669
-\\ Mozilla Firefox v39.0 (x86 de)
[tv44vd65.default-1381521552836\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[tv44vd65.default-1381521552836\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[tv44vd65.default-1381521552836\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
*************************
AdwCleaner[R0].txt - [15175 Bytes] - [21/07/2015 19:35:22]
AdwCleaner[R1].txt - [1515 Bytes] - [27/07/2015 19:59:39]
AdwCleaner[S0].txt - [12783 Bytes] - [21/07/2015 19:37:17]
AdwCleaner[S1].txt - [1426 Bytes] - [27/07/2015 20:01:53]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1485 Bytes] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Windows (TM) Vista Ultimate x64
Ran by maik on 27.07.2015 at 20:08:24,12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\crossriderplugin
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\maik\AppData\Roaming\mozilla\firefox\profiles\tv44vd65.default-1381521552836\prefs.js
user_pref(browser.search.searchengine.searchengine.uid, [xpconnect wrapped nsIUUIDGenerator]);
user_pref(browser.search.selectedEngine, webssearches);
Emptied folder: C:\Users\maik\AppData\Roaming\mozilla\firefox\profiles\tv44vd65.default-1381521552836\minidumps [1 files]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.07.2015 at 20:36:27,62
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
durchgeführt von maik (Administrator) auf SCHAREK (27-07-2015 20:40:13)
Gestartet von C:\Users\maik\Downloads
Geladene Profile: maik (Verfügbare Profile: maik)
Platform: Windows Vista (TM) Ultimate Service Pack 2 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\maik\Downloads\FRST64(2).exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [5394944 2011-03-27] (Broadcom Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-17] (IDT, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-10-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-03-22] (Nullsoft, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM-x32\...\Run: [ThreatFire] => C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2011-02-22] (PC Tools)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-09-06] (Western Digital)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5236664 2012-09-19] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1699912 2010-10-26] (Elgato Systems)
HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [138240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Run: [WMPNSCFG] => C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Run: [Amazon Music] => C:\Users\maik\AppData\Local\Amazon Music\Amazon Music Helper.exe [6281536 2014-09-06] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-04-21]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-03-29]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-911582600-3694651840-913277333-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-04] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-04] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-20] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-20] (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2010-09-01] (TerraTec Electronic GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{043778CA-A0BA-421B-A20F-885309F5923E}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{44C7BAE4-6EB7-4C03-B011-52DA13B5B8BC}: [NameServer] 192.168.2.1
Tcpip\..\Interfaces\{54330125-6A1D-410C-8B14-B920542E6855}: [DhcpNameServer] 193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{7095E3E3-337E-47A3-98DE-022E411267A4}: [DhcpNameServer] 193.189.244.206 193.189.244.225
FireFox:
========
FF ProfilePath: C:\Users\maik\AppData\Roaming\Mozilla\Firefox\Profiles\tv44vd65.default-1381521552836
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-17] ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-10-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-04] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-17] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=1.1.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2011-03-23] (the VideoLAN Team)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-911582600-3694651840-913277333-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll [2013-01-23] (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2013-10-27] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-03-22] (Nullsoft, Inc.)
FF Extension: pdfViewerSwitcher - C:\Users\maik\AppData\Roaming\Mozilla\Firefox\Profiles\tv44vd65.default-1381521552836\Extensions\jid1-UXDr6c69BeyPVw@jetpack.xpi [2015-07-17]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-03-27]
FF HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: Kein Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
==================== Services (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_3b6aa460\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [280120 2010-10-01] (Hewlett-Packard Company)
S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [246112 2013-10-01] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_3b6aa460\STacSV64.exe [244736 2010-03-17] (IDT, Inc.)
