Hallo Leute,
Ich habe seit ein paar Tagen Probleme mit meinen Windows PC Windows 7 SP1 64 Bit.
Firefox öffnet in unregelmäßigen Abständen Tabs mit der Überschrift ADS und verweist auf die Homepage u7.eu . Diese Seite hab ich nie besucht. Seidher braucht der IE 10 als auch Firefox umheimlich lange zum laden von standartseite wie ebay. Gestern während des surfens ging plötzlich gar nichts mehr. Ein Programm keine anung welches hat die Internetverbindung geändert auf Proxy.Diesen benötige ich nicht. Außerdem machen sich manche Programme wie Windows Life-mail selbstständig. Öffnen schließen Tabs wechseln etc. Zu guter letzt stürzt seid dem die Explorer.exe bei Dateizugriffen ab.daraufhin hab ich Bitdefender Onlinscan durchgeführt Ohne beanstandung dann hab ich antivir durchlaufen lassen aber kein Ergebniss zuguter letzt hab ich Spybot durchlaugen lassen. Der findet auch immer was und beseitigt das Problem. Nach dem nächsten scann aber wieder das gleiche. Hab mich nun hier geregt. und hab mich erstmal an die Anleitung gehalten hier also die 3 Text Files.



Danke für eure Hilfe
Gruss cyborg111

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Scan.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hab ich erledigt.

Anbei die gewollten TXT.

MFG
cyborg111

Hi,

Logs bitte in Codetags in den Thread posten.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Ok danke für den Hinweis

