Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Pc hängt öfter

Pc hängt öfter


Plagegeister aller Art und deren Bekämpfung: Pc hängt öfter

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 5 von 10 « Erste 34 5 67 Letzte »
Alt 14.11.2013, 08:51   #61
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Das ist aber nicht FRST, sondern FSS, und bitte in Codetags posten
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.11.2013, 05:45   #62
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hallo Schrauber,
da siehst du mal wie wenig ich von dem versteh was ich da mach. Ich schick dir das gerne sobald ich weiß was das ist....erklärst du mir das bitte was du brauchst? Ich habe keine Ahnung was Codetags sind.

Gruß,mädchen

Guten Morgen Schrauber,

ich glaub mein Pc gibt den Geist auf. Gestern abend ging fast nichts mehr.Auf das Scrollen hat er nur mit langer Verzögerung oder auch gar nicht reagiert, die Kreuzchen zum Schließen von Seiten wurden nicht mehr angezeigt,das Umschalten zwischen den einzelnen Seiten dauerte ewig,dauernd keine Rückmeldung von Lunascape,keine Reaktion auf anklicken,ganz oft keinen Mausanzeiger mehr,Seiten wurden nur in Bruchstücken angezeigt,Text markieren oder eingeben unmöglich.Das Wash and Go Programm hat 71 Fenster angezeigt.Und : seltsame Geräusche aus dem Pc, ein Mittelding aus Knattern und Brummen.

Klingt nicht gut. Wollte mir schon länger das Windows Programm Fix It runterladen weil es mir die häufigsten Windows Fehler beseitigen kann, aber es tritt immer wieder ein Fehler beim Set up auf. Nun habe ich gelesen dies könne an den Proxyeinstellungen liegen, die müßten dann geändert werden. Wie macht man das ?

Lg,mädchen
__________________
Alt 15.11.2013, 18:49   #63
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
__________________
Alt 15.11.2013, 20:30   #64
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hallo Schrauber,
ja....wenn alles richtig ist.
danke für deine Mühe die du dir mit mir machst.


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by pc (administrator) on PC-PC on 15-11-2013 20:06:45
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Microsoft) C:\Program Files\WashAndGo\WashAndGo.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 20:06 - 2013-11-15 20:08 - 00008390 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:01 - 2013-11-15 20:02 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 16:04 - 2013-11-15 20:03 - 00096927 _____ C:\Windows\WindowsUpdate.log
2013-11-14 15:59 - 2013-11-14 15:59 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-14 15:59 - 2013-11-14 15:59 - 00001360 _____ C:\Windows\PFRO.log
2013-11-14 07:54 - 2013-11-14 07:54 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-12 19:11 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-15 20:04 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-10-29 09:29 - 2013-11-15 19:48 - 00000294 _____ C:\Windows\Tasks\RegistryBooster.job
2013-10-29 09:29 - 2013-11-15 19:47 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-28 10:48 - 2013-11-13 17:18 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-15 05:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-17 18:48 - 2012-01-23 06:34 - 00905216 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\system32\SaveTo.dll
2013-10-17 18:48 - 2011-11-13 18:03 - 04067736 _____ (DynaForms GmbH) C:\Windows\system32\CPDF3.dll

==================== One Month Modified Files and Folders =======

2013-11-15 20:08 - 2013-11-15 20:06 - 00008390 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:04 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-15 20:03 - 2013-11-14 16:04 - 00096927 _____ C:\Windows\WindowsUpdate.log
2013-11-15 20:02 - 2013-11-15 20:01 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-15 19:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-15 19:48 - 2013-10-29 09:29 - 00000294 _____ C:\Windows\Tasks\RegistryBooster.job
2013-11-15 19:48 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-15 19:47 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-15 19:47 - 2013-10-11 11:41 - 00000254 _____ C:\Windows\Tasks\WashAndGoNGBackground.job
2013-11-15 19:47 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-15 19:44 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 19:44 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 19:44 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 19:44 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-15 05:48 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-15 05:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-14 16:04 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-14 15:59 - 2013-11-14 15:59 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-14 15:59 - 2013-11-14 15:59 - 00001360 _____ C:\Windows\PFRO.log
2013-11-14 07:54 - 2013-11-14 07:54 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-14 07:18 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 17:18 - 2013-10-28 10:48 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:42 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-11-03 20:30 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-31 20:33 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games
2013-10-16 21:17 - 2011-04-04 20:27 - 00000000 ____D C:\Users\pc\AppData\Roaming\HpUpdate

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-15 19:52

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by pc (administrator) on PC-PC on 15-11-2013 20:06:45
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Microsoft) C:\Program Files\WashAndGo\WashAndGo.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 20:06 - 2013-11-15 20:08 - 00008390 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:01 - 2013-11-15 20:02 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 16:04 - 2013-11-15 20:03 - 00096927 _____ C:\Windows\WindowsUpdate.log
2013-11-14 15:59 - 2013-11-14 15:59 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-14 15:59 - 2013-11-14 15:59 - 00001360 _____ C:\Windows\PFRO.log
2013-11-14 07:54 - 2013-11-14 07:54 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-12 19:11 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-15 20:04 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-10-29 09:29 - 2013-11-15 19:48 - 00000294 _____ C:\Windows\Tasks\RegistryBooster.job
2013-10-29 09:29 - 2013-11-15 19:47 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-28 10:48 - 2013-11-13 17:18 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-15 05:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-17 18:48 - 2012-01-23 06:34 - 00905216 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\system32\SaveTo.dll
2013-10-17 18:48 - 2011-11-13 18:03 - 04067736 _____ (DynaForms GmbH) C:\Windows\system32\CPDF3.dll

==================== One Month Modified Files and Folders =======

2013-11-15 20:08 - 2013-11-15 20:06 - 00008390 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:04 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-15 20:03 - 2013-11-14 16:04 - 00096927 _____ C:\Windows\WindowsUpdate.log
2013-11-15 20:02 - 2013-11-15 20:01 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-15 19:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-15 19:48 - 2013-10-29 09:29 - 00000294 _____ C:\Windows\Tasks\RegistryBooster.job
2013-11-15 19:48 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-15 19:47 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-15 19:47 - 2013-10-11 11:41 - 00000254 _____ C:\Windows\Tasks\WashAndGoNGBackground.job
2013-11-15 19:47 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-15 19:44 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 19:44 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 19:44 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 19:44 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-15 05:48 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-15 05:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-14 16:04 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-14 15:59 - 2013-11-14 15:59 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-14 15:59 - 2013-11-14 15:59 - 00001360 _____ C:\Windows\PFRO.log
2013-11-14 07:54 - 2013-11-14 07:54 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-14 07:18 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 17:18 - 2013-10-28 10:48 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:42 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-11-03 20:30 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-31 20:33 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games
2013-10-16 21:17 - 2011-04-04 20:27 - 00000000 ____D C:\Users\pc\AppData\Roaming\HpUpdate

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-15 19:52

==================== End Of Log ============================
--- --- ---

--- --- ---




--- --- ---
Das andere Ding kommt gleich noch.
lg

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-11-2013
Ran by pc at 2013-11-15 20:09:22
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Emsisoft Anti-Malware (Enabled - Out of date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Out of date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0)
AbAlarm (Version: 6.2)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AIO_CDB_ProductContext (Version: 82.0.242.000)
AIO_CDB_Software (Version: 82.0.242.000)
AIO_Scan (Version: 82.0.173.000)
Atheros Client Installation Program (Version: 7.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BufferChm (Version: 82.0.173.000)
Cisco EAP-FAST Module (Version: 2.1.6)
Cisco LEAP Module (Version: 1.0.12)
Cisco PEAP Module (Version: 1.0.13)
Copy (Version: 82.0.188.000)
CustomerResearchQFolder (Version: 1.00.0000)
Destinations (Version: 82.0.173.000)
DeviceManagementQFolder (Version: 1.00.0000)
DocProc (Version: 8.1.0.0)
DocProcQFolder (Version: 1.00.0000)
Dropbox (HKCU Version: 2.0.22)
Emsisoft Anti-Malware (Version: 8.1)
ESET Online Scanner v3
eSupportQFolder (Version: 1.00.0000)
F300 (Version: 82.0.242.000)
F300_Help (Version: 82.0.242.000)
F300Trb (Version: 82.0.242.000)
Fax (Version: 82.0.188.000)
Google Earth (Version: 6.2.2.6613)
HP Customer Participation Program 8.0 (Version: 8.0)
HP Imaging Device Functions 8.0 (Version: 8.0)
HP OCR Software 8.0 (Version: 8.0)
HP Photo Creations (Version: 1.0.0.7702)
HP Photosmart Essential (Version: 1.12.0.46)
HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B (Version: 8.0)
HP Solution Center 8.0 (Version: 8.0)
HP Update (Version: 5.002.007.004)
HPProductAssistant (Version: 82.0.173.000)
HPSSupply (Version: 2.1.3.0000)
Intel(R) Graphics Media Accelerator Driver
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Lunascape6 (All Users) (Version: 6.8.9.27075)
MarketResearch (Version: 82.0.174.000)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mobile Partner (Version: 11.302.09.04.382)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyKeyFinder (Version: 2012)
Paint.NET v3.5.10 (Version: 3.60.0)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5618)
Scan (Version: 8.1.0.0)
SolutionCenter (Version: 82.0.188.000)
Status (Version: 82.0.173.000)
Toolbox (Version: 82.0.173.000)
TrayApp (Version: 82.0.188.000)
Uniblue RegistryBooster (Version: 6.1.1.3)
UnloadSupport (Version: 1.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0)
WashAndGo (Version: 17.7)
WebReg (Version: 82.0.173.000)
YouTube Song Downloader (Version: 8.2)