R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2011-02-22] (PC Tools)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1157056 2012-09-19] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1177536 2012-09-19] (Western Digital )
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
S2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [4769280 2011-03-27] (Broadcom Corporation) [Datei ist nicht signiert]
==================== Drivers (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [271360 2013-10-01] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2011-02-22] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2011-02-22] (PC Tools)
R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [74824 2011-02-22] (PC Tools)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 20:39 - 2015-07-27 20:39 - 02146816 _____ (Farbar) C:\Users\maik\Downloads\FRST64(2).exe
2015-07-27 20:36 - 2015-07-27 20:36 - 00001168 _____ C:\Users\maik\Desktop\JRT.txt
2015-07-27 20:07 - 2015-07-27 20:07 - 01798176 _____ (Malwarebytes Corporation) C:\Users\maik\Downloads\JRT(1).exe
2015-07-27 20:03 - 2015-07-27 20:03 - 00001565 _____ C:\Users\maik\Desktop\AdwCleaner[S1].txt
2015-07-27 19:59 - 2015-07-27 19:59 - 02248704 _____ C:\Users\maik\Downloads\AdwCleaner_4.208(1).exe
2015-07-27 19:58 - 2015-07-27 19:58 - 00001679 _____ C:\Users\maik\Desktop\mbam.txt
2015-07-21 20:29 - 2015-07-14 18:02 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 20:29 - 2015-07-14 17:45 - 00048128 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 20:29 - 2015-07-14 16:34 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 20:29 - 2015-07-14 16:23 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-21 20:17 - 2015-07-21 20:17 - 02135552 _____ (Farbar) C:\Users\maik\Downloads\FRST64(1).exe
2015-07-21 19:49 - 2015-07-21 19:49 - 01798288 _____ (Malwarebytes Corporation) C:\Users\maik\Downloads\JRT.exe
2015-07-21 19:34 - 2015-07-27 20:01 - 00000000 ___DC C:\AdwCleaner
2015-07-21 19:33 - 2015-07-21 19:33 - 02248704 _____ C:\Users\maik\Downloads\AdwCleaner_4.208.exe
2015-07-21 18:41 - 2015-07-27 20:03 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-21 18:40 - 2015-07-22 19:03 - 00000941 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-21 18:40 - 2015-07-22 19:03 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-21 18:40 - 2015-07-22 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-21 18:40 - 2015-07-21 18:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-21 18:40 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-21 18:40 - 2015-06-18 08:41 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-21 18:40 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-21 18:28 - 2015-07-21 18:29 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\maik\Downloads\mbam-setup-2.1.6.1022.exe
2015-07-20 19:21 - 2015-07-20 19:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\maik\Downloads\revosetup95.exe
2015-07-20 19:21 - 2015-07-20 19:21 - 00001099 _____ C:\Users\maik\Desktop\Revo Uninstaller.lnk
2015-07-20 19:21 - 2015-07-20 19:21 - 00000000 ___DC C:\Program Files (x86)\VS Revo Group
2015-07-20 19:15 - 2015-07-20 19:15 - 00562784 _____ (Oracle Corporation) C:\Users\maik\Downloads\jxpiinstall.exe
2015-07-19 19:25 - 2015-07-23 22:54 - 00041705 _____ C:\Users\maik\Downloads\Addition.txt
2015-07-19 19:24 - 2015-07-27 20:40 - 00016383 _____ C:\Users\maik\Downloads\FRST.txt
2015-07-19 19:24 - 2015-07-27 20:40 - 00000000 ___DC C:\FRST
2015-07-19 19:24 - 2015-07-19 19:24 - 02134528 _____ (Farbar) C:\Users\maik\Downloads\FRST64.exe
2015-07-18 09:34 - 2015-07-18 09:34 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-17 21:19 - 2015-07-17 21:20 - 00081771 _____ C:\Users\maik\Downloads\Ein Christenmensch und Geschichtenerzähler _ DIE ZEIT Archiv _ Ausgabe 44_1987.htm
2015-07-17 21:19 - 2015-07-17 21:19 - 00184545 _____ C:\Users\maik\Downloads\Frankfurter Anthologie Johannes Bobrowski „Immer zu benennen“ - Frankfurter Anthologie - FAZ.htm
2015-07-17 21:19 - 2015-07-17 21:19 - 00069526 _____ C:\Users\maik\Downloads\Literatur-Ausstellung in Marbach Ein Dichter zwischen Ost und West Lieben Sie Bobrowski _ DIE ZEIT Archiv _ Ausgabe 29_1993.htm
2015-07-17 21:19 - 2015-07-17 21:19 - 00066905 _____ C:\Users\maik\Downloads\Mein Jahrhundertbuch (39) _ ZEIT ONLINE.htm
2015-07-17 21:19 - 2015-07-17 21:19 - 00035660 _____ C:\Users\maik\Downloads\Bobrowski.htm
2015-07-17 21:18 - 2015-07-17 21:18 - 00123962 _____ C:\Users\maik\Downloads\Johannes Bobrowski – zwei Gedichte, kein Geschwätz _ skyaboveoldblueplace.htm