ich werde es mal probieren also die gewünschten Codes sind


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-06-2013 
Ran by Siergbert (administrator) on 15-06-2013 17:42:51
Running from C:\Users\Siergbert\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
() C:\Windows\SysWOW64\PSIService.exe
(COMPANYVERS_NAME) C:\PROGRA~2\RADIOR~2\bar\1.bin\4jbarsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(VIA Technologies, Inc.) C:\VIA_XHCI\usb3Monitor.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\NetBak\NetBak.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbrmon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDPictureViewer.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Cmaudio] C:\Windows\Syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfg.cpl,CMICtrlWnd [3928064 2010-03-27] (C-Media Corporation)
HKLM\...\Run: [Launch LgDeviceAgent] "C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe" [415816 2010-02-18] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2093128 2010-02-18] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE [4271688 2010-02-18] (Logitech Inc.)
HKLM\...\Run: [PrintDisp] C:\Windows\system32\PrintDisp.exe [864768 2009-06-22] (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [10038304 2010-01-29] (Realtek Semiconductor)
HKLM\...\Run: [IntelliType Pro] "C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe" [1464944 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [IntelliPoint] "C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2076272 2012-11-02] (Microsoft Corporation)
HKLM\...\Run: [VIAxHCUtl] C:\VIA_XHCI\usb3Monitor.exe [331776 2012-03-26] (VIA Technologies, Inc.)
HKLM\...\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
HKCU\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKCU\...\Run: [Google Update] "C:\Users\Siergbert\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2010-04-13] (Google Inc.)
HKCU\...\Run: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean [3642312 2013-05-16] (Safer-Networking Ltd.)
MountPoints2: {c300eb46-a245-11e2-8854-001109e45a82} - G:\Autorun.exe
MountPoints2: {d40ea114-5048-11df-b7b7-001109e45a82} - N:\LaunchU3.exe -a
HKLM-x32\...\Run: [VMware hqtray] "C:\Program Files (x86)\VMware\VMware Player\hqtray.exe" [64048 2010-01-22] (VMware, Inc.)
HKLM-x32\...\Run: [QNAP_NASNetBak] C:\Program Files (x86)\QNAP\NetBak\NetBak.exe /min [720896 2010-04-14] (QNAP Systems, Inc.)
HKLM-x32\...\Run: []  [x]
HKLM-x32\...\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" [1644680 2013-03-10] (Ask)
HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [RadioRage Search Scope Monitor] "C:\PROGRA~2\RADIOR~2\bar\1.bin\4jsrchmn.exe" /m=2 /w /h [42536 2013-03-23] (MindSpark)
HKLM-x32\...\Run: [RadioRage_4j Browser Plugin Loader] C:\PROGRA~2\RADIOR~2\bar\1.bin\4jbrmon.exe [30096 2013-03-23] (VER_COMPANY_NAME)
HKLM-x32\...\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKU\Gast\...\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [2363392 2008-06-09] (Hewlett-Packard Company)
HKU\Gast\...\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler [218032 2006-09-11] (Macrovision Corporation)
HKU\Gast\...\Run: [SMASH] "C:\Program Files (x86)\Ashampoo\Ashampoo Office 2010\smash.exe" [229411 2010-05-21] (SoftMaker Software GmbH)
HKU\Gast\...\Run: [Google Update] "C:\Users\Siergbert\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2010-04-13] (Google Inc.)
HKU\Gast\...\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10t_Plugin.exe -update plugin [x]
HKU\Gast\...\RunOnce: [gi2071785282] "C:\Users\SIERGB~1\AppData\Local\Temp\0PN31CO8\Setup\Resume.exe" "C:\Users\Internet\Downloads\Easy Weather\pce-fws20\Setup.exe" /resume:"C:\Users\SIERGB~1\AppData\Local\Temp\0PN31CO8" "Bitte die erste Installationsdiskette einlegen oder Netzwerkpfad mit der Datei names C:\Users\Internet\Downloads\Easy Weather\pce-fws20\Setup.exe eingeben" "EasyWeather" [x]
HKU\Internet\...\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent [1597864 2013-02-15] (Valve Corporation)
HKU\Internet\...\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler [218032 2006-09-11] (Macrovision Corporation)
HKU\Internet\...\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1104824 2012-11-12] (Samsung)
HKU\Internet\...\Run: [Google Update] "C:\Users\Internet\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2013-06-02] (Google Inc.)
HKU\Online Surfen\...\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [2363392 2008-06-09] (Hewlett-Packard Company)
HKU\UpdatusUser\...\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler [218032 2006-09-11] (Macrovision Corporation)
HKU\UpdatusUser\...\Run: [SMASH] "C:\Program Files (x86)\Ashampoo\Ashampoo Office 2010\smash.exe" [229411 2010-05-21] (SoftMaker Software GmbH)
HKU\UpdatusUser\...\Run: [Google Update] "C:\Users\Siergbert\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2010-04-13] (Google Inc.)
HKU\UpdatusUser\...\RunOnce: [gi2071785282] "C:\Users\SIERGB~1\AppData\Local\Temp\0PN31CO8\Setup\Resume.exe" "C:\Users\Internet\Downloads\Easy Weather\pce-fws20\Setup.exe" /resume:"C:\Users\SIERGB~1\AppData\Local\Temp\0PN31CO8" "Bitte die erste Installationsdiskette einlegen oder Netzwerkpfad mit der Datei names C:\Users\Internet\Downloads\Easy Weather\pce-fws20\Setup.exe eingeben" "EasyWeather" [x]
AppInit_DLLs:    [0 ] ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Scanner Finder.lnk
ShortcutTarget: Scanner Finder.lnk -> C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.ebay.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
URLSearchHook: (No Name) - {3c35ad63-af1d-4e21-b484-b6651a8efcf9} -  No File
HKLM SearchScopes: DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 
HKLM-x32 SearchScopes: DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 
SearchScopes: HKLM-x32 - {110a9ea2-8810-4c04-b916-cfd4e9427fec} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^ZX^xdm086^YY^de&si=CL7ajuiAk7YCFUnwzAod2lkAFA&ptb=E559696F-8EBB-4E20-BB03-C944584D6EE3&ind=2013061307&n=77fce0bb&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {0DD8E86E-5A66-472E-88CF-F8604767EE95} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {110a9ea2-8810-4c04-b916-cfd4e9427fec} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^ZX^xdm086^YY^de&si=CL7ajuiAk7YCFUnwzAod2lkAFA&ptb=E559696F-8EBB-4E20-BB03-C944584D6EE3&ind=2013061115&n=77fcdffb&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {33C55BE3-0F37-4B71-B9D8-A4B15891F6FB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=e9ab6431-61df-4f1d-85af-e8f8d5a302c7&apn_sauid=0EC8D2E9-6D27-4987-84DB-31D20CD0473A
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Toolbar BHO - {48909954-14fb-4971-a7b3-47e7af10b38a} - C:\PROGRA~2\RADIOR~2\bar\1.bin\4jbar.dll (MindSpark)
