Malware, keylogger or trojan problem

Hi siqzz,

Time for some housekeeping

Please download Delfix and save it to your desktop.

• Right-click on delfix.exe and select "Run as administrator" to run it.
• Check the following boxes then click on Run.
  
  
  • Remove disinfection tools
• All tools we used to clean your computer should be gone now.
• You can now delete any tools/logs we used if they remain on your computer.

Protection Programs
Don't forget to re-enable any protection programs we disabled during your fix.

Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
Computer Security - a short guide to staying safer online

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing!

Well there is still the problem with my windows update - it stops progressing at the first update.

Hi siqzz,

"siqzz" wrote:Well there is still the problem with my windows update - it stops progressing at the first update.

I am so sorry I overlooked this.
Here run this:

Farbar Service Scanner (FSS)
SCAN Option
Please download Farbar Service Scanner ... by Farbar and save it to your Desktop.

1. Right click on FSS.exe select "Run As Administrator" to run it. If prompted by UAC, please allow it.
2. Make sure the following options are checked:
   
   • Internet Services (checked by default)
   • Windows Firewall
   • System Restore
   • Security Center
   • Windows Update
   • Windows Defender
3. Press the "Scan" button.
   When finished, a text file named FSS.txt will be created on your desktop. (Same folder the tool is run).
4. Please copy and paste the contents of the FSS.txt log to your reply.
   Note: If you receive an AutoIt error indicating: Error: Variable must be of type "Object", please UNCHECK the "Report Windows Version Fully" option and run the scan again.

Farbar Service Scanner Version: 27-01-2016
Ran by [removed] (administrator) on 07-02-2016 at 14:23:54
Running from "C:\Users\Nutzer\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

Hi siqzz,

According to the log you posted, there appears to be no problem with the update program on your PC.
Please go to this link at Microsoft and run the combination FixIt Tool for Windows 8.1, Windows 8, and Windows 7:
Automatically reset Windows Update components

Post back with your results please.
wbg

Windows Update Herausgeberdetails

Gefundene Probleme
Service registration is missing or corruptService registration is missing or corrupt Behoben
Reset service registration Abgeschlossen

Windows Update-Fehler 0x800F081F(2016-02-08-T-02_00_48)Windows Update-Fehler 0x800F081F(2016-02-08-T-02_00_48) Behoben
Zurücksetzen von Windows Update-Datenspeicher Abgeschlossen

Probleme beim Installieren der letzten AktualisierungenProbleme beim Installieren der letzten Aktualisierungen Behoben
Windows Update reparieren Abgeschlossen

Probleme beim Installieren der letzten AktualisierungenProbleme beim Installieren der letzten Aktualisierungen Behoben
Windows Update reparieren Abgeschlossen

Überprüfte, potenzielle Probleme
Windows Update-Umgebungsvariablen sind falschWindows Update-Umgebungsvariablen sind falsch Thema nicht vorhanden
Some security settings are missing or have been changedSome security settings are missing or have been changed Thema nicht vorhanden
Check for missing or corrupt filesCheck for missing or corrupt files Thema nicht vorhanden
Windows Update-Dienste werden nicht ausgeführtWindows Update-Dienste werden nicht ausgeführt Thema nicht vorhanden
Kryptografiedienstkomponenten sind nicht registriertKryptografiedienstkomponenten sind nicht registriert Thema nicht vorhanden