2015-07-17 21:18 - 2015-07-17 21:18 - 00077392 _____ C:\Users\maik\Downloads\Schriftsteller Johannes Bobrowski Eigentlich ein Vertriebener _ ZEIT ONLINE.htm
2015-07-17 21:17 - 2015-07-17 21:18 - 00118349 _____ C:\Users\maik\Downloads\Johannes Bobrowski Meine liebsten Gedichte - planet lyrik @ planetlyrik.de.htm
2015-07-17 21:17 - 2015-07-17 21:17 - 00005583 _____ C:\Users\maik\Downloads\Johannes Bobrowski Zwei Hamann-Gedichte _ Internationales Hamann-Kolloquium.htm
2015-07-17 21:12 - 2015-07-17 21:12 - 00047103 _____ C:\Users\maik\Downloads\Poesiealbum 301 _ Elke Erb _ vorgestellt.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00106368 _____ C:\Users\maik\Downloads\Golem (Elke Erb) · Lyrikline.org.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00101693 _____ C:\Users\maik\Downloads\Freilich können Langsame auch (Elke Erb) · Lyrikline.org.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00098774 _____ C:\Users\maik\Downloads\Leibhaft lesen (Elke Erb) · Lyrikline.org.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00066234 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 34 _ Dank an Thomas Brasch.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00053210 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 10 _ poetenladen.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00052914 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 30 _ Übersetzt werden.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00052731 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 33 _ Anne Carson.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00052547 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 27 _ Verluste infolge von korrektem Deutsch.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00052231 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 7 _ poetenladen.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00051561 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 11 _ Kolumne Begriff Tee _ poetenladen.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00049029 _____ C:\Users\maik\Downloads\Elke Erb _ Poetics 31 _ Übersetzt werden.htm
2015-07-17 21:11 - 2015-07-17 21:11 - 00008369 _____ C:\Users\maik\Downloads\poet nr. 1 _ literaturmagazin _ Elke Erb.htm
2015-07-17 21:10 - 2015-07-17 21:10 - 00104680 _____ C:\Users\maik\Downloads\Wolken darüber. ich weiß nur das eine (Elke Erb) · Lyrikline.org.htm
2015-07-17 21:10 - 2015-07-17 21:10 - 00104448 _____ C:\Users\maik\Downloads\Selbstgespräche sind nur Meeresrauschen (Elke Erb) · Lyrikline.org.htm
2015-07-17 21:04 - 2015-07-17 21:04 - 00069967 _____ C:\Users\maik\Downloads\rilke rosa hortensie.htm
2015-07-17 21:04 - 2015-07-17 21:04 - 00020754 _____ C:\Users\maik\Downloads\Blaue Hortensie (Rainer Maria Rilke) - Medienwerkstatt-Wissen © 2006-2008 Medienwerkstatt.htm
2015-07-17 21:04 - 2015-07-17 21:04 - 00020657 _____ C:\Users\maik\Downloads\Rosa Hortensie (Rainer Maria Rilke) - Medienwerkstatt-Wissen © 2006-2008 Medienwerkstatt.htm
2015-07-17 21:03 - 2015-07-17 21:03 - 00090601 _____ C:\Users\maik\Downloads\Vor 200 Jahren wurde Iwan Gontscharow, der geniale Schöpfer des Romans «Oblomow», geboren Zwischen den Extremen - NZZ.htm
2015-07-17 21:03 - 2015-07-17 21:03 - 00040632 _____ C:\Users\maik\Downloads\The Precipice (Ivan Goncharov) - Wikipedia, the free encyclopedia.htm
2015-07-17 21:03 - 2015-07-17 21:03 - 00030391 _____ C:\Users\maik\Downloads\Blaue Hortensie (Rilke) – Wikipedia.htm
2015-07-17 21:00 - 2015-07-17 21:00 - 00055435 _____ C:\Users\maik\Downloads\Jurjews KLASSIKER Die drei Augen des Iwan Gontscharow - Kultur - Tagesspiegel.htm
2015-07-17 20:59 - 2015-07-17 20:59 - 00106455 _____ C:\Users\maik\Downloads\Radio Hauslektüre Stimme Russlands.htm
2015-07-17 20:59 - 2015-07-17 20:59 - 00027742 _____ C:\Users\maik\Downloads\Iwan A. Gontscharow, Die Schlucht.htm
2015-07-17 20:51 - 2015-07-17 20:51 - 00019793 _____ C:\Users\maik\Downloads\Rilke - Neue Gedichte Letzter Abend.htm
2015-07-17 20:20 - 2015-07-17 20:20 - 00032562 _____ C:\Users\maik\Downloads\'Ich habe nichts gewusst' - katholisch.de.htm
2015-07-17 20:19 - 2015-07-17 20:19 - 00048206 _____ C:\Users\maik\Downloads\Künftiger Kardinal Rauber „Der Hut ist halt rot“Radio Vatikan.htm
2015-07-17 20:08 - 2015-07-17 20:08 - 00038314 _____ C:\Users\maik\Downloads\Travnička hronika – Wikipedia.htm
2015-07-17 20:06 - 2015-07-17 20:06 - 00044598 _____ C:\Users\maik\Downloads\Gaspard de la Nuit. Fantasiestücke (Archiv).htm