==================== Restore Points  =========================

13-11-2013 08:36:23 Removed Apple Software Update
13-11-2013 08:48:09 Removed Bonjour
13-11-2013 10:21:05 Removed Safari
13-11-2013 10:23:53 Removed Apple Application Support
13-11-2013 10:31:48 Removed Apple Application Support
14-11-2013 16:26:44 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AD797DB-679C-4254-BF1F-187451269FBE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\NetDrive\netdrive.exe
Task: {0B923855-EFEC-4D6E-BF2C-25DC4D5D10FF} - System32\Tasks\WebReg Deskjet F300 series => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {139DBA5E-5972-4876-81F7-3862E17F0935} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2A4342E7-3E82-45C5-A530-C547532D3E76} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - pc => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {2DE1ED62-3B3F-4610-86ED-E838057F6213} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {47CC68FF-DD27-4AC9-BD10-1206F7305F4A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {51C71A63-7357-4492-80C2-B8A4B3E96899} - System32\Tasks\AbelssoftPreloader => C:\Program Files\WashAndGo\AbelssoftPreloader.exe [2012-09-24] (Microsoft)
Task: {5DF25F26-1DD4-42AF-A7D5-8AF413AA526D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => C:\Program Files\Windows Defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {724DD079-074D-48F7-84FC-129CAE9457D2} - System32\Tasks\rbmonitor => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe [2013-08-21] (Uniblue Systems Limited)
Task: {75C473BC-8CAD-499B-8316-EFD367B24770} - System32\Tasks\WashAndGoNGBackground => C:\Program Files\WashAndGo\WashAndGo.exe [2012-09-24] (Microsoft)
Task: {793C7D04-E0F7-41B2-9376-BCB3BC77411B} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {8CFE559A-52BC-433E-B3B9-E2296815C970} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-27] (Adobe Systems Incorporated)
Task: {99982336-9432-499D-A415-B1D0E9EE6E6A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\System32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {A7F9AF08-9C24-4D9D-A77B-6C6A29823CB3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {CC5A7CB0-4962-4392-8465-2DA2116D2672} - System32\Tasks\RegistryBooster => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe [2013-08-21] (Uniblue Systems Limited)
Task: {DC45E898-AF81-4A07-ABC9-73FCDB16504C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\MessageCheck.exe [2011-03-02] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\AbelssoftPreloader.job => C:\Program Files\WashAndGo\AbelssoftPreloader.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\MessageCheck.exe
Task: C:\Windows\Tasks\rbmonitor.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
Task: C:\Windows\Tasks\RegistryBooster.job => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe
Task: C:\Windows\Tasks\WashAndGoNGBackground.job => C:\Program Files\WashAndGo\WashAndGo.exe
Task: C:\Windows\Tasks\WebReg Deskjet F300 series.job => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe

==================== Loaded Modules (whitelisted) =============

2011-06-27 15:24 - 2007-08-23 15:39 - 00014848 _____ () C:\Program Files\Mobile Partner\isaputrace.dll
2011-06-27 15:24 - 2009-12-10 10:51 - 00114688 _____ () C:\Program Files\Mobile Partner\DeviceMgrPlugin.dll
2011-06-27 15:24 - 2009-09-19 10:21 - 00139264 _____ () C:\Program Files\Mobile Partner\NetInfoPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:48 - 00090112 _____ () C:\Program Files\Mobile Partner\DialUpPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:54 - 00057344 _____ () C:\Program Files\Mobile Partner\ConfigFilePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:40 - 00991232 _____ () C:\Program Files\Mobile Partner\NDISAPI.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00155648 _____ () C:\Program Files\Mobile Partner\DetectDev.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00557056 _____ () C:\Program Files\Mobile Partner\atcomm.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\XCodec.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\DeviceOperate.dll
2011-06-27 15:24 - 2009-06-18 09:56 - 00032768 _____ () C:\Program Files\Mobile Partner\NotifyServicePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:52 - 00192512 _____ () C:\Program Files\Mobile Partner\DeviceMgrUIPlugin.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00143360 _____ () C:\Program Files\Mobile Partner\LocaleMgrPlugin.dll
2011-06-27 15:24 - 2007-07-31 14:50 - 00090112 _____ () C:\Program Files\Mobile Partner\FileManager.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00159744 _____ () C:\Program Files\Mobile Partner\SMSPlugin.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00201640 _____ () C:\Program Files\Java\jre7\bin\jp2iexp.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00016808 _____ () C:\Program Files\Java\jre7\bin\jp2native.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können vom Windows-Suchdienst nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann vom Windows-Suchdienst nicht geöffnet werden.


Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT) (User: )
Description: Windows (2112) Windows: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.


System errors:
=============
Error: (11/15/2013 07:48:14 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq

Error: (11/15/2013 05:15:53 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq


Microsoft Office Sessions:
=========================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)
Search.TripoliIndexer

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)
Search.JetPropStore

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT)(User: )
Description: Windows2112Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log-1811 (0xfffff8ed)


CodeIntegrity Errors:
===================================
  Date: 2012-10-20 17:13:05.162
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:04.538
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.259
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.635
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.011
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:01.324
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.700
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.061
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:12:59.437
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 2038.64 MB
Available physical RAM: 997.35 MB
Total Pagefile: 4326.32 MB
Available Pagefile: 2293.53 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.21 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:63.48 GB) (Free:33.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Mobile Partner) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive e: (Data) (Fixed) (Total:387.63 GB) (Free:359 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 9AC9B968)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=63 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=388 GB) - (Type=07 NTFS)

==================== End Of Log ============================Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-11-2013
Ran by pc at 2013-11-15 20:09:22
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Emsisoft Anti-Malware (Enabled - Out of date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Out of date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0)
AbAlarm (Version: 6.2)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AIO_CDB_ProductContext (Version: 82.0.242.000)
AIO_CDB_Software (Version: 82.0.242.000)
AIO_Scan (Version: 82.0.173.000)
Atheros Client Installation Program (Version: 7.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BufferChm (Version: 82.0.173.000)
Cisco EAP-FAST Module (Version: 2.1.6)
Cisco LEAP Module (Version: 1.0.12)
Cisco PEAP Module (Version: 1.0.13)
Copy (Version: 82.0.188.000)
CustomerResearchQFolder (Version: 1.00.0000)
Destinations (Version: 82.0.173.000)
DeviceManagementQFolder (Version: 1.00.0000)
DocProc (Version: 8.1.0.0)
DocProcQFolder (Version: 1.00.0000)
Dropbox (HKCU Version: 2.0.22)
Emsisoft Anti-Malware (Version: 8.1)
ESET Online Scanner v3
eSupportQFolder (Version: 1.00.0000)
F300 (Version: 82.0.242.000)
F300_Help (Version: 82.0.242.000)
F300Trb (Version: 82.0.242.000)
Fax (Version: 82.0.188.000)
Google Earth (Version: 6.2.2.6613)
HP Customer Participation Program 8.0 (Version: 8.0)
HP Imaging Device Functions 8.0 (Version: 8.0)
HP OCR Software 8.0 (Version: 8.0)
HP Photo Creations (Version: 1.0.0.7702)
HP Photosmart Essential (Version: 1.12.0.46)
HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B (Version: 8.0)
HP Solution Center 8.0 (Version: 8.0)
HP Update (Version: 5.002.007.004)
HPProductAssistant (Version: 82.0.173.000)
HPSSupply (Version: 2.1.3.0000)
Intel(R) Graphics Media Accelerator Driver
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Lunascape6 (All Users) (Version: 6.8.9.27075)
MarketResearch (Version: 82.0.174.000)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mobile Partner (Version: 11.302.09.04.382)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyKeyFinder (Version: 2012)
Paint.NET v3.5.10 (Version: 3.60.0)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5618)
Scan (Version: 8.1.0.0)
SolutionCenter (Version: 82.0.188.000)
Status (Version: 82.0.173.000)
Toolbox (Version: 82.0.173.000)
TrayApp (Version: 82.0.188.000)
Uniblue RegistryBooster (Version: 6.1.1.3)
UnloadSupport (Version: 1.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0)
WashAndGo (Version: 17.7)
WebReg (Version: 82.0.173.000)
YouTube Song Downloader (Version: 8.2)

==================== Restore Points  =========================

13-11-2013 08:36:23 Removed Apple Software Update
13-11-2013 08:48:09 Removed Bonjour
13-11-2013 10:21:05 Removed Safari
13-11-2013 10:23:53 Removed Apple Application Support
13-11-2013 10:31:48 Removed Apple Application Support
14-11-2013 16:26:44 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AD797DB-679C-4254-BF1F-187451269FBE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\NetDrive\netdrive.exe
Task: {0B923855-EFEC-4D6E-BF2C-25DC4D5D10FF} - System32\Tasks\WebReg Deskjet F300 series => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {139DBA5E-5972-4876-81F7-3862E17F0935} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2A4342E7-3E82-45C5-A530-C547532D3E76} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - pc => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {2DE1ED62-3B3F-4610-86ED-E838057F6213} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {47CC68FF-DD27-4AC9-BD10-1206F7305F4A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {51C71A63-7357-4492-80C2-B8A4B3E96899} - System32\Tasks\AbelssoftPreloader => C:\Program Files\WashAndGo\AbelssoftPreloader.exe [2012-09-24] (Microsoft)
Task: {5DF25F26-1DD4-42AF-A7D5-8AF413AA526D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => C:\Program Files\Windows Defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {724DD079-074D-48F7-84FC-129CAE9457D2} - System32\Tasks\rbmonitor => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe [2013-08-21] (Uniblue Systems Limited)
Task: {75C473BC-8CAD-499B-8316-EFD367B24770} - System32\Tasks\WashAndGoNGBackground => C:\Program Files\WashAndGo\WashAndGo.exe [2012-09-24] (Microsoft)
Task: {793C7D04-E0F7-41B2-9376-BCB3BC77411B} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {8CFE559A-52BC-433E-B3B9-E2296815C970} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-27] (Adobe Systems Incorporated)
Task: {99982336-9432-499D-A415-B1D0E9EE6E6A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\System32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {A7F9AF08-9C24-4D9D-A77B-6C6A29823CB3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {CC5A7CB0-4962-4392-8465-2DA2116D2672} - System32\Tasks\RegistryBooster => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe [2013-08-21] (Uniblue Systems Limited)
Task: {DC45E898-AF81-4A07-ABC9-73FCDB16504C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\MessageCheck.exe [2011-03-02] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\AbelssoftPreloader.job => C:\Program Files\WashAndGo\AbelssoftPreloader.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\MessageCheck.exe
Task: C:\Windows\Tasks\rbmonitor.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
Task: C:\Windows\Tasks\RegistryBooster.job => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe
Task: C:\Windows\Tasks\WashAndGoNGBackground.job => C:\Program Files\WashAndGo\WashAndGo.exe
Task: C:\Windows\Tasks\WebReg Deskjet F300 series.job => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe

==================== Loaded Modules (whitelisted) =============

2011-06-27 15:24 - 2007-08-23 15:39 - 00014848 _____ () C:\Program Files\Mobile Partner\isaputrace.dll
2011-06-27 15:24 - 2009-12-10 10:51 - 00114688 _____ () C:\Program Files\Mobile Partner\DeviceMgrPlugin.dll
2011-06-27 15:24 - 2009-09-19 10:21 - 00139264 _____ () C:\Program Files\Mobile Partner\NetInfoPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:48 - 00090112 _____ () C:\Program Files\Mobile Partner\DialUpPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:54 - 00057344 _____ () C:\Program Files\Mobile Partner\ConfigFilePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:40 - 00991232 _____ () C:\Program Files\Mobile Partner\NDISAPI.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00155648 _____ () C:\Program Files\Mobile Partner\DetectDev.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00557056 _____ () C:\Program Files\Mobile Partner\atcomm.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\XCodec.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\DeviceOperate.dll
2011-06-27 15:24 - 2009-06-18 09:56 - 00032768 _____ () C:\Program Files\Mobile Partner\NotifyServicePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:52 - 00192512 _____ () C:\Program Files\Mobile Partner\DeviceMgrUIPlugin.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00143360 _____ () C:\Program Files\Mobile Partner\LocaleMgrPlugin.dll
2011-06-27 15:24 - 2007-07-31 14:50 - 00090112 _____ () C:\Program Files\Mobile Partner\FileManager.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00159744 _____ () C:\Program Files\Mobile Partner\SMSPlugin.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00201640 _____ () C:\Program Files\Java\jre7\bin\jp2iexp.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00016808 _____ () C:\Program Files\Java\jre7\bin\jp2native.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können vom Windows-Suchdienst nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann vom Windows-Suchdienst nicht geöffnet werden.


Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT) (User: )
Description: Windows (2112) Windows: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.


System errors:
=============
Error: (11/15/2013 07:48:14 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq

Error: (11/15/2013 05:15:53 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq


Microsoft Office Sessions:
=========================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)
Search.TripoliIndexer

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)
Search.JetPropStore

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT)(User: )
Description: Windows2112Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log-1811 (0xfffff8ed)


CodeIntegrity Errors:
===================================
  Date: 2012-10-20 17:13:05.162
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:04.538
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.259
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.635
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.011
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:01.324
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.700
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.061
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:12:59.437
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 2038.64 MB
Available physical RAM: 997.35 MB
Total Pagefile: 4326.32 MB
Available Pagefile: 2293.53 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.21 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:63.48 GB) (Free:33.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Mobile Partner) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive e: (Data) (Fixed) (Total:387.63 GB) (Free:359 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 9AC9B968)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=63 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=388 GB) - (Type=07 NTFS)

==================== End Of Log ============================Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-11-2013
Ran by pc at 2013-11-15 20:09:22
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Emsisoft Anti-Malware (Enabled - Out of date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Out of date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0)
AbAlarm (Version: 6.2)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AIO_CDB_ProductContext (Version: 82.0.242.000)
AIO_CDB_Software (Version: 82.0.242.000)
AIO_Scan (Version: 82.0.173.000)
Atheros Client Installation Program (Version: 7.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BufferChm (Version: 82.0.173.000)
Cisco EAP-FAST Module (Version: 2.1.6)
Cisco LEAP Module (Version: 1.0.12)
Cisco PEAP Module (Version: 1.0.13)
Copy (Version: 82.0.188.000)
CustomerResearchQFolder (Version: 1.00.0000)
Destinations (Version: 82.0.173.000)
DeviceManagementQFolder (Version: 1.00.0000)
DocProc (Version: 8.1.0.0)
DocProcQFolder (Version: 1.00.0000)
Dropbox (HKCU Version: 2.0.22)
Emsisoft Anti-Malware (Version: 8.1)
ESET Online Scanner v3
eSupportQFolder (Version: 1.00.0000)
F300 (Version: 82.0.242.000)
F300_Help (Version: 82.0.242.000)
F300Trb (Version: 82.0.242.000)
Fax (Version: 82.0.188.000)
Google Earth (Version: 6.2.2.6613)
HP Customer Participation Program 8.0 (Version: 8.0)
HP Imaging Device Functions 8.0 (Version: 8.0)
HP OCR Software 8.0 (Version: 8.0)
HP Photo Creations (Version: 1.0.0.7702)
HP Photosmart Essential (Version: 1.12.0.46)
HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B (Version: 8.0)
HP Solution Center 8.0 (Version: 8.0)
HP Update (Version: 5.002.007.004)
HPProductAssistant (Version: 82.0.173.000)
HPSSupply (Version: 2.1.3.0000)
Intel(R) Graphics Media Accelerator Driver
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Lunascape6 (All Users) (Version: 6.8.9.27075)
MarketResearch (Version: 82.0.174.000)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mobile Partner (Version: 11.302.09.04.382)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyKeyFinder (Version: 2012)
Paint.NET v3.5.10 (Version: 3.60.0)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5618)
Scan (Version: 8.1.0.0)
SolutionCenter (Version: 82.0.188.000)
Status (Version: 82.0.173.000)
Toolbox (Version: 82.0.173.000)
TrayApp (Version: 82.0.188.000)
Uniblue RegistryBooster (Version: 6.1.1.3)
UnloadSupport (Version: 1.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0)
WashAndGo (Version: 17.7)
WebReg (Version: 82.0.173.000)
YouTube Song Downloader (Version: 8.2)

==================== Restore Points  =========================

13-11-2013 08:36:23 Removed Apple Software Update
13-11-2013 08:48:09 Removed Bonjour
13-11-2013 10:21:05 Removed Safari
13-11-2013 10:23:53 Removed Apple Application Support
13-11-2013 10:31:48 Removed Apple Application Support
14-11-2013 16:26:44 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AD797DB-679C-4254-BF1F-187451269FBE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\NetDrive\netdrive.exe
Task: {0B923855-EFEC-4D6E-BF2C-25DC4D5D10FF} - System32\Tasks\WebReg Deskjet F300 series => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {139DBA5E-5972-4876-81F7-3862E17F0935} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2A4342E7-3E82-45C5-A530-C547532D3E76} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - pc => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {2DE1ED62-3B3F-4610-86ED-E838057F6213} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {47CC68FF-DD27-4AC9-BD10-1206F7305F4A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {51C71A63-7357-4492-80C2-B8A4B3E96899} - System32\Tasks\AbelssoftPreloader => C:\Program Files\WashAndGo\AbelssoftPreloader.exe [2012-09-24] (Microsoft)
Task: {5DF25F26-1DD4-42AF-A7D5-8AF413AA526D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => C:\Program Files\Windows Defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {724DD079-074D-48F7-84FC-129CAE9457D2} - System32\Tasks\rbmonitor => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe [2013-08-21] (Uniblue Systems Limited)
Task: {75C473BC-8CAD-499B-8316-EFD367B24770} - System32\Tasks\WashAndGoNGBackground => C:\Program Files\WashAndGo\WashAndGo.exe [2012-09-24] (Microsoft)
Task: {793C7D04-E0F7-41B2-9376-BCB3BC77411B} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {8CFE559A-52BC-433E-B3B9-E2296815C970} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-27] (Adobe Systems Incorporated)
Task: {99982336-9432-499D-A415-B1D0E9EE6E6A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\System32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {A7F9AF08-9C24-4D9D-A77B-6C6A29823CB3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {CC5A7CB0-4962-4392-8465-2DA2116D2672} - System32\Tasks\RegistryBooster => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe [2013-08-21] (Uniblue Systems Limited)
Task: {DC45E898-AF81-4A07-ABC9-73FCDB16504C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\MessageCheck.exe [2011-03-02] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\AbelssoftPreloader.job => C:\Program Files\WashAndGo\AbelssoftPreloader.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\MessageCheck.exe
Task: C:\Windows\Tasks\rbmonitor.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
Task: C:\Windows\Tasks\RegistryBooster.job => C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe
Task: C:\Windows\Tasks\WashAndGoNGBackground.job => C:\Program Files\WashAndGo\WashAndGo.exe
Task: C:\Windows\Tasks\WebReg Deskjet F300 series.job => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe

==================== Loaded Modules (whitelisted) =============

2011-06-27 15:24 - 2007-08-23 15:39 - 00014848 _____ () C:\Program Files\Mobile Partner\isaputrace.dll
2011-06-27 15:24 - 2009-12-10 10:51 - 00114688 _____ () C:\Program Files\Mobile Partner\DeviceMgrPlugin.dll
2011-06-27 15:24 - 2009-09-19 10:21 - 00139264 _____ () C:\Program Files\Mobile Partner\NetInfoPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:48 - 00090112 _____ () C:\Program Files\Mobile Partner\DialUpPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:54 - 00057344 _____ () C:\Program Files\Mobile Partner\ConfigFilePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:40 - 00991232 _____ () C:\Program Files\Mobile Partner\NDISAPI.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00155648 _____ () C:\Program Files\Mobile Partner\DetectDev.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00557056 _____ () C:\Program Files\Mobile Partner\atcomm.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\XCodec.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\DeviceOperate.dll
2011-06-27 15:24 - 2009-06-18 09:56 - 00032768 _____ () C:\Program Files\Mobile Partner\NotifyServicePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:52 - 00192512 _____ () C:\Program Files\Mobile Partner\DeviceMgrUIPlugin.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00143360 _____ () C:\Program Files\Mobile Partner\LocaleMgrPlugin.dll
2011-06-27 15:24 - 2007-07-31 14:50 - 00090112 _____ () C:\Program Files\Mobile Partner\FileManager.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00159744 _____ () C:\Program Files\Mobile Partner\SMSPlugin.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00201640 _____ () C:\Program Files\Java\jre7\bin\jp2iexp.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00016808 _____ () C:\Program Files\Java\jre7\bin\jp2native.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können vom Windows-Suchdienst nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service) (User: )
Description: Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann vom Windows-Suchdienst nicht geöffnet werden.


Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT) (User: )
Description: Windows (2112) Windows: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.


System errors:
=============
Error: (11/15/2013 07:48:14 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 07:45:40 PM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq

Error: (11/15/2013 05:15:53 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/15/2013 05:12:31 AM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq


Microsoft Office Sessions:
=========================
Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:06 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)
Search.TripoliIndexer

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)
Search.JetPropStore

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/14/2013 04:00:05 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/14/2013 04:00:04 PM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/14/2013 04:00:04 PM) (Source: ESENT)(User: )
Description: Windows2112Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log-1811 (0xfffff8ed)


CodeIntegrity Errors:
===================================
  Date: 2012-10-20 17:13:05.162
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:04.538
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:03.259
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.635
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:02.011
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:01.324
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.700
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:13:00.061
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-20 17:12:59.437
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 2038.64 MB
Available physical RAM: 997.35 MB
Total Pagefile: 4326.32 MB
Available Pagefile: 2293.53 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.21 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:63.48 GB) (Free:33.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Mobile Partner) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive e: (Data) (Fixed) (Total:387.63 GB) (Free:359 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 9AC9B968)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=63 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=388 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Alt 16.11.2013, 15:32   #65
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.11.2013, 21:58   #66
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by pc on 16.11.2013 at 20:31:58,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\web assistant



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\registrybooster.job



~~~ Folders

Successfully deleted: [Folder] "C:\Users\pc\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Program Files\bearshare applications"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.11.2013 at 20:58:00,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by pc on 16.11.2013 at 20:31:58,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\web assistant



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\registrybooster.job



~~~ Folders

Successfully deleted: [Folder] "C:\Users\pc\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Program Files\bearshare applications"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.11.2013 at 20:58:00,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by pc on 16.11.2013 at 20:31:58,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1085966804-1864869585-2381995735-1000\Software\web assistant