BHO-x32: Search Assistant BHO - {5848763c-2668-44ca-adbe-2999a6ee2858} - C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jSrcAs.dll (MindSpark)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - RadioRage - {78ba36c9-6036-482b-b48d-ecca6f964b84} - C:\Program Files (x86)\RadioRage_4j\bar\1.bin\4jbar.dll (MindSpark)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKCU - No Name - {78BA36C9-6036-482B-B48D-ECCA6F964B84} -  No File
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.de/common/asusTek_sys_ctrl.cab
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {2F0D96B4-7D9D-4767-A657-F7ECC9114886} hxxp://192.168.178.31/IPCamPluginDMPT.cab
DPF: HKLM-x32 {369383F8-C8B7-42E1-819E-D47E3ABAD4BC} hxxp://192.168.178.29:8080/cgi-bin/QNAPG726.cab
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {4DA8C6E4-312A-4A8F-B02B-491B2BF09CF2} hxxp://192.168.178.29:8080/cgi-bin/QNAPQ264.cab
DPF: HKLM-x32 {603E0052-7B06-496B-A04B-192419174876} hxxp://192.168.178.29:8080/cgi-bin/QNAPQIVG.cab
DPF: HKLM-x32 {937FE81C-FECF-4A55-9754-49D6D6550EDC} hxxp://192.168.178.29:8080/cgi-bin/NNVRVMon.cab
DPF: HKLM-x32 {B824D61F-DAF3-40BF-BA5E-430D250FF51C} hxxp://192.168.178.29:8080/cgi-bin/QNAPQMP4.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {F5F2CE2F-C516-4428-8758-7178B1E1ABAB} hxxp://192.168.178.29:8080/cgi-bin/QNAPQVivoTek.cab
Winsock: Catalog9 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll [338480] (VMware, Inc.)
Winsock: Catalog9 21 C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll [338480] (VMware, Inc.)
Winsock: Catalog9 22 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [260832] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 20 C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll [438320] (VMware, Inc.)
Winsock: Catalog9-x64 21 C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll [438320] (VMware, Inc.)
Winsock: Catalog9-x64 22 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [234208] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Siergbert\AppData\Roaming\Mozilla\Firefox\Profiles\cscwwvzo.default-1370976845702
FF Homepage: hxxp://www.ebay.de/|hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @RadioRage_4j.com/Plugin - C:\Program Files (x86)\RadioRage_4j\bar\1.bin\NP4jStub.dll (MindSpark)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntrId=8c3bd18c000000000000001109e19b22
CHR RestoreOnStartup:         "urls_to_restore_on_startup": [
CHR DefaultSearchURL: (Delta Search) - hxxp://www.delta-search.com/?q={searchTerms}&affID=119556&babsrc=SP_ss&mntrId=8c3bd18c000000000000001109e19b22
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Siergbert\AppData\Local\Google\Chrome\Application\25.0.1364.152\pdf.dll No File
CHR Extension: (Avira Toolbar) - C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl\7.15.11.0_0
CHR Extension: (express-files) - C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh\10.14.40.128_0
CHR Extension: (New tab for Chrome\u2122) - C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-03-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-03-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [562744 2013-05-07] (Avira Operations GmbH & Co. KG)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592 2013-04-10] (Microsoft Corp.)
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
R2 RadioRage_4jService; C:\PROGRA~2\RADIOR~2\bar\1.bin\4jbarsvc.exe [42504 2013-03-23] (COMPANYVERS_NAME)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S3 ufad-ws60; C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [191024 2009-10-12] (VMware, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [29184 2005-10-06] (REINER SCT)
S3 cmudax; C:\Windows\System32\drivers\cmudax.sys [932864 2010-03-27] (C-Media Inc)
S3 FETNDIS; C:\Windows\System32\DRIVERS\fet6x64.sys [47872 2009-06-10] (VIA Technologies, Inc.              )
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S3 RT2500USB; C:\Windows\System32\DRIVERS\rt2500usb.sys [244736 2005-09-30] (Ralink Technology Inc.)
R3 rt70x64; C:\Windows\System32\DRIVERS\netr7064.sys [388448 2010-04-27] (Ralink Technology Corp.)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
S2 VMparport; C:\Windows\system32\drivers\VMparport.sys [18480 2010-01-22] (VMware, Inc.)
R2 vstor2-ws60; C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2009-10-12] (VMware, Inc.)
R2 vstor2-ws60; C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2009-10-12] (VMware, Inc.)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [204800 2012-03-26] (VIA Technologies, Inc.)
S3 WBSCR; C:\Windows\System32\drivers\wbscr_x64.sys [34304 2005-06-13] (Winbond Electronics Corp.)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2013-03-29] (WinISO.com)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [256000 2012-03-26] (VIA Technologies, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology, Inc.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-15 17:42 - 2013-06-15 17:42 - 00000000 ____D C:\FRST
2013-06-15 17:37 - 2013-06-15 17:39 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt4
2013-06-15 17:36 - 2013-06-15 17:37 - 01920546 ____A (Farbar) C:\Users\Siergbert\Desktop\FRST64.exe
2013-06-15 17:12 - 2013-06-15 17:12 - 00037411 ____A C:\Users\Siergbert\Desktop\OTL.zip
2013-06-15 17:09 - 2013-06-15 17:11 - 00000133 ____A C:\Users\Siergbert\Documents\check.7z
2013-06-15 15:45 - 2013-06-15 16:44 - 00125594 ____A C:\Users\Siergbert\Desktop\OTL.Txt
2013-06-15 15:45 - 2013-06-15 16:32 - 00105712 ____A C:\Users\Siergbert\Desktop\Extras.Txt
2013-06-15 15:32 - 2013-06-15 15:34 - 00000480 ____A C:\Users\Siergbert\Desktop\defogger_disable.log
2013-06-15 15:32 - 2013-06-15 15:32 - 00000000 ____A C:\Users\Siergbert\defogger_reenable
2013-06-15 15:26 - 2013-06-15 15:26 - 00377856 ____A C:\Users\Siergbert\Desktop\gmer_2.1.19163.exe
2013-06-15 15:24 - 2013-06-15 15:35 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt3
2013-06-15 15:23 - 2013-06-15 17:12 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt1
2013-06-15 15:23 - 2013-06-15 15:35 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt2
2013-06-15 15:23 - 2013-06-15 15:23 - 00602112 ____A (OldTimer Tools) C:\Users\Siergbert\Desktop\OTL.exe
2013-06-15 15:22 - 2013-06-15 15:34 - 00000000 ____D C:\Users\Siergbert\Desktop\Malwarebekämpfung
2013-06-15 15:22 - 2013-06-15 15:22 - 00050477 ____A C:\Users\Siergbert\Downloads\Defogger(1).exe
2013-06-15 15:19 - 2013-06-15 15:19 - 00000000 ____D C:\Users\Internet\AppData\Local\{50DC7B0F-3F6B-4742-A90A-F3F5DF159D4E}
2013-06-15 14:13 - 2013-06-15 14:13 - 00000360 ____A C:\Users\Siergbert\Documents\OuProxy.log
2013-06-15 01:22 - 2013-06-15 01:22 - 00000000 ____D C:\Users\Internet\AppData\Local\{378290FD-CFE5-4AFD-9B33-FF864B1A0DED}
2013-06-14 17:31 - 2013-06-14 17:35 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-06-14 17:11 - 2013-06-14 17:11 - 00000000 ____D C:\ProgramData\Log