2015-07-17 19:34 - 2015-07-27 20:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-17 19:34 - 2015-07-19 15:01 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 21:51 - 2015-06-27 18:03 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 21:51 - 2015-06-27 18:03 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 21:51 - 2015-06-27 18:02 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 21:51 - 2015-06-27 18:02 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 21:51 - 2015-06-27 18:01 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-07-15 21:51 - 2015-06-27 17:40 - 01304576 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 21:51 - 2015-06-27 17:40 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 21:51 - 2015-06-27 17:40 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 21:51 - 2015-06-27 17:39 - 01065472 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-07-15 21:51 - 2015-06-27 16:30 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 21:51 - 2015-06-27 16:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 21:51 - 2015-06-12 15:13 - 00516544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 21:51 - 2015-01-09 02:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 21:50 - 2015-07-03 18:04 - 01316864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 21:50 - 2015-07-03 17:41 - 01916416 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 21:50 - 2015-06-25 05:09 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 21:49 - 2015-05-31 10:11 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 21:49 - 2015-05-31 09:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 21:48 - 2015-06-17 18:50 - 02264576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 21:48 - 2015-06-17 18:23 - 03137536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 21:48 - 2015-06-17 17:18 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 21:48 - 2015-06-17 17:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 21:47 - 2015-06-12 18:03 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 21:47 - 2015-06-12 17:46 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 08:21 - 2015-07-15 20:24 - 00000000 ___DC C:\Program Files (x86)\Mozilla Firefox
2015-07-15 06:48 - 2015-07-03 08:18 - 17887744 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 06:48 - 2015-07-03 08:01 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 06:48 - 2015-07-03 07:31 - 12386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 06:48 - 2015-07-03 07:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 06:48 - 2015-06-17 03:52 - 02343936 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 06:47 - 2015-06-17 03:50 - 10936320 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 06:47 - 2015-06-17 03:50 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 06:47 - 2015-06-17 03:47 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 06:47 - 2015-06-17 03:47 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 02158080 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 06:47 - 2015-06-17 03:46 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-07-15 06:47 - 2015-06-17 03:46 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 06:47 - 2015-06-17 03:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 06:47 - 2015-06-17 03:45 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 06:47 - 2015-06-17 03:45 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 06:47 - 2015-06-17 03:45 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 06:47 - 2015-06-17 03:45 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-07-15 06:47 - 2015-06-17 03:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-07-15 06:47 - 2015-06-17 03:45 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-07-15 06:47 - 2015-06-17 03:14 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 06:47 - 2015-06-17 03:12 - 09750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 06:47 - 2015-06-17 03:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 06:47 - 2015-06-17 03:10 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 06:47 - 2015-06-17 03:09 - 01804288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 06:47 - 2015-06-17 03:09 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 06:47 - 2015-06-17 03:09 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 06:47 - 2015-06-17 03:09 - 00421888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00718336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 06:47 - 2015-06-17 03:08 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-07-15 06:47 - 2015-06-17 03:08 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-07-15 06:47 - 2015-06-17 03:08 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-07-27 20:19 - 2006-11-02 17:21 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 20:19 - 2006-11-02 17:21 - 00003712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 20:17 - 2008-01-21 03:53 - 01881079 _____ C:\Windows\WindowsUpdate.log