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\registrybooster.job



~~~ Folders

Successfully deleted: [Folder] "C:\Users\pc\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Program Files\bearshare applications"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.11.2013 at 20:58:00,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v2.005 - Datei am 16/11/2013 um 20:26:48 erstellt
# Aktualisiert am 14/10/2012 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : pc - PC-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\pc\Desktop\diverse\programme u dergl\trojaner board\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

*************************

AdwCleaner[R1].txt - [24977 octets] - [18/10/2012 18:46:52]
AdwCleaner[S1].txt - [24145 octets] - [18/10/2012 18:57:40]
AdwCleaner[R2].txt - [970 octets] - [16/11/2013 20:26:02]
AdwCleaner[R3].txt - [902 octets] - [16/11/2013 20:26:48]

########## EOF - C:\AdwCleaner[R3].txt - [961 octets] ##########
--- --- ---
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v2.005 - Datei am 16/11/2013 um 20:26:48 erstellt
# Aktualisiert am 14/10/2012 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : pc - PC-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\pc\Desktop\diverse\programme u dergl\trojaner board\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

*************************

AdwCleaner[R1].txt - [24977 octets] - [18/10/2012 18:46:52]
AdwCleaner[S1].txt - [24145 octets] - [18/10/2012 18:57:40]
AdwCleaner[R2].txt - [970 octets] - [16/11/2013 20:26:02]
AdwCleaner[R3].txt - [902 octets] - [16/11/2013 20:26:48]

########## EOF - C:\AdwCleaner[R3].txt - [961 octets] ##########
--- --- ---
AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v2.005 - Datei am 16/11/2013 um 20:26:48 erstellt
# Aktualisiert am 14/10/2012 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : pc - PC-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\pc\Desktop\diverse\programme u dergl\trojaner board\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

*************************

AdwCleaner[R1].txt - [24977 octets] - [18/10/2012 18:46:52]
AdwCleaner[S1].txt - [24145 octets] - [18/10/2012 18:57:40]
AdwCleaner[R2].txt - [970 octets] - [16/11/2013 20:26:02]
AdwCleaner[R3].txt - [902 octets] - [16/11/2013 20:26:48]

########## EOF - C:\AdwCleaner[R3].txt - [961 octets] ##########
--- --- ---
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.16.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
pc :: PC-PC [Administrator]

16.11.2013 18:32:37
mbam-log-2013-11-16 (18-32-37).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 305646
Laufzeit: 1 Stunde(n), 22 Minute(n), 

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 46
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\mgcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\mgcommunication.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\mgsimcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mghooking.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\ContentPackagesActivationHandler.exe.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgAdaptersProxy.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgArchive.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgcommunication.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgconfig.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgFlashPlayer.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgICQAuto.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgICQMessengerAdapter.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mglogger.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgMediaPlayer.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgMsnAuto.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgMsnMessengerAdapter.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgsimcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgSweetIM.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgUpdateSupport.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgYahooAuto.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\mgYahooMessengerAdapter.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\SweetIM.exe.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mghooking.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mglogger.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll.vir (PUP.Optional.SweetPacks) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\mgHelperGCFB.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\mgHelperGCFB.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.0.0.1_0\mgHelperGC.dll.vir (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\1350f2.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\1350f8.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\1350fe.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3CKKLBE\WSSetup[4].exe (PUP.Optional.InstallBrain.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by pc (administrator) on PC-PC on 16-11-2013 21:46:08
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-16 18:24 - 2013-11-16 18:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:31 - 2013-11-16 20:23 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 12:26 - 2013-11-16 20:01 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:09 - 2013-11-15 20:11 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:06 - 2013-11-16 21:46 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:01 - 2013-11-15 20:02 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-16 20:19 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-10-29 09:29 - 2013-11-16 20:35 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-28 10:48 - 2013-11-13 17:18 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-16 21:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-17 18:48 - 2012-01-23 06:34 - 00905216 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\system32\SaveTo.dll
2013-10-17 18:48 - 2011-11-13 18:03 - 04067736 _____ (DynaForms GmbH) C:\Windows\system32\CPDF3.dll

==================== One Month Modified Files and Folders =======

2013-11-16 21:47 - 2013-11-15 20:06 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-16 21:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:51 - 2013-11-16 12:31 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 20:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-16 20:35 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:22 - 2013-10-11 11:41 - 00000254 _____ C:\Windows\Tasks\WashAndGoNGBackground.job
2013-11-16 20:19 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-16 20:17 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-16 20:17 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-16 20:17 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-16 20:15 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 20:01 - 2013-11-16 12:26 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:25 - 2013-11-16 18:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:11 - 2013-11-15 20:09 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:02 - 2013-11-15 20:01 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-14 07:18 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 17:18 - 2013-10-28 10:48 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:42 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-11-03 20:30 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-31 20:33 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

Some content of TEMP:
====================
C:\Users\pc\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-16 20:24

==================== End Of Log ============================
--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by pc (administrator) on PC-PC on 16-11-2013 21:46:08
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-16 18:24 - 2013-11-16 18:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:31 - 2013-11-16 20:23 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 12:26 - 2013-11-16 20:01 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:09 - 2013-11-15 20:11 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:06 - 2013-11-16 21:46 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:01 - 2013-11-15 20:02 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-16 20:19 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-10-29 09:29 - 2013-11-16 20:35 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-28 10:48 - 2013-11-13 17:18 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-16 21:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-17 18:48 - 2012-01-23 06:34 - 00905216 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\system32\SaveTo.dll
2013-10-17 18:48 - 2011-11-13 18:03 - 04067736 _____ (DynaForms GmbH) C:\Windows\system32\CPDF3.dll

==================== One Month Modified Files and Folders =======

2013-11-16 21:47 - 2013-11-15 20:06 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-16 21:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:51 - 2013-11-16 12:31 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 20:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-16 20:35 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:22 - 2013-10-11 11:41 - 00000254 _____ C:\Windows\Tasks\WashAndGoNGBackground.job
2013-11-16 20:19 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-16 20:17 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-16 20:17 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-16 20:17 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-16 20:15 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 20:01 - 2013-11-16 12:26 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:25 - 2013-11-16 18:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:11 - 2013-11-15 20:09 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:02 - 2013-11-15 20:01 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-14 07:18 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 17:18 - 2013-10-28 10:48 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:42 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-11-03 20:30 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-31 20:33 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

Some content of TEMP:
====================
C:\Users\pc\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-16 20:24

==================== End Of Log ============================
--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by pc (administrator) on PC-PC on 16-11-2013 21:46:08
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-16 18:24 - 2013-11-16 18:25 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:31 - 2013-11-16 20:23 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 12:26 - 2013-11-16 20:01 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:09 - 2013-11-15 20:11 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:06 - 2013-11-16 21:46 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:01 - 2013-11-15 20:02 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-16 20:19 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-10-29 09:29 - 2013-11-16 20:35 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-28 10:48 - 2013-11-13 17:18 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-16 21:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-17 18:48 - 2012-01-23 06:34 - 00905216 _____ (ActMask hxxp://www.all2pdf.com) C:\Windows\system32\SaveTo.dll
2013-10-17 18:48 - 2011-11-13 18:03 - 04067736 _____ (DynaForms GmbH) C:\Windows\system32\CPDF3.dll

==================== One Month Modified Files and Folders =======

2013-11-16 21:47 - 2013-11-15 20:06 - 00008659 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-16 21:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-16 20:58 - 2013-11-16 20:58 - 00001327 _____ C:\Users\pc\Desktop\JRT.txt
2013-11-16 20:51 - 2013-11-16 12:31 - 00026607 _____ C:\Windows\WindowsUpdate.log
2013-11-16 20:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-16 20:35 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:30 - 2013-11-16 20:30 - 01034531 _____ (Thisisu) C:\Users\pc\Desktop\JRT.exe
2013-11-16 20:27 - 2013-11-16 20:27 - 00001029 _____ C:\Users\pc\Desktop\AdwCleaner[R3].txt
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:22 - 2013-10-11 11:41 - 00000254 _____ C:\Windows\Tasks\WashAndGoNGBackground.job
2013-11-16 20:19 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-16 20:17 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-16 20:17 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-16 20:17 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-16 20:17 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-16 20:15 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 20:01 - 2013-11-16 12:26 - 00016010 _____ C:\Windows\PFRO.log
2013-11-16 18:32 - 2013-11-16 18:32 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 18:27 - 2013-11-16 18:27 - 00000876 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:25 - 2013-11-16 18:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\pc\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-16 12:26 - 2013-11-16 12:26 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 20:11 - 2013-11-15 20:09 - 00022034 _____ C:\Users\pc\Desktop\Addition.txt
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-15 20:02 - 2013-11-15 20:01 - 01090529 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-14 07:18 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 17:18 - 2013-10-28 10:48 - 00000000 ____D C:\Users\pc\Desktop\Neuer Ordner
2013-11-13 11:55 - 2013-11-13 11:55 - 00002397 _____ C:\Users\pc\Desktop\FSS.txt
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:06 - 2013-11-11 04:06 - 00000858 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:42 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 07:22 - 2013-11-06 07:22 - 00001638 _____ C:\Users\pc\Desktop\AbAlarm.lnk
2013-11-03 20:30 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-31 20:33 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:21 - 2013-10-27 19:21 - 00001862 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