2013-06-14 16:56 - 2013-06-14 16:56 - 00000000 ____D C:\Users\Siergbert\Documents\Steuerfälle
2013-06-14 15:58 - 2013-06-14 15:58 - 00000000 ____D C:\Users\Siergbert\AppData\Roaming\QuickScan
2013-06-14 15:27 - 2013-06-14 15:27 - 02828552 ____A (AVAST Software) C:\Users\Internet\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-06-14 13:21 - 2013-06-14 13:22 - 00000000 ____D C:\Users\Internet\AppData\Local\{B7A74415-833F-4701-8D2E-6B2E1E5FD601}
2013-06-14 01:21 - 2013-06-14 01:21 - 00000000 ____D C:\Users\Internet\AppData\Local\{8F6A9343-DDEE-47DA-AD40-6CDEAD7B179F}
2013-06-13 13:28 - 2013-06-13 13:28 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Avira
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\Documents\cc-Cleaner
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\DoNotTrackPlus
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\AskToolbar
2013-06-13 13:23 - 2013-06-13 13:23 - 00116824 ____A C:\Users\Online Surfen\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\NetBak
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Macromedia
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\Logitech
2013-06-13 13:22 - 2013-06-13 13:22 - 00000020 __ASH C:\Users\Online Surfen\ntuser.ini
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Vorlagen
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Startmenü
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Netzwerkumgebung
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Lokale Einstellungen
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Eigene Dateien
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Druckumgebung
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Documents\Eigene Musik
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Documents\Eigene Bilder
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\AppData\Local\Verlauf
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\AppData\Local\Anwendungsdaten
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Anwendungsdaten
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ___RD C:\Users\Online Surfen\Virtual Machines
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Adobe
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\VirtualStore
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\users\Online Surfen
2013-06-13 13:22 - 2010-04-07 22:21 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\Microsoft Help
2013-06-13 13:21 - 2013-06-13 13:21 - 00000000 ____D C:\Users\Internet\AppData\Local\{39B375D8-D6DD-4CB0-BD16-9DBEE7D05312}
2013-06-12 12:11 - 2013-06-12 12:11 - 00000000 ____D C:\Users\Internet\AppData\Local\{B8DCF754-44CD-46B7-8861-3F8C3274A327}
2013-06-12 12:01 - 2013-06-15 16:18 - 00001954 ____A C:\Windows\setupact.log
2013-06-12 12:01 - 2013-06-12 12:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-12 10:40 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 10:40 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 10:40 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 10:40 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 10:40 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 10:40 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 10:40 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 10:40 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 10:37 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 10:37 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 10:37 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 10:37 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 10:37 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 10:37 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 10:37 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 10:37 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 10:37 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 10:37 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 10:37 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 10:37 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 10:36 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 10:36 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 10:36 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 10:36 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 10:36 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 10:36 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 10:36 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 10:36 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 10:36 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 10:36 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 10:36 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 10:36 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 10:36 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 10:36 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 10:36 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 10:36 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 10:36 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 10:36 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 10:36 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 10:30 - 2013-06-12 10:30 - 00004032 ____A C:\Windows\SysWOW64\jupdate-1.7.0_21-b11.log
2013-06-12 10:30 - 2013-04-04 05:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 10:30 - 2013-04-04 05:30 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 10:30 - 2013-04-04 05:29 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 10:02 - 2013-06-12 10:02 - 00000000 ____D C:\Users\Siergbert\Documents\ProcAlyzer Dumps
2013-06-12 08:03 - 2013-06-12 08:03 - 00000065 ____A C:\Windows\wininit.ini
2013-06-12 07:33 - 2013-06-12 10:02 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-06-12 07:33 - 2013-06-12 07:33 - 00001388 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-06-12 07:33 - 2013-06-12 07:33 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-06-12 07:33 - 2009-01-25 13:14 - 00017272 ____A (Safer Networking Limited) C:\Windows\System32\sdnclean64.exe
2013-06-12 07:31 - 2013-06-12 07:32 - 36271144 ____A (Safer-Networking Ltd.                                       ) C:\Users\Siergbert\Downloads\spybot-2.1.exe
2013-06-11 20:54 - 2013-06-11 20:54 - 00000000 ____D C:\Users\Siergbert\Desktop\Alte Firefox-Daten
2013-06-11 10:00 - 2013-06-11 10:01 - 00000000 ____D C:\Users\Internet\AppData\Local\{2F6D42AD-DB2E-4DA3-9CA2-EC8A1EB74FDE}
2013-06-10 22:00 - 2013-06-10 22:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{3F35A6F5-29C6-4DCF-A42D-50C2C459D669}
2013-06-10 10:00 - 2013-06-10 10:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{C15EA204-B92D-43B2-ABDA-70B9799CD905}
2013-06-09 21:59 - 2013-06-09 22:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{DA88540C-079C-4F8C-B0F4-AA0E9B18042F}