2015-07-27 20:03 - 2006-11-02 17:40 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 20:02 - 2011-03-24 22:54 - 00000012 _____ C:\Windows\bthservsdp.dat
2015-07-27 20:02 - 2006-11-02 17:40 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-27 19:02 - 2013-04-24 12:17 - 00000000 ___RD C:\Users\maik\Desktop\Nicht verwendet
2015-07-27 18:48 - 2006-11-02 17:39 - 02613262 _____ C:\Windows\PFRO.log
2015-07-23 18:59 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\tracing
2015-07-23 18:52 - 2011-03-27 16:17 - 00000791 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-23 18:51 - 2011-03-24 23:00 - 00000000 ____D C:\Users\maik
2015-07-22 20:38 - 2011-05-06 22:15 - 00000000 ____D C:\Users\maik\dwhelper
2015-07-22 20:34 - 2011-04-29 18:48 - 00000000 ____D C:\Users\maik\AppData\Roaming\Winamp
2015-07-22 17:46 - 2006-11-02 17:21 - 00256968 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-21 19:38 - 2015-06-18 18:16 - 00000000 ____D C:\Windows\system32\log
2015-07-21 19:38 - 2011-05-06 15:38 - 00000803 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-21 19:38 - 2011-03-24 23:01 - 00000903 _____ C:\Users\maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-21 19:38 - 2011-03-24 23:01 - 00000903 _____ C:\Users\maik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-20 19:20 - 2013-10-04 00:29 - 00000000 ____D C:\ProgramData\Oracle
2015-07-20 19:19 - 2014-05-17 13:06 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-20 19:19 - 2011-03-28 20:22 - 00000000 ___DC C:\Program Files (x86)\Java
2015-07-19 18:29 - 2011-04-30 01:15 - 00000000 ___RD C:\Users\maik\Desktop\MG
2015-07-19 15:01 - 2012-04-11 07:40 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-19 15:01 - 2011-05-30 10:05 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-18 09:35 - 2011-06-22 17:19 - 00002425 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-07-17 19:37 - 2008-01-21 12:47 - 01581164 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-17 19:37 - 2008-01-21 12:46 - 00679112 _____ C:\Windows\system32\perfh007.dat
2015-07-17 19:37 - 2008-01-21 12:46 - 00148790 _____ C:\Windows\system32\perfc007.dat
2015-07-15 21:45 - 2013-08-16 21:04 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 11:52 - 2014-08-06 20:14 - 00000000 ____D C:\Users\maik\AppData\Local\SimilarImages
2015-07-15 11:39 - 2012-05-04 10:16 - 00000000 ___DC C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-05 12:08 - 2011-03-27 17:37 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 08:43 - 2006-11-02 14:35 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-05-22 00:36 - 2012-10-05 19:54 - 0000680 _____ () C:\Users\maik\AppData\Local\d3d9caps.dat
2011-03-24 23:00 - 2012-03-17 03:27 - 0000732 _____ () C:\Users\maik\AppData\Local\d3d9caps64.dat
2011-04-29 17:34 - 2015-05-07 20:56 - 0052224 _____ () C:\Users\maik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-03-27 16:23 - 2011-03-27 16:27 - 0232566 _____ () C:\Users\maik\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
2011-03-27 16:23 - 2011-03-27 16:23 - 0000002 _____ () C:\Users\maik\AppData\Local\dd_dotnetfx35error.txt
2011-03-27 16:26 - 2011-03-27 16:26 - 0000002 _____ () C:\Users\maik\AppData\Local\dd_dotnetfx35error_lp.txt
2011-03-27 16:23 - 2011-03-27 16:27 - 0227416 _____ () C:\Users\maik\AppData\Local\dd_dotnetfx35install.txt
2011-03-27 16:26 - 2011-03-27 16:27 - 0075514 _____ () C:\Users\maik\AppData\Local\dd_dotnetfx35install_lp.txt
2011-03-27 16:26 - 2011-03-27 16:26 - 0615340 _____ () C:\Users\maik\AppData\Local\dd_NET_Framework35_LangPack_MSI0276.txt
2011-03-27 16:26 - 2011-03-27 16:26 - 1880090 _____ () C:\Users\maik\AppData\Local\dd_NET_Framework35_x64_MSI01CF.txt
2011-03-28 20:20 - 2011-03-28 20:21 - 0427032 _____ () C:\Users\maik\AppData\Local\dd_vcredistMSI031A.txt
2011-03-28 20:21 - 2011-03-28 20:21 - 0336310 _____ () C:\Users\maik\AppData\Local\dd_vcredistMSI0405.txt
2011-03-27 16:07 - 2011-03-27 16:08 - 0421312 _____ () C:\Users\maik\AppData\Local\dd_vcredistMSI73B7.txt
2011-03-28 20:13 - 2011-03-28 20:14 - 0426826 _____ () C:\Users\maik\AppData\Local\dd_vcredistMSI7E14.txt
2011-03-28 20:20 - 2011-03-28 20:21 - 0015952 _____ () C:\Users\maik\AppData\Local\dd_vcredistUI031A.txt
2011-03-28 20:21 - 2011-03-28 20:21 - 0015616 _____ () C:\Users\maik\AppData\Local\dd_vcredistUI0405.txt