Some content of TEMP:
====================
C:\Users\pc\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-16 20:24

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 17.11.2013, 07:37   #67
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 17.11.2013, 18:29   #68
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Guten Abend Schrauber,


ich habe Eset log txt nicht finden können,macht aber nix denke ich weil Eset nichts festgestellt hat.


Results of screen317's Security Check version 0.99.76
Windows Vista Service Pack 2 x86 (UAC is enabled)
Internet Explorer 9
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Emsisoft Anti-Malware
Avira Desktop
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````

Das ist ja echt viel Arbeit einen PC zu säubern,Mann on Mann.
Schönen Abend noch!

mädchen
Malwarebytes Anti-Malware Version 1.75.0.1300
Java 7 Update 45
Adobe Reader 10.1.8 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
Emsisoft Anti-Malware a2service.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
Emsisoft Anti-Malware a2guard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````





FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2013 02
Ran by pc (administrator) on PC-PC on 17-11-2013 18:20:18
Running from C:\Users\pc\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-17 18:20 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:08 - 2013-11-17 18:10 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 14:44 - 2013-11-17 14:45 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 11:31 - 2013-11-17 14:36 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 08:25 - 2013-11-17 18:17 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 22:44 - 2013-11-17 18:18 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:05 - 2013-11-17 17:22 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-10-29 09:29 - 2013-11-17 14:13 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-17 17:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-20 23:55 - 2013-11-16 23:52 - 00000000 ____D C:\Users\pc\Desktop\lookin back

==================== One Month Modified Files and Folders =======

2013-11-17 18:21 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:18 - 2013-11-16 22:44 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-17 18:17 - 2013-11-17 08:25 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:10 - 2013-11-17 18:08 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 17:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-17 17:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-17 17:22 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-17 14:45 - 2013-11-17 14:44 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 14:39 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 14:36 - 2013-11-17 11:31 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 14:14 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-17 14:13 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-17 14:13 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-17 14:12 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-17 14:12 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-17 12:04 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:48 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 23:52 - 2013-10-20 23:55 - 00000000 ____D C:\Users\pc\Desktop\lookin back
2013-11-16 22:26 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-16 22:24 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-17 14:20

==================== End Of Log ============================
--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2013 02
Ran by pc (administrator) on PC-PC on 17-11-2013 18:20:18
Running from C:\Users\pc\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-17 18:20 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:08 - 2013-11-17 18:10 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 14:44 - 2013-11-17 14:45 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 11:31 - 2013-11-17 14:36 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 08:25 - 2013-11-17 18:17 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 22:44 - 2013-11-17 18:18 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:05 - 2013-11-17 17:22 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-10-29 09:29 - 2013-11-17 14:13 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-17 17:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-20 23:55 - 2013-11-16 23:52 - 00000000 ____D C:\Users\pc\Desktop\lookin back

==================== One Month Modified Files and Folders =======

2013-11-17 18:21 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:18 - 2013-11-16 22:44 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-17 18:17 - 2013-11-17 08:25 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:10 - 2013-11-17 18:08 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 17:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-17 17:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-17 17:22 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-17 14:45 - 2013-11-17 14:44 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 14:39 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 14:36 - 2013-11-17 11:31 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 14:14 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-17 14:13 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-17 14:13 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-17 14:12 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-17 14:12 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-17 12:04 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:48 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 23:52 - 2013-10-20 23:55 - 00000000 ____D C:\Users\pc\Desktop\lookin back
2013-11-16 22:26 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-16 22:24 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-17 14:20

==================== End Of Log ============================
--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2013 02
Ran by pc (administrator) on PC-PC on 17-11-2013 18:20:18
Running from C:\Users\pc\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-17 18:20 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:08 - 2013-11-17 18:10 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 14:44 - 2013-11-17 14:45 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 11:31 - 2013-11-17 14:36 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 08:25 - 2013-11-17 18:17 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 22:44 - 2013-11-17 18:18 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:05 - 2013-11-17 17:22 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-10-29 09:29 - 2013-11-17 14:13 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-17 17:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-20 23:55 - 2013-11-16 23:52 - 00000000 ____D C:\Users\pc\Desktop\lookin back

==================== One Month Modified Files and Folders =======

2013-11-17 18:21 - 2013-11-17 18:20 - 00009062 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 18:19 - 2013-11-17 18:19 - 01090935 _____ (Farbar) C:\Users\pc\Downloads\FRST.exe
2013-11-17 18:18 - 2013-11-16 22:44 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-17 18:17 - 2013-11-17 08:25 - 00019176 _____ C:\Windows\WindowsUpdate.log
2013-11-17 18:16 - 2013-11-17 18:16 - 00001085 _____ C:\Users\pc\Desktop\checkup.txt
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:12 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-17 18:10 - 2013-11-17 18:08 - 00891184 _____ C:\Users\pc\Desktop\SecurityCheck.exe
2013-11-17 17:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-17 17:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-17 17:22 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-17 14:45 - 2013-11-17 14:44 - 02347384 _____ (ESET) C:\Users\pc\Desktop\esetsmartinstaller_enu.exe
2013-11-17 14:39 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 14:36 - 2013-11-17 11:31 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 14:14 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-17 14:13 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-17 14:13 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-17 14:12 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-17 14:12 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-17 12:04 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:48 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 23:52 - 2013-10-20 23:55 - 00000000 ____D C:\Users\pc\Desktop\lookin back
2013-11-16 22:26 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-16 22:24 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:37 - 2013-11-12 21:37 - 00000000 ____D C:\Program Files\ESET
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-17 14:20

==================== End Of Log ============================
--- --- ---

--- --- ---

Alt 18.11.2013, 10:07   #69
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.11.2013, 10:41   #70
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hi Schrauber,

halt! Bitte noch nicht löschen,ich habe nach wie vor Probleme mit dem PC. Einzelne Desktopsymbole sind nach jedem Start verschoben,oder die Icons verändert,statt des Symboles ein Blatt Papier.Text eingeben ist öfter schwierig,Cursor setzen geht manchmal nicht,manchmal kein Mausanzeiger.Darstellung mehrerer Seiten auf einmal in Bruchstücken.Verzögerte Reaktion auf anklicken.Doppelklick funktioniert öfter gar nicht.Programme hängen fest und reagieren mit Glück ein paar Minuten später.
Schluchz, you tube Videos kann ich immer noch nicht sehen.Text markieren funtioniert manchmal,manchmal aber auch nicht.Ständige Nerverei: Dieses Programm kann die Webseite nicht anzeigen.Mit jedem Start wird der Drucker automatisch neu installiert.Das Umschalten zwischen den Seiten dauert ewig,der reagiert oft gar nicht auf das anklicken.Beim eingeben von Text nimmt er oft nur die Hälfte der Buchstaben an.

Ich werde das alles beherzigen was du mir an Tipps gegeben hast.Vielen Dank .
Wenn ich mir mal wieder was einfangen sollte,kann ich dann diese ganze Anleitung einmal abarbeiten? Oder ist das je nachdem welche Störungen vorliegen auch mal anders?

LG,mädchen

Alt 18.11.2013, 14:52   #71
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Deswegen stelle ich nach jeder Anweisung die Frage "Noch Probleme"

Und diese Frage hast Du sauber ignoriert

Poste nochmal frische FRST Logs bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 19.11.2013, 15:55   #72
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hallo Schrauber,
ich hab das nicht ignoriert sondern vergessen zu beantworten.Ich vergesse immer etwas....
Von deiner letzten Anweisung habe ich jetzt noch nichts gemacht. Hier die FRST Dinger
FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-11-2013
Ran by pc (administrator) on PC-PC on 19-11-2013 13:56:07
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\update.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\updrgui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-19 13:51 - 2013-11-19 13:56 - 00009218 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-19 13:39 - 2013-11-19 13:39 - 01090881 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-17 18:20 - 2013-11-17 18:22 - 00022634 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 11:31 - 2013-11-17 14:36 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 08:25 - 2013-11-19 13:50 - 00058125 _____ C:\Windows\WindowsUpdate.log
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 22:44 - 2013-11-18 10:15 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:05 - 2013-11-19 13:51 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-10-29 09:29 - 2013-11-19 13:30 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-18 10:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-20 23:55 - 2013-11-16 23:52 - 00000000 ____D C:\Users\pc\Desktop\lookin back

==================== One Month Modified Files and Folders =======

2013-11-19 13:56 - 2013-11-19 13:51 - 00009218 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-19 13:51 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-19 13:50 - 2013-11-17 08:25 - 00058125 _____ C:\Windows\WindowsUpdate.log
2013-11-19 13:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-19 13:39 - 2013-11-19 13:39 - 01090881 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-19 13:30 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-19 13:30 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-19 13:30 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-19 13:30 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-19 13:30 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-19 13:30 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-19 13:29 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-18 10:52 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-18 10:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-18 10:15 - 2013-11-16 22:44 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-17 18:22 - 2013-11-17 18:20 - 00022634 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 14:39 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 14:36 - 2013-11-17 11:31 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:48 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 23:52 - 2013-10-20 23:55 - 00000000 ____D C:\Users\pc\Desktop\lookin back
2013-11-16 22:26 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-16 22:24 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-19 13:38

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-11-2013
Ran by pc (administrator) on PC-PC on 19-11-2013 13:56:07
Running from C:\Users\pc\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\DatacardService\DCService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Emsisoft GmbH) C:\Program Files\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\update.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\updrgui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Lunascape Corporation) C:\Program Files\Lunascape\Lunascape6\Luna.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-07] (Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] - C:\Windows\System32\PrintDisp.exe [830464 2012-05-30] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [emsisoft anti-malware] - C:\Program Files\Emsisoft Anti-Malware\a2guard.exe [4329408 2013-09-30] (Emsisoft GmbH)