2013-06-09 09:59 - 2013-06-09 09:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{7BEA50C7-3849-48C0-BCE7-B436AE7A17C3}
2013-06-08 21:59 - 2013-06-08 21:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{01682A2F-8E26-40C8-8B2E-5F9D2BCFA870}
2013-06-08 09:58 - 2013-06-08 09:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{5A800FD8-1A76-4ABF-9A05-F8DE151215C8}
2013-06-07 14:31 - 2013-06-07 14:31 - 05673894 ____A C:\Users\Siergbert\Downloads\Rango.themepack
2013-06-07 13:21 - 2013-06-07 13:21 - 04378864 ____A (Piriform Ltd) C:\Users\Siergbert\Downloads\ccsetup402.exe
2013-06-07 05:42 - 2013-06-07 05:42 - 00000000 ____D C:\Users\Internet\AppData\Local\{AE176E56-1F34-438B-A485-DB42A431766D}
2013-06-06 17:42 - 2013-06-06 17:42 - 00000000 ____D C:\Users\Internet\AppData\Local\{F71FCABB-65DC-430F-AD74-F2E2B941C89D}
2013-06-04 09:15 - 2013-06-04 09:15 - 00203672 ____A (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\System32\Drivers\ssudmdm.sys
2013-06-04 09:15 - 2013-06-04 09:15 - 00103448 ____A (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\System32\Drivers\ssudbus.sys
2013-06-03 19:43 - 2013-06-03 19:43 - 00000000 ____D C:\Users\Internet\AppData\Local\{0D337C95-9285-4378-A95B-F55D00B5089B}
2013-06-02 19:47 - 2013-06-06 17:57 - 00002391 ____A C:\Users\Internet\Desktop\Google Chrome.lnk
2013-06-02 19:46 - 2013-06-15 16:56 - 00001132 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005UA.job
2013-06-02 19:46 - 2013-06-14 19:56 - 00001080 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005Core.job
2013-06-02 19:46 - 2013-06-02 19:46 - 00739856 ____A (Google Inc.) C:\Users\Internet\AppData\Roaming\chromebrowser.exe
2013-06-02 19:46 - 2013-06-02 19:46 - 00000000 _RSHD C:\Users\Internet\AppData\Roaming\Qwapatka
2013-06-02 19:46 - 2013-06-02 19:46 - 00000000 ____D C:\Users\Internet\AppData\Local\{E50CC727-DA75-435B-B279-A2FB86C8EEB1}
2013-06-02 19:45 - 2013-06-06 22:25 - 00000000 ____D C:\Users\Internet\AppData\Roaming\noc
2013-06-02 07:46 - 2013-06-02 07:46 - 00000000 ____D C:\Users\Internet\AppData\Local\{7E39934D-6EA7-4EFE-AF19-DF248F02C55B}
2013-06-01 19:45 - 2013-06-01 19:46 - 00000000 ____D C:\Users\Internet\AppData\Local\{B3A65FD2-69EF-45D5-8278-6FE8AA29D476}
2013-06-01 07:45 - 2013-06-01 07:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{6E48D8F9-DF9F-4B90-A9E6-D8341B75AAD9}
2013-05-31 19:45 - 2013-05-31 19:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{BB5B8B85-C42D-4996-BB21-C50344F3FB55}
2013-05-31 07:44 - 2013-05-31 07:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{F6A373AA-154C-4155-86F0-D0DA40F41461}
2013-05-30 19:44 - 2013-05-30 19:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{27FD2C90-DE88-4FD6-B322-ACF5F314F3AE}
2013-05-30 07:44 - 2013-05-30 07:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{B18BC52A-E9D5-4BB1-A3B0-E2BE7AB73A1E}
2013-05-29 19:44 - 2013-05-29 19:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{FD7F30E4-BA9E-47DB-A479-24C3B21B997A}
2013-05-28 15:12 - 2013-05-28 15:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{ECC002FF-52C1-4677-BDB2-8DE43917B510}
2013-05-28 12:05 - 2013-05-28 12:05 - 00000000 ____D C:\Medion
2013-05-28 03:12 - 2013-05-28 03:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{84BC4110-F956-4429-98A8-B4FA51A7BF5B}
2013-05-27 15:12 - 2013-05-27 15:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{C21950E7-8214-4D24-9D4A-CF08B1BD4F31}
2013-05-27 03:11 - 2013-05-27 03:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{FCEACBC9-8DA6-4FF0-9231-4B90B8186E29}
2013-05-26 18:30 - 2013-06-04 17:26 - 00000000 ____D C:\Users\Internet\Downloads\EW-7238RDP
2013-05-26 16:16 - 2013-06-02 20:09 - 00000000 ____D C:\Users\Internet\AppData\Local\Mozilla Firefox
2013-05-26 15:11 - 2013-05-26 15:11 - 00000000 ____D C:\Users\Internet\AppData\Local\{2EC77A0D-818A-4E58-B87A-4B305AF5750E}
2013-05-25 03:21 - 2013-05-25 03:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-25 03:21 - 2013-05-25 03:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-25 03:21 - 2013-05-25 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-25 03:21 - 2013-05-25 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-25 03:21 - 2013-05-25 03:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-25 03:21 - 2013-05-25 03:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-25 03:21 - 2013-05-25 03:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-25 03:21 - 2013-05-25 03:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-25 03:21 - 2013-05-25 03:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-24 17:51 - 2013-05-24 17:51 - 00000000 ____D C:\Users\Internet\AppData\Local\{F824C992-EAD5-461F-A8B0-066201B65B37}
2013-05-24 05:50 - 2013-05-24 05:51 - 00000000 ____D C:\Users\Internet\AppData\Local\{AAB42EB8-6FB6-4E0A-9B01-C6FB465465A8}
2013-05-23 18:19 - 2013-05-23 18:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-23 17:50 - 2013-05-23 17:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{EA971627-B531-4B56-88B7-B6E665FBA546}
2013-05-23 05:50 - 2013-05-23 05:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{33E7B4F7-FDF5-4F8E-ABC9-81236D5FD3F4}
2013-05-22 17:53 - 2013-06-14 12:55 - 00000000 ____D C:\Users\Internet\Desktop\clip art
2013-05-22 17:49 - 2013-05-22 17:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{BB071875-C11B-4DCC-BD3A-48909EE84F37}
2013-05-22 05:49 - 2013-05-22 05:49 - 00000000 ____D C:\Users\Internet\AppData\Local\{376B9FD2-BF02-4707-9240-5619B87B3BFE}
2013-05-21 17:48 - 2013-05-21 17:49 - 00000000 ____D C:\Users\Internet\AppData\Local\{2DC1FD96-3E1D-404B-AF93-D1BFA2ACB438}
2013-05-21 05:48 - 2013-05-21 05:48 - 00000000 ____D C:\Users\Internet\AppData\Local\{3E0FEE55-FF02-4E94-910D-402340D26D27}
2013-05-20 17:48 - 2013-05-20 17:48 - 00000000 ____D C:\Users\Internet\AppData\Local\{309CB5AF-C09F-4D42-A06C-E1CF29D1A73E}
2013-05-17 05:55 - 2013-05-17 05:55 - 00000000 ____D C:\Users\Internet\AppData\Local\{B53DEFCE-5DBC-4D02-9C9C-E987F0F60F24}
2013-05-16 01:15 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-16 01:15 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-16 01:15 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-16 01:15 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-16 01:15 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-16 01:15 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-16 01:15 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-16 01:15 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-16 01:15 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-16 01:15 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-16 01:15 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-16 01:15 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-16 01:15 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-16 01:15 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