2011-03-27 16:07 - 2011-03-27 16:08 - 0011394 _____ () C:\Users\maik\AppData\Local\dd_vcredistUI73B7.txt
2011-03-28 20:13 - 2011-03-28 20:14 - 0011610 _____ () C:\Users\maik\AppData\Local\dd_vcredistUI7E14.txt
2011-03-27 16:23 - 2011-03-27 16:27 - 0002884 _____ () C:\Users\maik\AppData\Local\uxeventlog.txt
2014-08-06 20:14 - 2014-08-06 20:14 - 0000043 _____ () C:\ProgramData\.SimImages
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\maik\avidemux_2.5.4_win32.exe
C:\Users\maik\avira_free_antivirus_de.exe
C:\Users\maik\wlsetup-web_15.4.3538.0513.exe
Einige Dateien in TEMP:
====================
C:\Users\maik\AppData\Local\Temp\Quarantine.exe
C:\Users\maik\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-07-27 20:26
==================== Ende von log ============================
--- --- ---
[CODE]Zusätzliches
FRST Logfile: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:26-07-2015
durchgeführt von maik an 2015-07-27 20:41:18
Gestartet von C:\Users\maik\Downloads
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-911582600-3694651840-913277333-500 - Administrator - Disabled)
Gast (S-1-5-21-911582600-3694651840-913277333-501 - Limited - Enabled)
maik (S-1-5-21-911582600-3694651840-913277333-1000 - Administrator - Enabled) => C:\Users\maik
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader X (10.1.15) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.15 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Amazon Amazon Music) (Version: 3.4.0.628 - Amazon Services LLC)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5) (Version: 2.5.4.6714 - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: 5.60.350.6 - Broadcom Corporation)
Cinergy HTC Stick V5.09.1202.00 (HKLM-x32\...\Cinergy HTC Stick) (Version: 5.09.1202.00 - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
FastStone Image Viewer 4.4 (HKLM-x32\...\FastStone Image Viewer) (Version: 4.4 - FastStone Soft)
HL-2240D (HKLM-x32\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.4.0 - Brother Industries, Ltd.)
HP HotKey Support (HKLM\...\{014C6C60-4916-48F7-916E-E8048E12E9F1}) (Version: 4.0.3.1 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{EF8C2735-5BDE-4D68-98F4-8AA5B79A6526}) (Version: 4.0.51.1 - Hewlett-Packard Company)
HP Webcam (HKLM-x32\...\{1D61E881-43CD-447B-9E6B-D2C6138B2862}) (Version: 1.0.25.0 - Roxio)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6275.0 - IDT)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.550 - Oracle)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Java(TM) 6 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 21.005.15.00.705 - Huawei Technologies Co.,Ltd)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Segoe UI (x32 Version: 15.4.2271.0615 - Microsoft Corp) Hidden
SimilarImages (HKLM-x32\...\SimilarImages) (Version: 2013.11 - Nils Maier)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Stellarium 0.12.0 (HKLM-x32\...\Stellarium_is1) (Version: 0.12.0 - Stellarium team)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.24.0 - Synaptics Incorporated)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.17.2 - )
ThreatFire (HKLM-x32\...\3554AA4B-9B0B-451a-A269-2B5F53982209_is1) (Version: - PC Tools)
VLC media player 1.1.8 (HKLM-x32\...\VLC media player) (Version: 1.1.8 - VideoLAN)
WD Drive Utilities (HKLM-x32\...\{72E40002-8CEC-47C1-A099-83AC8E173BF0}) (Version: 1.0.3.3 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{83270912-15C7-4336-822E-E8F1B1BBCA60}) (Version: 1.0.3.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{6FE8A1DA-8CA6-4801-BF0F-0F2FED143FF4}) (Version: 1.6.4.7 - Western Digital Technologies, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.61 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-911582600-3694651840-913277333-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
27-07-2015 18:58:49 Windows Update
27-07-2015 20:08:34 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2006-11-02 14:34 - 2006-09-18 23:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1C243238-F07A-4D71-A7F5-99EFC084656A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {51AAC278-2964-4AB0-9648-43725BEC8194} - \Start Registry Reviver No Task File <==== ATTENTION
Task: {67D77095-D8DD-4291-8255-058B78923A21} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {942E2EFE-22C8-4689-A946-93D72E50280F} - System32\Tasks\{D49ABC37-7F59-4BF9-84CA-04FBEC33714F} => pcalua.exe -a C:\temp\bakunin77\Desktop\ufsetup.exe -d C:\temp\bakunin77\Desktop