Gefundene Probleme Erkennungsdetails

6 Service registration is missing or corrupt Behoben

Reset service registration Abgeschlossen


6 Windows Update-Fehler 0x800F081F(2016-02-08-T-02_00_48) Behoben

Zurücksetzen von Windows Update-Datenspeicher Abgeschlossen

DataStoreAndWULogFiles.zip
30,16MB
Dateiname: DataStoreAndWULogFiles.zip



6 Probleme beim Installieren der letzten Aktualisierungen Behoben

Windows Update reparieren Abgeschlossen

Windows Update-Dienste und -Abhängigkeiten reparieren

6 Probleme beim Installieren der letzten Aktualisierungen Behoben

Windows Update reparieren Abgeschlossen

Windows Update-Dienste und -Abhängigkeiten reparieren


Überprüfte, potenzielle Probleme Erkennungsdetails

Windows Update-Umgebungsvariablen sind falsch Thema nicht vorhanden


Some security settings are missing or have been changed Thema nicht vorhanden


Check for missing or corrupt files Thema nicht vorhanden


Windows Update-Dienste werden nicht ausgeführt Thema nicht vorhanden


Kryptografiedienstkomponenten sind nicht registriert Thema nicht vorhanden



Erkennungsdetails

Fehlerbericht
RootCause: RC_DataStore
ErrorCode: 0x800F081F
TimeDetected: 2016-02-08-T-02:00:48

Collected File
Dateiname: CheckSURLog.cab

Sammlungsinformationen
Computername: NUTZER-PC
Windows-Version: 6.1
Architektur: amd64
Zeit: Montag, 8. Februar 2016 14:00:16

Herausgeberdetails

Background Intelligent Transfer Service
Find and fix problems that may prevent background downloads from working
Paketversion: 1.2.1.20140627
Herausgeber: Microsoft Corporation
Windows Update
Finden und Beheben von Problemen mit Windows Update
Paketversion: 8.1.1.20140627
Herausgeber: Microsoft Corporation
Windows Update
Finden und Beheben von Problemen mit Windows Update
Paketversion: 8.1.1.20140627
Herausgeber: Microsoft Corporation

http://imgur.com/Vf1MqX2

Hi siqzz

According to the error number in the image you posted, the process to correct the issue lies here:
Fix Windows Update errors by using the DISM or System Update Readiness tool

• Click on the link
• Page down to this section: For Windows 7, Windows Vista, Windows Server 2008 R2 or Windows Server 2008
• Follow the 5 step process as posted by Microsoft.
  
  • The tool you need to select is second on the list of tools in Step 1 of Microsoft's instructions.
    x64-based (64-bit) versions of Windows 7 SP1 and Windows 7

NOTE: If the System Update Readiness Tool does not correct the problem, you'll need to repair Windows. Repairing Windows won't damage your personal files or the programs that are installed on your computer.

Here is the link in Deutsch to save you a step:
Beheben Sie Windows Fehler, mithilfe das Tool DISM oder System Update Readiness

Alright, it finished the download -

I want to tell you how grateful for helping me. Its very frustrating for me when I have problems with my PC and I can't fix it. And people like you are the ones who rescue me from this hell-like problem, so THANK YOU.

"siqzz" wrote: so THANK YOU.

You are very welcome.
I will understand this to mean that Windows Update worked.

Do you have any other issues?

No, everything is fixed, thank you again

"siqzz" wrote:No, everything is fixed, thank you again

You are very welcome.

Time for some housekeeping

Please download Delfix and save it to your desktop.

• Right-click on delfix.exe and select "Run as administrator" to run it.
• Check the following boxes then click on Run.
  
  
  • Remove disinfection tools
• All tools we used to clean your computer should be gone now.
• You can now delete any tools/logs we used if they remain on your computer.

Protection Programs
Don't forget to re-enable any protection programs we disabled during your fix.

Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
Computer Security - a short guide to staying safer online

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing!

One last thing - my windows configured two times, which it did not do it in the past, is that normal?

If yes, then everything is fine

Oh and the performance of my pc seems a bit slow as well

I am not entirely sure what Microsoft is putting in their Window 7 and Windows 8 updates, but I do know that several of the Updates listed under Optional and Important that are not security have to do with preparing the users machine for the installation of Windows 10. This may explain the slight slowness and the 2 re-configurations.

If there is nothing else, then I shall ask the thread to be closed as complete.