==================== One Month Modified Files and Folders =======

2013-06-15 17:42 - 2013-06-15 17:42 - 00000000 ____D C:\FRST
2013-06-15 17:39 - 2013-06-15 17:37 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt4
2013-06-15 17:37 - 2013-06-15 17:36 - 01920546 ____A (Farbar) C:\Users\Siergbert\Desktop\FRST64.exe
2013-06-15 17:36 - 2010-04-13 08:57 - 00001136 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1001UA.job
2013-06-15 17:19 - 2012-08-05 10:48 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-15 17:12 - 2013-06-15 17:12 - 00037411 ____A C:\Users\Siergbert\Desktop\OTL.zip
2013-06-15 17:12 - 2013-06-15 15:23 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt1
2013-06-15 17:11 - 2013-06-15 17:09 - 00000133 ____A C:\Users\Siergbert\Documents\check.7z
2013-06-15 17:02 - 2010-08-13 13:47 - 00001116 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-15 16:56 - 2013-06-02 19:46 - 00001132 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005UA.job
2013-06-15 16:44 - 2013-06-15 15:45 - 00125594 ____A C:\Users\Siergbert\Desktop\OTL.Txt
2013-06-15 16:32 - 2013-06-15 15:45 - 00105712 ____A C:\Users\Siergbert\Desktop\Extras.Txt
2013-06-15 16:25 - 2009-07-14 06:45 - 00015776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-15 16:25 - 2009-07-14 06:45 - 00015776 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-15 16:19 - 2010-08-13 13:47 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-15 16:18 - 2013-06-12 12:01 - 00001954 ____A C:\Windows\setupact.log
2013-06-15 16:18 - 2013-03-06 12:26 - 00303372 ____N C:\Windows\Minidump\061513-18127-01.dmp
2013-06-15 16:18 - 2012-11-19 18:51 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-15 16:18 - 2012-04-05 16:33 - 00000000 ____D C:\Windows\Minidump
2013-06-15 16:18 - 2010-05-21 19:06 - 00000000 ____D C:\ProgramData\VMware
2013-06-15 16:18 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-15 15:41 - 2010-02-27 13:12 - 01584197 ____A C:\Windows\WindowsUpdate.log
2013-06-15 15:35 - 2013-06-15 15:24 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt3
2013-06-15 15:35 - 2013-06-15 15:23 - 00000000 ____D C:\Users\Siergbert\Desktop\Schritt2
2013-06-15 15:34 - 2013-06-15 15:32 - 00000480 ____A C:\Users\Siergbert\Desktop\defogger_disable.log
2013-06-15 15:34 - 2013-06-15 15:22 - 00000000 ____D C:\Users\Siergbert\Desktop\Malwarebekämpfung
2013-06-15 15:32 - 2013-06-15 15:32 - 00000000 ____A C:\Users\Siergbert\defogger_reenable
2013-06-15 15:32 - 2010-02-27 13:19 - 00000000 ____D C:\users\Siergbert
2013-06-15 15:26 - 2013-06-15 15:26 - 00377856 ____A C:\Users\Siergbert\Desktop\gmer_2.1.19163.exe
2013-06-15 15:23 - 2013-06-15 15:23 - 00602112 ____A (OldTimer Tools) C:\Users\Siergbert\Desktop\OTL.exe
2013-06-15 15:22 - 2013-06-15 15:22 - 00050477 ____A C:\Users\Siergbert\Downloads\Defogger(1).exe
2013-06-15 15:19 - 2013-06-15 15:19 - 00000000 ____D C:\Users\Internet\AppData\Local\{50DC7B0F-3F6B-4742-A90A-F3F5DF159D4E}
2013-06-15 15:19 - 2012-03-18 12:33 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-15 14:13 - 2013-06-15 14:13 - 00000360 ____A C:\Users\Siergbert\Documents\OuProxy.log
2013-06-15 13:36 - 2010-04-13 08:57 - 00001084 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1001Core.job
2013-06-15 01:22 - 2013-06-15 01:22 - 00000000 ____D C:\Users\Internet\AppData\Local\{378290FD-CFE5-4AFD-9B33-FF864B1A0DED}
2013-06-14 19:56 - 2013-06-02 19:46 - 00001080 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005Core.job
2013-06-14 17:35 - 2013-06-14 17:31 - 00000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2013-06-14 17:35 - 2012-05-31 09:46 - 00002226 ____A C:\Users\Public\Desktop\Steuer-Spar-Erklärung 2012.lnk
2013-06-14 17:24 - 2012-12-11 13:01 - 00000000 ____D C:\Users\Siergbert\AppData\Local\DoNotTrackPlus
2013-06-14 17:17 - 2010-05-28 19:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-14 17:11 - 2013-06-14 17:11 - 00000000 ____D C:\ProgramData\Log
2013-06-14 17:04 - 2010-10-13 13:38 - 00000000 ____D C:\ProgramData\AAV
2013-06-14 16:56 - 2013-06-14 16:56 - 00000000 ____D C:\Users\Siergbert\Documents\Steuerfälle
2013-06-14 15:58 - 2013-06-14 15:58 - 00000000 ____D C:\Users\Siergbert\AppData\Roaming\QuickScan
2013-06-14 15:27 - 2013-06-14 15:27 - 02828552 ____A (AVAST Software) C:\Users\Internet\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-06-14 13:22 - 2013-06-14 13:21 - 00000000 ____D C:\Users\Internet\AppData\Local\{B7A74415-833F-4701-8D2E-6B2E1E5FD601}
2013-06-14 12:55 - 2013-05-22 17:53 - 00000000 ____D C:\Users\Internet\Desktop\clip art
2013-06-14 01:21 - 2013-06-14 01:21 - 00000000 ____D C:\Users\Internet\AppData\Local\{8F6A9343-DDEE-47DA-AD40-6CDEAD7B179F}
2013-06-13 16:37 - 2012-11-27 23:22 - 00000000 ____D C:\Users\Internet\AppData\Local\DoNotTrackPlus
2013-06-13 13:28 - 2013-06-13 13:28 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Avira
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\Documents\cc-Cleaner
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\DoNotTrackPlus
2013-06-13 13:26 - 2013-06-13 13:26 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\AskToolbar
2013-06-13 13:23 - 2013-06-13 13:23 - 00116824 ____A C:\Users\Online Surfen\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\NetBak
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Macromedia
2013-06-13 13:23 - 2013-06-13 13:23 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\Logitech
2013-06-13 13:22 - 2013-06-13 13:22 - 00000020 __ASH C:\Users\Online Surfen\ntuser.ini
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Vorlagen
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Startmenü
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Netzwerkumgebung
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Lokale Einstellungen
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Eigene Dateien
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Druckumgebung
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Documents\Eigene Musik
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Documents\Eigene Bilder
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\AppData\Local\Verlauf
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\AppData\Local\Anwendungsdaten
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 __SHD C:\Users\Online Surfen\Anwendungsdaten
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ___RD C:\Users\Online Surfen\Virtual Machines
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\Users\Online Surfen\AppData\Roaming\Adobe
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\Users\Online Surfen\AppData\Local\VirtualStore
2013-06-13 13:22 - 2013-06-13 13:22 - 00000000 ____D C:\users\Online Surfen
2013-06-13 13:21 - 2013-06-13 13:21 - 00000000 ____D C:\Users\Internet\AppData\Local\{39B375D8-D6DD-4CB0-BD16-9DBEE7D05312}
2013-06-12 12:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 12:11 - 2013-06-12 12:11 - 00000000 ____D C:\Users\Internet\AppData\Local\{B8DCF754-44CD-46B7-8861-3F8C3274A327}
2013-06-12 12:01 - 2013-06-12 12:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-12 11:45 - 2010-02-27 13:08 - 00000000 ____D C:\Windows\Panther
2013-06-12 10:41 - 2010-04-07 20:52 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 10:34 - 2010-05-28 19:07 - 00000000 ____D C:\Windows\WindowsMobile
2013-06-12 10:30 - 2013-06-12 10:30 - 00004032 ____A C:\Windows\SysWOW64\jupdate-1.7.0_21-b11.log
2013-06-12 10:30 - 2011-03-02 03:45 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-12 10:29 - 2012-11-19 18:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 10:29 - 2012-11-19 18:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 10:25 - 2012-12-23 11:10 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-06-12 10:02 - 2013-06-12 10:02 - 00000000 ____D C:\Users\Siergbert\Documents\ProcAlyzer Dumps
2013-06-12 10:02 - 2013-06-12 07:33 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-06-12 10:02 - 2010-02-27 16:19 - 00000227 __ASH C:\boot.ini
2013-06-12 08:03 - 2013-06-12 08:03 - 00000065 ____A C:\Windows\wininit.ini
2013-06-12 07:33 - 2013-06-12 07:33 - 00001388 ____A C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-06-12 07:33 - 2013-06-12 07:33 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-06-12 07:32 - 2013-06-12 07:31 - 36271144 ____A (Safer-Networking Ltd.                                       ) C:\Users\Siergbert\Downloads\spybot-2.1.exe
2013-06-12 05:19 - 2012-08-05 10:48 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 05:19 - 2011-05-25 12:48 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 20:54 - 2013-06-11 20:54 - 00000000 ____D C:\Users\Siergbert\Desktop\Alte Firefox-Daten