HKCU\...\Run: [Mobile Partner] - C:\Program Files\Mobile Partner\Mobile Partner.exe [114688 2009-05-25] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {288575EA-507B-42CB-97BE-ACED08F1998A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AVB3DF&pc=AVBR
SearchScopes: HKCU - {7C788BE1-99B0-40CD-B58C-788705E205E2} URL = hxxp://www.bing.com/search?q={searchTerms}&amp;amp;amp;form=MSITDF&amp;amp;amp;pc=MAMI&amp;amp;amp;src=IE-SearchBox
SearchScopes: HKCU - {B7B664DF-3AF9-4C8E-8148-F42BB7831D27} URL = hxxp://www.ask.com/web?o=15710&l=dis&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{71B5F900-DE2A-46C9-B7E6-710EF36AF2A5}: [NameServer]132.252.3.10,132.252.1.7

========================== Services (Whitelisted) =================

R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [4153784 2013-09-30] (Emsisoft GmbH)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-05-08] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [77824 2012-01-20] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
S2 vToolbarUpdater13.0.0; 

==================== Drivers (Whitelisted) ====================

R3 a2acc; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys [57944 2013-08-24] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files\Emsisoft Anti-Malware\a2ddax86.sys [22056 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys [38248 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files\Emsisoft Anti-Malware\a2util32.sys [14432 2013-03-28] (Emsisoft GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-10-07] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-07-29] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 cleanhlp; C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys [50200 2013-08-19] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; No ImagePath
S3 IpInIp; No ImagePath
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-19 13:51 - 2013-11-19 13:56 - 00009218 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-19 13:39 - 2013-11-19 13:39 - 01090881 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-17 18:20 - 2013-11-17 18:22 - 00022634 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 11:31 - 2013-11-17 14:36 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 08:25 - 2013-11-19 13:50 - 00058125 _____ C:\Windows\WindowsUpdate.log
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 22:44 - 2013-11-18 10:15 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:26 - 2013-11-16 20:27 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 18:26 - 2013-11-16 18:27 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-16 18:26 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 17:42 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 17:42 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 17:42 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 17:42 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 17:42 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 17:42 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 17:42 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 17:42 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 17:42 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 17:42 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 17:42 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 17:42 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 17:42 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 17:42 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 16:15 - 2013-10-11 03:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 16:15 - 2013-10-11 03:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 16:15 - 2013-10-11 01:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-14 16:15 - 2013-10-03 13:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 16:15 - 2013-10-03 13:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-12 19:05 - 2013-11-16 20:14 - 00000000 ____D C:\AdwCleaner
2013-11-12 17:03 - 2013-11-12 17:04 - 00586560 _____ C:\EamClean.log
2013-11-11 04:05 - 2013-11-19 13:51 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-06 18:02 - 2013-11-12 14:17 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-06 18:02 - 2013-11-11 09:42 - 00000000 ____D C:\ProgramData\Skype
2013-10-29 09:29 - 2013-11-19 13:30 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-29 04:57 - 2013-11-12 19:37 - 00000000 ____D C:\Program Files\OXXOGames
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 17:06 - 2013-11-18 10:24 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:30 - 2013-10-27 12:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-24 09:44 - 2013-10-30 09:35 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-20 23:55 - 2013-11-16 23:52 - 00000000 ____D C:\Users\pc\Desktop\lookin back

==================== One Month Modified Files and Folders =======

2013-11-19 13:56 - 2013-11-19 13:51 - 00009218 _____ C:\Users\pc\Desktop\FRST.txt
2013-11-19 13:51 - 2013-11-11 04:05 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-19 13:50 - 2013-11-17 08:25 - 00058125 _____ C:\Windows\WindowsUpdate.log
2013-11-19 13:50 - 2012-06-07 22:26 - 00000332 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-11-19 13:39 - 2013-11-19 13:39 - 01090881 _____ (Farbar) C:\Users\pc\Desktop\FRST.exe
2013-11-19 13:30 - 2013-10-29 09:29 - 00000326 _____ C:\Windows\Tasks\rbmonitor.job
2013-11-19 13:30 - 2012-09-01 19:03 - 00000260 _____ C:\Windows\Tasks\AbelssoftPreloader.job
2013-11-19 13:30 - 2012-08-17 10:27 - 00000270 _____ C:\Windows\Tasks\CheckDriveBackgroundGuard.job
2013-11-19 13:30 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-19 13:30 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-19 13:30 - 2006-11-02 13:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-11-19 13:29 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-18 10:52 - 2006-11-02 14:01 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-18 10:24 - 2013-10-27 17:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-18 10:15 - 2013-11-16 22:44 - 00000000 ____D C:\Users\pc\Desktop\trojaner
2013-11-17 18:22 - 2013-11-17 18:20 - 00022634 _____ C:\Users\pc\Downloads\FRST.txt
2013-11-17 14:39 - 2006-11-02 11:33 - 01559288 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 14:36 - 2013-11-17 11:31 - 00005632 _____ C:\Users\pc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-17 12:02 - 2013-11-17 12:02 - 00001610 _____ C:\Users\pc\Desktop\Snipping Tool.lnk
2013-11-17 11:48 - 2011-02-05 09:46 - 00000000 ____D C:\Users\pc\Desktop\diverse
2013-11-17 11:37 - 2013-11-17 11:37 - 00060640 _____ C:\Users\pc\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00276144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-17 08:21 - 2013-11-17 08:21 - 00000812 _____ C:\Windows\PFRO.log
2013-11-16 23:52 - 2013-10-20 23:55 - 00000000 ____D C:\Users\pc\Desktop\lookin back
2013-11-16 22:26 - 2010-10-15 17:12 - 00000000 ____D C:\Users\pc
2013-11-16 22:24 - 2011-05-07 02:25 - 00000000 ___RD C:\Users\pc\Dropbox
2013-11-16 20:31 - 2013-11-16 20:31 - 00000000 ____D C:\Windows\ERUNT
2013-11-16 20:27 - 2013-11-16 20:26 - 00001029 _____ C:\AdwCleaner[R3].txt
2013-11-16 20:26 - 2013-11-16 20:26 - 00000970 _____ C:\AdwCleaner[R2].txt
2013-11-16 20:14 - 2013-11-12 19:05 - 00000000 ____D C:\AdwCleaner
2013-11-16 20:09 - 2006-11-02 11:23 - 00000179 _____ C:\Windows\win.ini
2013-11-16 18:27 - 2013-11-16 18:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-15 20:04 - 2013-11-15 20:04 - 00000000 ____D C:\FRST
2013-11-14 18:08 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 17:48 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-14 17:33 - 2013-10-11 10:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 17:28 - 2006-11-02 11:24 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Users\pc\AppData\Local\Google
2013-11-13 09:46 - 2011-02-25 14:47 - 00000000 ____D C:\Program Files\Google
2013-11-12 21:20 - 2011-02-25 15:30 - 00000000 ____D C:\Users\pc\AppData\Local\Adobe
2013-11-12 19:37 - 2013-10-29 04:57 - 00000000 ____D C:\Program Files\OXXOGames
2013-11-12 19:11 - 2012-07-11 09:56 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-12 19:10 - 2011-09-16 13:45 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-12 17:04 - 2013-11-12 17:03 - 00586560 _____ C:\EamClean.log
2013-11-12 14:17 - 2013-11-06 18:02 - 00000000 ____D C:\Users\pc\AppData\Roaming\Skype
2013-11-11 09:42 - 2013-11-06 18:02 - 00000000 ____D C:\ProgramData\Skype
2013-11-11 04:05 - 2013-11-11 04:05 - 00000000 ____D C:\Users\pc\Documents\Anti-Malware
2013-11-09 17:44 - 2011-05-07 02:20 - 00000000 ____D C:\Users\pc\AppData\Roaming\Dropbox
2013-11-09 17:35 - 2013-11-09 17:35 - 103387443 _____ C:\Windows\system32\섶㋨–
2013-11-02 08:14 - 2011-10-29 19:03 - 00000000 ____D C:\Windows\CleverPrint
2013-11-02 08:12 - 2011-07-08 16:12 - 00000000 ____D C:\Program Files\MailXXL.com Tools
2013-11-02 08:11 - 2011-07-08 10:51 - 01095982 _____ C:\ndsvc.log
2013-11-02 08:07 - 2012-08-16 09:16 - 00000000 ____D C:\Program Files\Panda Security
2013-10-30 09:35 - 2013-10-24 09:44 - 00000000 ____D C:\Users\pc\Documents\Meine Scans
2013-10-29 04:59 - 2013-10-29 04:59 - 00000000 ____D C:\Users\pc\AppData\Roaming\NevoSoft Games
2013-10-28 23:09 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-10-27 19:20 - 2013-10-27 19:20 - 00000000 ____D C:\Program Files\Adobe
2013-10-27 19:20 - 2011-06-29 19:12 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-27 19:20 - 2011-02-25 14:50 - 00000000 ____D C:\ProgramData\Adobe
2013-10-27 17:06 - 2013-10-27 17:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-27 17:06 - 2013-10-27 17:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\ProgramData\Oracle
2013-10-27 12:30 - 2013-10-27 12:30 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-27 12:29 - 2013-10-27 12:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-27 12:29 - 2013-10-27 12:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-27 12:29 - 2011-07-02 15:35 - 00000000 ____D C:\Program Files\Java
2013-10-25 20:25 - 2012-07-22 08:55 - 00000000 ____D C:\Users\pc\AppData\Local\Paint.NET
2013-10-24 20:04 - 2011-05-07 02:21 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-22 19:41 - 2013-10-22 19:41 - 00000212 _____ C:\Users\pc\Desktop\drucker.lnk
2013-10-21 00:01 - 2011-05-07 02:25 - 00000920 _____ C:\Users\pc\Desktop\Dropbox.lnk
2013-10-20 23:22 - 2010-10-19 02:53 - 00000000 ____D C:\Users\pc\AppData\Local\Microsoft Games

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-19 13:38

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-11-2013
Ran by pc at 2013-11-19 13:57:48
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Emsisoft Anti-Malware (Enabled - Out of date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Out of date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0)
AbAlarm (Version: 6.2)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8)
AIO_CDB_ProductContext (Version: 82.0.242.000)
AIO_CDB_Software (Version: 82.0.242.000)
AIO_Scan (Version: 82.0.173.000)
Atheros Client Installation Program (Version: 7.0)
Avira Free Antivirus (Version: 13.0.0.4052)
BufferChm (Version: 82.0.173.000)
Copy (Version: 82.0.188.000)
CustomerResearchQFolder (Version: 1.00.0000)
Destinations (Version: 82.0.173.000)
DeviceManagementQFolder (Version: 1.00.0000)
DocProc (Version: 8.1.0.0)
DocProcQFolder (Version: 1.00.0000)
Dropbox (HKCU Version: 2.0.22)
Emsisoft Anti-Malware (Version: 8.1)
eSupportQFolder (Version: 1.00.0000)
F300 (Version: 82.0.242.000)
F300_Help (Version: 82.0.242.000)
F300Trb (Version: 82.0.242.000)
Fax (Version: 82.0.188.000)
Google Earth (Version: 6.2.2.6613)
HP Customer Participation Program 8.0 (Version: 8.0)
HP Imaging Device Functions 8.0 (Version: 8.0)
HP OCR Software 8.0 (Version: 8.0)
HP Photo Creations (Version: 1.0.0.7702)
HP Photosmart Essential (Version: 1.12.0.46)
HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B (Version: 8.0)
HP Solution Center 8.0 (Version: 8.0)
HP Update (Version: 5.002.007.004)
HPProductAssistant (Version: 82.0.173.000)
HPSSupply (Version: 2.1.3.0000)
Intel(R) Graphics Media Accelerator Driver
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Lunascape6 (All Users) (Version: 6.8.9.27075)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MarketResearch (Version: 82.0.174.000)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mobile Partner (Version: 11.302.09.04.382)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MyKeyFinder (Version: 2012)
Paint.NET v3.5.10 (Version: 3.60.0)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5618)
Scan (Version: 8.1.0.0)
SolutionCenter (Version: 82.0.188.000)
Status (Version: 82.0.173.000)
Toolbox (Version: 82.0.173.000)
TrayApp (Version: 82.0.188.000)
Uniblue RegistryBooster (Version: 6.1.1.3)
UnloadSupport (Version: 1.00.0000)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0)
WashAndGo (Version: 17.7)
WebReg (Version: 82.0.173.000)
YouTube Song Downloader (Version: 8.2)

==================== Restore Points  =========================

13-11-2013 08:48:09 Removed Bonjour
13-11-2013 10:21:05 Removed Safari
13-11-2013 10:23:53 Removed Apple Application Support
13-11-2013 10:31:48 Removed Apple Application Support
14-11-2013 16:26:44 Windows Update
17-11-2013 13:20:18 Removed Cisco EAP-FAST Module
17-11-2013 13:21:31 Removed Cisco LEAP Module
17-11-2013 13:22:09 Removed Cisco PEAP Module
19-11-2013 12:39:01 Windows Update

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AD797DB-679C-4254-BF1F-187451269FBE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\NetDrive\netdrive.exe