Task: {E340F11F-33FB-4BC8-8F97-17AB2306AF93} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-19] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-01-17 16:19 - 2011-03-28 20:24 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 ____C () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer trusted/restricted ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-911582600-3694651840-913277333-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\maik\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: )
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [{D23164EF-23E9-41FA-B892-AF584E25CFF6}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{14E115BC-FD72-4DE2-9732-78A4BADF0E2E}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{55B64DED-95DF-4228-93AA-FAC7FBDF7BC6}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{48CDA89E-4987-467C-BA82-387894216093}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [TCP Query User{B14442E4-B109-42B4-A96A-7CFB428F1E1F}C:\program files (x86)\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files (x86)\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [UDP Query User{1427DD1B-183A-4978-A677-91CB4B9B2FE0}C:\program files (x86)\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files (x86)\terratec\terratec home cinema\versioncheck\versioncheck.exe
FirewallRules: [{0AE00251-336C-4501-A567-ACD4EA7CE205}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{58EBDACE-0AB6-4DFF-827B-90DAECEB0D46}] => (Allow) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [TCP Query User{A2FBABFC-AED3-427E-98D4-2EDD48F27600}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{DE803FE4-4E28-4084-A08D-BB2292BB55EC}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [{E0BC3FFC-BFBA-4CAF-A93C-B7550DDEAAFF}] => (Allow) LPort=80
FirewallRules: [{438001AB-6574-47DF-9E5F-27D2ECE5F3F8}] => (Allow) LPort=80
FirewallRules: [{260E0E88-A25C-447D-A76F-5AF5AFAD9E1A}] => (Allow) LPort=80
FirewallRules: [{3EF98E74-2235-42C2-94A3-0CB3251A844C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D0A55E67-DE83-4B39-9C63-DB9DD870CBD6}] => (Allow) LPort=2869
FirewallRules: [{E9337355-6290-4214-92EE-E2C7A79A75DF}] => (Allow) LPort=1900
FirewallRules: [{CFF1BF3A-C0A3-46B4-85D1-AE7146E75D61}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{93025902-8496-46B1-983A-28BFDC33A672}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F63D4A2D-B860-4BE1-A301-57008E371A4D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{215FD078-7D93-4FEC-9E27-1794BE1945CD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FDF1146B-DA6E-498B-87D9-1342E638D52C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C106EE34-2634-45B7-B366-888A2CC95FD3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{5A7DB641-E779-4358-BC31-BCD51A6E52E2}C:\users\maik\appdata\roaming\vaqol\axdi.exe] => (Block) C:\users\maik\appdata\roaming\vaqol\axdi.exe
FirewallRules: [UDP Query User{A1EBD6B5-118C-43F9-84AE-571D52A867B7}C:\users\maik\appdata\roaming\vaqol\axdi.exe] => (Block) C:\users\maik\appdata\roaming\vaqol\axdi.exe
FirewallRules: [TCP Query User{16757D40-5922-41B9-9840-3CD2E18FFA61}C:\users\maik\appdata\roaming\yqno\pouf.exe] => (Block) C:\users\maik\appdata\roaming\yqno\pouf.exe
FirewallRules: [UDP Query User{800E2871-25F6-4B0A-B2D9-50605923D325}C:\users\maik\appdata\roaming\yqno\pouf.exe] => (Block) C:\users\maik\appdata\roaming\yqno\pouf.exe
FirewallRules: [{05C8F8FD-C481-4A3E-87EC-B9D3F89CAE17}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8526EA00-EFA9-4E6F-80BF-97CE1992AAF2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F5C06186-A8BF-4862-9A29-B317F2A42F2F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2BDAEBAD-558F-4401-8E57-1E6B53DC54B8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C3EDE11A-457B-4632-8D5D-1F037FF1C1D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A4462952-0BB2-417D-88F2-23236312C163}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{652304B8-9243-47C9-85CD-286A15635F25}] => (Allow) C:\Program Files\iTunes\iTunes.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{043778CA-A0BA-421B-A20F-885309F5923E}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: isatap.{9B16E0C8-CE6D-42BD-9B1C-37FDE99D74EF}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (07/27/2015 08:03:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 08:01:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung svchost.exe_SSDPSRV, Version 6.0.6001.18000, Zeitstempel 0x47919291, fehlerhaftes Modul ssdpsrv.dll, Version 6.0.6001.18000, Zeitstempel 0x4791ae0e, Ausnahmecode 0xc0000005, Fehleroffset 0x000000000001bb2e,
Prozess-ID 0x520, Anwendungsstartzeit svchost.exe_SSDPSRV0.