2013-06-11 18:29 - 2012-12-11 12:24 - 00001099 ____A C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-06-11 10:01 - 2013-06-11 10:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{2F6D42AD-DB2E-4DA3-9CA2-EC8A1EB74FDE}
2013-06-10 22:00 - 2013-06-10 22:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{3F35A6F5-29C6-4DCF-A42D-50C2C459D669}
2013-06-10 10:00 - 2013-06-10 10:00 - 00000000 ____D C:\Users\Internet\AppData\Local\{C15EA204-B92D-43B2-ABDA-70B9799CD905}
2013-06-09 22:00 - 2013-06-09 21:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{DA88540C-079C-4F8C-B0F4-AA0E9B18042F}
2013-06-09 09:59 - 2013-06-09 09:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{7BEA50C7-3849-48C0-BCE7-B436AE7A17C3}
2013-06-08 21:59 - 2013-06-08 21:59 - 00000000 ____D C:\Users\Internet\AppData\Local\{01682A2F-8E26-40C8-8B2E-5F9D2BCFA870}
2013-06-08 16:08 - 2013-06-12 10:37 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 10:37 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 10:37 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 10:37 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 10:37 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 10:37 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 10:37 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 10:37 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 10:37 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 10:37 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 10:37 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 10:37 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 09:59 - 2013-06-08 09:58 - 00000000 ____D C:\Users\Internet\AppData\Local\{5A800FD8-1A76-4ABF-9A05-F8DE151215C8}
2013-06-07 14:31 - 2013-06-07 14:31 - 05673894 ____A C:\Users\Siergbert\Downloads\Rango.themepack
2013-06-07 13:37 - 2010-04-13 08:58 - 00002396 ____A C:\Users\Siergbert\Desktop\Google Chrome.lnk
2013-06-07 13:22 - 2013-04-17 17:04 - 00000000 ____D C:\Users\Siergbert\AppData\Roaming\DAEMON Tools Lite
2013-06-07 13:21 - 2013-06-07 13:21 - 04378864 ____A (Piriform Ltd) C:\Users\Siergbert\Downloads\ccsetup402.exe
2013-06-07 13:21 - 2011-12-16 17:38 - 00000831 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-07 13:21 - 2011-12-16 17:38 - 00000000 ____D C:\Program Files\CCleaner
2013-06-07 13:02 - 2012-11-21 19:12 - 00000000 ____D C:\Program Files (x86)\Ask.com
2013-06-07 13:01 - 2011-05-07 13:57 - 00000000 ___RD C:\Users\Siergbert\Virtual Machines
2013-06-07 05:42 - 2013-06-07 05:42 - 00000000 ____D C:\Users\Internet\AppData\Local\{AE176E56-1F34-438B-A485-DB42A431766D}
2013-06-06 22:25 - 2013-06-02 19:45 - 00000000 ____D C:\Users\Internet\AppData\Roaming\noc
2013-06-06 17:57 - 2013-06-02 19:47 - 00002391 ____A C:\Users\Internet\Desktop\Google Chrome.lnk
2013-06-06 17:42 - 2013-06-06 17:42 - 00000000 ____D C:\Users\Internet\AppData\Local\{F71FCABB-65DC-430F-AD74-F2E2B941C89D}
2013-06-04 21:55 - 2010-05-21 20:36 - 00000000 ____D C:\Users\Siergbert\AppData\Roaming\VMware
2013-06-04 19:40 - 2012-04-23 20:07 - 00000000 ____D C:\Users\Siergbert\Documents\Virtual Machines
2013-06-04 17:26 - 2013-05-26 18:30 - 00000000 ____D C:\Users\Internet\Downloads\EW-7238RDP
2013-06-04 16:45 - 2012-07-16 17:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-04 09:15 - 2013-06-04 09:15 - 00203672 ____A (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\System32\Drivers\ssudmdm.sys
2013-06-04 09:15 - 2013-06-04 09:15 - 00103448 ____A (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\System32\Drivers\ssudbus.sys
2013-06-03 19:43 - 2013-06-03 19:43 - 00000000 ____D C:\Users\Internet\AppData\Local\{0D337C95-9285-4378-A95B-F55D00B5089B}
2013-06-02 20:09 - 2013-05-26 16:16 - 00000000 ____D C:\Users\Internet\AppData\Local\Mozilla Firefox
2013-06-02 19:47 - 2011-04-10 15:12 - 00000000 ____D C:\Users\Internet\AppData\Local\Google
2013-06-02 19:46 - 2013-06-02 19:46 - 00739856 ____A (Google Inc.) C:\Users\Internet\AppData\Roaming\chromebrowser.exe
2013-06-02 19:46 - 2013-06-02 19:46 - 00000000 _RSHD C:\Users\Internet\AppData\Roaming\Qwapatka
2013-06-02 19:46 - 2013-06-02 19:46 - 00000000 ____D C:\Users\Internet\AppData\Local\{E50CC727-DA75-435B-B279-A2FB86C8EEB1}
2013-06-02 07:46 - 2013-06-02 07:46 - 00000000 ____D C:\Users\Internet\AppData\Local\{7E39934D-6EA7-4EFE-AF19-DF248F02C55B}
2013-06-01 19:46 - 2013-06-01 19:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{B3A65FD2-69EF-45D5-8278-6FE8AA29D476}
2013-06-01 07:45 - 2013-06-01 07:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{6E48D8F9-DF9F-4B90-A9E6-D8341B75AAD9}
2013-05-31 19:45 - 2013-05-31 19:45 - 00000000 ____D C:\Users\Internet\AppData\Local\{BB5B8B85-C42D-4996-BB21-C50344F3FB55}
2013-05-31 07:45 - 2013-05-31 07:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{F6A373AA-154C-4155-86F0-D0DA40F41461}
2013-05-30 19:44 - 2013-05-30 19:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{27FD2C90-DE88-4FD6-B322-ACF5F314F3AE}
2013-05-30 07:44 - 2013-05-30 07:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{B18BC52A-E9D5-4BB1-A3B0-E2BE7AB73A1E}
2013-05-29 19:44 - 2013-05-29 19:44 - 00000000 ____D C:\Users\Internet\AppData\Local\{FD7F30E4-BA9E-47DB-A479-24C3B21B997A}
2013-05-28 15:12 - 2013-05-28 15:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{ECC002FF-52C1-4677-BDB2-8DE43917B510}
2013-05-28 12:05 - 2013-05-28 12:05 - 00000000 ____D C:\Medion
2013-05-28 03:12 - 2013-05-28 03:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{84BC4110-F956-4429-98A8-B4FA51A7BF5B}
2013-05-27 15:12 - 2013-05-27 15:12 - 00000000 ____D C:\Users\Internet\AppData\Local\{C21950E7-8214-4D24-9D4A-CF08B1BD4F31}
2013-05-27 03:12 - 2013-05-27 03:11 - 00000000 ____D C:\Users\Internet\AppData\Local\{FCEACBC9-8DA6-4FF0-9231-4B90B8186E29}
2013-05-26 15:11 - 2013-05-26 15:11 - 00000000 ____D C:\Users\Internet\AppData\Local\{2EC77A0D-818A-4E58-B87A-4B305AF5750E}
2013-05-25 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-05-25 03:21 - 2013-05-25 03:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-25 03:21 - 2013-05-25 03:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-25 03:21 - 2013-05-25 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-25 03:21 - 2013-05-25 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-25 03:21 - 2013-05-25 03:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-25 03:21 - 2013-05-25 03:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-25 03:21 - 2013-05-25 03:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-25 03:21 - 2013-05-25 03:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-25 03:21 - 2013-05-25 03:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-25 03:21 - 2013-05-25 03:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-25 03:21 - 2013-05-25 03:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-24 17:51 - 2013-05-24 17:51 - 00000000 ____D C:\Users\Internet\AppData\Local\{F824C992-EAD5-461F-A8B0-066201B65B37}
2013-05-24 05:51 - 2013-05-24 05:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{AAB42EB8-6FB6-4E0A-9B01-C6FB465465A8}
2013-05-23 18:19 - 2013-05-23 18:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-23 17:50 - 2013-05-23 17:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{EA971627-B531-4B56-88B7-B6E665FBA546}
2013-05-23 05:50 - 2013-05-23 05:50 - 00000000 ____D C:\Users\Internet\AppData\Local\{33E7B4F7-FDF5-4F8E-ABC9-81236D5FD3F4}
2013-05-22 17:50 - 2013-05-22 17:49 - 00000000 ____D C:\Users\Internet\AppData\Local\{BB071875-C11B-4DCC-BD3A-48909EE84F37}
2013-05-22 05:49 - 2013-05-22 05:49 - 00000000 ____D C:\Users\Internet\AppData\Local\{376B9FD2-BF02-4707-9240-5619B87B3BFE}
2013-05-21 17:49 - 2013-05-21 17:48 - 00000000 ____D C:\Users\Internet\AppData\Local\{2DC1FD96-3E1D-404B-AF93-D1BFA2ACB438}
2013-05-21 05:48 - 2013-05-21 05:48 - 00000000 ____D C:\Users\Internet\AppData\Local\{3E0FEE55-FF02-4E94-910D-402340D26D27}
2013-05-20 17:48 - 2013-05-20 17:48 - 00000000 ____D C:\Users\Internet\AppData\Local\{309CB5AF-C09F-4D42-A06C-E1CF29D1A73E}
2013-05-17 05:55 - 2013-05-17 05:55 - 00000000 ____D C:\Users\Internet\AppData\Local\{B53DEFCE-5DBC-4D02-9C9C-E987F0F60F24}
2013-05-17 05:54 - 2011-11-02 23:11 - 00000000 ___RD C:\Users\Internet\Virtual Machines
2013-05-17 03:25 - 2013-06-12 10:40 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-17 03:25 - 2013-06-12 10:40 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-17 02:59 - 2013-06-12 10:40 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-17 02:59 - 2013-06-12 10:40 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-17 02:58 - 2013-06-12 10:40 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-17 02:58 - 2013-06-12 10:40 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-16 03:31 - 2009-07-14 06:45 - 00446376 ____A C:\Windows\System32\FNTCACHE.DAT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 00:18