Task: {0B923855-EFEC-4D6E-BF2C-25DC4D5D10FF} - System32\Tasks\WebReg Deskjet F300 series => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {139DBA5E-5972-4876-81F7-3862E17F0935} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2A4342E7-3E82-45C5-A530-C547532D3E76} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - pc => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {2DE1ED62-3B3F-4610-86ED-E838057F6213} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {47CC68FF-DD27-4AC9-BD10-1206F7305F4A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {51C71A63-7357-4492-80C2-B8A4B3E96899} - System32\Tasks\AbelssoftPreloader => C:\Program Files\WashAndGo\AbelssoftPreloader.exe [2012-09-24] (Microsoft)
Task: {724DD079-074D-48F7-84FC-129CAE9457D2} - System32\Tasks\rbmonitor => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe [2013-08-21] (Uniblue Systems Limited)
Task: {793C7D04-E0F7-41B2-9376-BCB3BC77411B} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {8CFE559A-52BC-433E-B3B9-E2296815C970} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-27] (Adobe Systems Incorporated)
Task: {99982336-9432-499D-A415-B1D0E9EE6E6A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [2006-12-10] (Hewlett-Packard Co.)
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\Windows\System32\pla.dll [2008-01-21] (Microsoft Corporation)
Task: {A7F9AF08-9C24-4D9D-A77B-6C6A29823CB3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {DAF2E711-606C-4F65-B3F5-7E91ED398167} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => C:\Program Files\Windows Defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {DC45E898-AF81-4A07-ABC9-73FCDB16504C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\MessageCheck.exe [2011-03-02] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\AbelssoftPreloader.job => C:\Program Files\WashAndGo\AbelssoftPreloader.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\MessageCheck.exe
Task: C:\Windows\Tasks\rbmonitor.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
Task: C:\Windows\Tasks\WebReg Deskjet F300 series.job => C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe

==================== Loaded Modules (whitelisted) =============

2013-10-11 12:15 - 2013-07-31 20:54 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2011-06-27 15:24 - 2007-08-23 15:39 - 00014848 _____ () C:\Program Files\Mobile Partner\isaputrace.dll
2011-06-27 15:24 - 2009-12-10 10:51 - 00114688 _____ () C:\Program Files\Mobile Partner\DeviceMgrPlugin.dll
2011-06-27 15:24 - 2009-09-19 10:21 - 00139264 _____ () C:\Program Files\Mobile Partner\NetInfoPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:48 - 00090112 _____ () C:\Program Files\Mobile Partner\DialUpPlugin.dll
2011-06-27 15:24 - 2009-06-18 09:54 - 00057344 _____ () C:\Program Files\Mobile Partner\ConfigFilePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:40 - 00991232 _____ () C:\Program Files\Mobile Partner\NDISAPI.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00155648 _____ () C:\Program Files\Mobile Partner\DetectDev.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00557056 _____ () C:\Program Files\Mobile Partner\atcomm.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\XCodec.dll
2011-06-27 15:24 - 2009-05-23 10:02 - 00061440 _____ () C:\Program Files\Mobile Partner\DeviceOperate.dll
2011-06-27 15:24 - 2009-06-18 09:56 - 00032768 _____ () C:\Program Files\Mobile Partner\NotifyServicePlugin.dll
2011-06-27 15:24 - 2009-12-10 10:52 - 00192512 _____ () C:\Program Files\Mobile Partner\DeviceMgrUIPlugin.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00143360 _____ () C:\Program Files\Mobile Partner\LocaleMgrPlugin.dll
2011-06-27 15:24 - 2007-07-31 14:50 - 00090112 _____ () C:\Program Files\Mobile Partner\FileManager.dll
2011-06-27 15:24 - 2009-06-19 14:10 - 00159744 _____ () C:\Program Files\Mobile Partner\SMSPlugin.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00201640 _____ () C:\Program Files\Java\jre7\bin\jp2iexp.dll
2013-10-27 12:29 - 2013-10-27 12:29 - 00016808 _____ () C:\Program Files\Java\jre7\bin\jp2native.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können vom Windows-Suchdienst nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service) (User: )
Description: Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service) (User: )
Description: Der Jet-Eigenschaftenspeicher kann vom Windows-Suchdienst nicht geöffnet werden.


Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/17/2013 08:21:59 AM) (Source: ESENT) (User: )
Description: Windows (2264) Windows: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.


System errors:
=============
Error: (11/19/2013 01:33:24 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/19/2013 01:30:58 PM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/19/2013 01:30:58 PM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058

Error: (11/19/2013 01:30:58 PM) (Source: Service Control Manager) (User: )
Description: Net.Pipe-Listeneradapterwas

Error: (11/19/2013 01:30:58 PM) (Source: Service Control Manager) (User: )
Description: Net.Msmq-Listeneradaptermsmq

Error: (11/18/2013 10:51:47 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 10.40.181.185 mit dem Computer mit der
Netzwerkhardwareadresse 02-50-F3-00-00-00 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (11/18/2013 10:51:47 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 10.40.181.185 für die Netzwerkkarte mit der Netzwerkadresse 001E101FAA49 wurde durch den DHCP-Server 10.32.203.37 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (11/18/2013 10:11:34 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (11/18/2013 10:09:38 AM) (Source: Service Control Manager) (User: )
Description: vToolbarUpdater13.0.0%%3

Error: (11/18/2013 10:09:38 AM) (Source: Service Control Manager) (User: )
Description: Net.Tcp-ListeneradapterNet.Tcp-Portfreigabedienst%%1058


Microsoft Office Sessions:
=========================
Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:01 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.   (0x80070490)
Search.TripoliIndexer

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)
Search.JetPropStore

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	0x%08x (0xc0041800 - Der Inhaltsindex kann nicht gelesen werden.  )

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Die Inhaltsindex-Metadaten können nicht gelesen werden.   (0xc0041801)

Error: (11/17/2013 08:22:00 AM) (Source: Windows Search Service)(User: )
Description: 
Details:
	Der Inhaltsindex kann nicht gelesen werden.   (0xc0041800)

Error: (11/17/2013 08:21:59 AM) (Source: ESENT)(User: )
Description: Windows2264Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log-1811 (0xfffff8ed)


CodeIntegrity Errors:
===================================
  Date: 2013-11-16 19:42:13.862
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:42:12.565
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:42:11.355
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:42:10.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:42:08.808
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:42:07.537
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:41:59.462
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:41:58.202
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:41:56.953
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-11-16 19:41:55.763
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 2038.64 MB
Available physical RAM: 986.19 MB
Total Pagefile: 4332.32 MB
Available Pagefile: 2340.07 MB
Total Virtual: 2047.88 MB
Available Virtual: 1923.02 MB

==================== Drives ================================

Drive c: (OS_Install) (Fixed) (Total:63.48 GB) (Free:32.49 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Mobile Partner) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive e: (Data) (Fixed) (Total:387.63 GB) (Free:359 GB) NTFS
Drive i: (Lexar) (Removable) (Total:7.46 GB) (Free:5.79 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 9AC9B968)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=63 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=388 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7 GB) - (Type=0C)

==================== End Of Log ============================

LG
mädchen

Siehste, schon wieder was vergessen,zum x-ten Mal.
Ich habe sehr oft eine Netzwerkfehlermeldung dass ein anderer Computer die gleiche IP Adresse hat wie ich und dass es deshlab einen Konflikt gibt. Ist das wichtig?

Alt 20.11.2013, 10:00   #73
schrauber
/// the machine
/// TB-Ausbilder
 
Pc hängt öfter - Standard

Pc hängt öfter


Hast du den mehrere rechner im Netz? LAN und WLAN gemischt?

Downloade dir bitte Windows Repair (All In One) von hier.
  • Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
  • Klicke auf Step 2 und drücke unter Check Disk auf Do It.

  • Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

  • Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

  • Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
  • Hake Restart System when Finished an.
  • Drücke Start.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.11.2013, 15:53   #74
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hallo Schrauber, Tschuldigung, hat etwas gedauert. Ich mach das heute Abend.Windows Repair hatte ich schon mal installiert ( bin ich selber drauf gekommen... ) habe es dann aber nicht benutzt weil ich Englisch nicht mehr so gut kann und dann Bedenken hatte ob ich das auch richtig mache,ne? Kürzlich deinstalliert,aber was solls,mache ich es eben noch mal.
Habe schon wieder ein neues Problem,vielleicht habe ich Mist gemacht,weiß nicht.
In PC Zeitungen gelesen dass unter den kostenlosen Virenprogrammen Zone Alarm und Comodo die Besten sein sollen.Also weg mit Avira, weil hat ja den Trace file media pipe durchgelassen und Comodo installiert.Ja, und danach ging dann nichts mehr.Ich konnte klicken wie auch immer ich wollte,nichts hat sich mehr gerührt. Ausgemacht am Knopf nach einem halben Stündchen. Im abgesicherten Modus gestartet und das neue Virenprogramm gestartet und dann ging wieder nichts mehr.Hatte ne Meldung es wäre ein Fehler im Setup der nicht zu beheben ist.Also Comodo wieder deinstalliert. Diese Setup Fehlermeldungen habe ich häufiger,liegt das an meinem PC? Jetzt kann ich zwar wieder was machen am PC , aber ich habe oft Datei kann nicht geöffnet werden,das Programm reagiert nicht.
Stöhn.
Ich habe nur einen PC und den nutze ich mit einem Stick von Tchi*o.
Ich versuche dann heute abend mein Glück.

LG
mädchen

Alt 22.11.2013, 23:56   #75
mädchen
 
Pc hängt öfter - Standard

Pc hängt öfter


Hi,
war leider nicht wie erwartet.Ich musste mehrmals irgendwelche Dateien extrahieren,hat sich bißchen schwierig gestaltet das Programm zu starten.Was mir da gemeldet wurde habe ich nicht verstanden.
Ich habe ne andere Version von Windows Repair als du, den Advance Modus gab es nicht, dafür mehr Kästchen zum Haken machen......ich hab mal den Rest mit angehakt.
Es wurden Fehler gefunden und behoben,aber nicht alle.Weil Dateien nicht geöffnet werden konnten,Pfade nicht gefunden wurden und was weiß ich was es da noch an Schwierigkeiten gab.Handles die ungültig waren (?) und skipped registry keys (?). Hätt mich auch gewundert wenn mal was klappt.Ich bin zig-mal gefragt worden ob ich die Datei ausführen will,ob das alles so richtig ist?
Nun kann ich etwas besser scrollen,der Balken rechts funktioniert besser, You tube Videos laufen deutlich besser,bleiben aber trotzdem manchmal stehen.Ansonsten kann ich keine wesentlichen Verbesserungen feststellen.Nach dem Start muckt die Kiste sofort wie bisher und das Meistgesehene ist die Eieruhr und der Grauschleier weil wieder das Programm nicht reagiert.Neuerdings trennt sich die Internetverbindung auch von selbst.
Der Drucker wird zwar jetzt beim Start nicht neu installiert,aber drucken will er nicht.

LG
mädchen
Miniaturansicht angehängter Grafiken
-tweaking.jpg   -repairs.jpg   -kaestchen.jpg   -tweaking-step-4.jpg  

Antwort
Seite 5 von 10 « Erste 34 5 67 Letzte »

Themen zu Pc hängt öfter
avira, beim starten, bild, bitdefender, ccleaner, defender, geld, google, hängt, klicke, langsam, link, lösung, online, pc hängt, problem, probleme, programme, registry, registry booster, scan, starten, suche, tune up, öffnet


« ungewollter Mailanhang *cdjbdbj.png | Srptm nicht gefunden fenster öffnet sich alle 2-3sek »


Ähnliche Themen: Pc hängt öfter


  1. Almco Singlun und Automatische Updates öfter ausgeschaltet
    Log-Analyse und Auswertung - 16.09.2015 (54)
  2. Windows 7 64 Zahnrad taucht öfter in Taskleiste auf
    Plagegeister aller Art und deren Bekämpfung - 29.12.2014 (16)
  3. Bluescreen erscheint immer öfter
    Alles rund um Windows - 15.12.2013 (11)
  4. Windows 7: Öfter Systemabsturz, Quelle: EventLog ID: 6008
    Alles rund um Windows - 13.12.2012 (30)
  5. PC langsam und hängt / Desktop verändert / öfter Bluescreens / vermutlich TR/Kazy.19785.2
    Log-Analyse und Auswertung - 03.05.2011 (34)
  6. PC hängt öfter und Programme stürzen ab!
    Log-Analyse und Auswertung - 18.02.2011 (14)
  7. Kritische Lücken bleiben immer öfter ungepatcht
    Nachrichten - 26.08.2010 (0)
  8. PC öffnet langsam und hängt sich öfter auf
    Log-Analyse und Auswertung - 06.04.2010 (6)
  9. Rechner Stürzt beim Hochfahren öfter ab
    Log-Analyse und Auswertung - 07.04.2009 (5)
  10. unfreiwillige Reconnects immer öfter
    Log-Analyse und Auswertung - 17.03.2009 (0)
  11. Rechner öfter mit 100% CPU-Last
    Log-Analyse und Auswertung - 05.03.2009 (0)
  12. PC friert immer öfter ein
    Mülltonne - 11.02.2009 (1)
  13. PC bleibt öfter hängen
    Log-Analyse und Auswertung - 23.11.2008 (1)
  14. Rechner Stürzt beim Hochfahren öfter ab
    Mülltonne - 11.11.2008 (0)
  15. ie explorer startet öfter nicht....
    Mülltonne - 17.08.2008 (0)
  16. Task-Leiste schmiert öfter ab!
    Plagegeister aller Art und deren Bekämpfung - 13.07.2007 (3)
  17. AntiVir schlägt immer öfter Alarm - Trojaner?
    Log-Analyse und Auswertung - 29.04.2006 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Pc hängt öfter - Das ist aber nicht FRST, sondern FSS, und bitte in Codetags posten - Pc hängt öfter...
Archiv
Du betrachtest: Pc hängt öfter auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55