Error: (07/27/2015 07:52:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 07:49:11 PM) (Source: EventSystem) (EventID: 4621) (User: )
Description: 80070005EventSystem.EventSubscription{AA44355E-6911-4447-BA5D-6720480579AF}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (07/27/2015 06:50:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/23/2015 07:07:14 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_151129cef4086113.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_151129cef4086113.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_151129cef4086113.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen bereits aktiven Komponentenversion.
Die widersprüchlichen Komponenten sind:
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_151129cef4086113.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_5cbe60a608848a19.manifest.
Error: (07/23/2015 07:01:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/23/2015 05:45:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2015 11:32:16 PM) (Source: EventSystem) (EventID: 4621) (User: )
Description: 80070005EventSystem.EventSubscription{AA44355E-6911-4447-BA5D-6720480579AF}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (07/22/2015 08:21:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung iTunes.exe, Version 12.1.2.27, Zeitstempel 0x55236b62, fehlerhaftes Modul ole32.dll, Version 6.0.6002.19435, Zeitstempel 0x5596ad24, Ausnahmecode 0xc0000005, Fehleroffset 0x000000000002cdd5,
Prozess-ID 0x1608, Anwendungsstartzeit iTunes.exe0.
Systemfehler:
=============
Error: (07/27/2015 08:17:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Modules Installer11200001Neustart des Diensts
Error: (07/27/2015 08:17:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: iPod-Dienst1
Error: (07/27/2015 08:17:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HP Software Framework Service1
Error: (07/27/2015 08:17:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: BrYNSvc1
Error: (07/27/2015 08:17:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: WD Backup101Neustart des Diensts
Error: (07/27/2015 08:17:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Windows Live ID Sign-in Assistant1100001Neustart des Diensts
Error: (07/27/2015 08:17:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: WD Rules1
Error: (07/27/2015 08:17:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: WD Drive Manager1
Error: (07/27/2015 08:17:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: MBAMService1
Error: (07/27/2015 08:17:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: MBAMScheduler1
Microsoft Office:
=========================
Error: (07/27/2015 08:03:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 08:01:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_SSDPSRV6.0.6001.1800047919291ssdpsrv.dll6.0.6001.180004791ae0ec0000005000000000001bb2e52001d0c894dd2cd384
Error: (07/27/2015 07:52:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/27/2015 07:49:11 PM) (Source: EventSystem) (EventID: 4621) (User: )
Description: 80070005EventSystem.EventSubscription{AA44355E-6911-4447-BA5D-6720480579AF}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (07/27/2015 06:50:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/23/2015 07:07:14 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_151129cef4086113.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.19373_none_5cbe60a608848a19.manifestC:\Users\maik\Desktop\Nicht verwendet\SoftonicDownloader_fuer_stellarium.exe
Error: (07/23/2015 07:01:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/23/2015 05:45:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2015 11:32:16 PM) (Source: EventSystem) (EventID: 4621) (User: )
Description: 80070005EventSystem.EventSubscription{AA44355E-6911-4447-BA5D-6720480579AF}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (07/22/2015 08:21:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iTunes.exe12.1.2.2755236b62ole32.dll6.0.6002.194355596ad24c0000005000000000002cdd5160801d0c4ab10616f2a
CodeIntegrity Fehler:
===================================
Date: 2015-07-27 20:40:59.516
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:58.949
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:58.381
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:57.817
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:57.127
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:56.560
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:55.985
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:55.385
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:25.135
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-27 20:40:24.575
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Processor: AMD Athlon(tm) II P360 Dual-Core Processor
Percentage of memory in use: 43%
Total physical RAM: 3835.56 MB
Available physical RAM: 2156.99 MB
Total Virtual: 7903.64 MB
Available Virtual: 6043.75 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:298.09 GB) (Free:142.34 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: D2C16FE5)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)
==================== Ende von log ============================
--- --- --- |
Malwarebytes Anti-Malware 