==================== End Of Log ============================
         

--- --- ---


und das zweite

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-06-2013 
Ran by Siergbert at 2013-06-15 17:43:24 Run:
Running from C:\Users\Siergbert\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

1-abc.net Clipboard Organizer (Remove only)
7-Zip 9.20
AAVUpdateManager (Version: 18.00.0000)
ABBYY FineReader 6.0 Sprint (Version: 6.00.1568.4089)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Ashampoo Gadge It v.1.0.1 (Version: 1.0.1)
Ashampoo Home Designer Pro v.1.0.1 (Version: 1.0.1)
Ashampoo Office 2010 (Version: 10.0.584)
Ashampoo Slideshow Studio 2012 v.1.0.2 (Version: 1.0.2)
Ask Toolbar (Version: 1.15.20.0)
AudibleManager (Version: 1998535918.48.56.38669546)
Audio 180% 7.5 (Version: Audio 180% 7.5)
Avira Free Antivirus (Version: 13.0.0.3640)
Avira SearchFree Toolbar plus Web Protection Updater (Version: 1.2.4.37949)
AVM FRITZ!fax für FRITZ!Box
BearPaw 1200CU Plus v1.0
Biet-O-Matic v2.14.8 (Version: Biet-O-Matic v2.14.8)
Bing-Desktop (Version: 1.2.126.0)
CCleaner (Version: 4.02)
Cinema HD*2.0 (Version: 2.11.715)
CleverPrint (Version: 1.90)
C-Media High Definition Audio 64-bit Driver
concept/design Video Jukebox (Version: Video Jukebox)
Corel MediaOne (Version: 2.00.0000)
CorelDRAW Essential Edition 3
CorelDRAW Essential Edition 3 (Version: 3.0)
D3DX10 (Version: 15.4.2368.0902)
DC Universe Online PSG (Version: 1.0.3.183)
DE (Version: 3.0)
DHTML Editing Component (Version: 6.02.0001)
EasyBCD 2.0 Beta (Version: 2.0 Beta)
EasyWeather
Foxit Reader (Version: 4.0.0.619)
Full DVD Ripper 9 Pro
Google Chrome (Version: 27.0.1453.110)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.145)
Half-Life 2: Lost Coast
HP USB Disk Storage Format Tool
ImagXpress (Version: 7.0.74.0)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 22 (64-bit) (Version: 6.0.220)
Java(TM) SE Development Kit 6 Update 20 (Version: 1.6.0.200)
JavaFX(TM) 1.3 SDK (Version: 1.3.0)
Junk Mail filter update (Version: 15.4.3502.0922)
LightScribe System Software  1.14.17.1 (Version: 1.14.17.1)
LinuxLive USB Creator (Version: 2.8)
Logitech GamePanel Software 3.04.143 (Version: 3.04.143)
LSI PCI Soft Modem (Version: 2.2.98)
marvell 91xx driver (Version: 1.0.0.1034)
Marvell Miniport Driver (Version: 11.10.5.3)
MediaInfo 0.7.61 (Version: 0.7.61)
Mesh Runtime (Version: 15.4.5722.2)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6425.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft-Maus- und Tastatur-Center (Version: 2.0.162.0)
Microtek FineReader OCR Engine
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MP3 PartyMiXXer
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NAVIGON Fresh 3.3.2 (Version: 3.3.2)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.19.0)
neroxml (Version: 1.0.0)
nLite 1.4.9.1 (Version: 1.4.9.1)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
pcwPatchLoader 2.2.4
PL-2303 USB-to-Serial (Version: 1.7.0)
Platform (Version: 1.38)
PowerISO
QNAP Finder
QNAP NetBak Replicator
QNAP Surveillance Station
RadioRage Toolbar
Realtek High Definition Audio Driver (Version: 6.0.1.6037)
Ricochet
RippMe (Version: 3.03)
Rossmann Fotowelt Software 4.12.1 (Version: 4.12.1)
Samsung Kies (Version: 2.5.0.12104_15)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0)
ScanWizard 5
SDFormatter (Version: 3.0.0)
SmartPhotoRefresh
Sokoban YASC
Spybot - Search & Destroy (Version: 2.1.19)
Steam (Version: 1.0.0.0)
Steuer-Spar-Erklärung 2012 (Version: 17.13)
TeamViewer 8 (Version: 8.0.18930)
tools-linux (Version: 8.1.4.11056)
tools-windows (Version: 8.1.4.11056)
Turbo Lister 2 (Version: 2.00.0000)
Unlocker 1.9.1-x64 (Version: 1.9.1)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office Outlook 2007 (KB2412171)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Outlook 2007 Junk Email Filter (KB2492475)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Update Manager (Version: 4.60)
UseNeXT
VIA Plattform-Geräte-Manager (Version: 1.38)
VideoMizer (Version: 1.2.12.705)
VLC media player 1.1.11 (Version: 1.1.11)
VMware Player (Version: 3.0.1.11056)
Windows 7 USB/DVD Download Tool (Version: 1.0.30)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows XP Mode (Version: 1.3.7600.16422)
WinISO (Version: 6.3.0.4836)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
WinSetupFromUSB
WinX DVD Ripper 5.5.10
World of Warcraft (Version: 5.0.4.16016)
XML Copy Editor 1.2.0.6

==================== Restore Points  =========================

14-06-2013 15:16:24 Steuer-Spar-Erklärung 2010 wurde entfernt.
14-06-2013 15:17:09 Steuer-Spar-Erklärung 2011 wurde entfernt.
14-06-2013 15:17:44 Removed SOTI Pocket Controller-Pro
14-06-2013 15:19:40 Steuer-Spar-Erklärung 2012 wurde entfernt.
14-06-2013 15:20:21 Removed AAVUpdateManager.
14-06-2013 15:30:34 Steuer-Spar-Erklärung 2012 wurde installiert.
14-06-2013 15:33:22 Installed AAVUpdateManager.
14-06-2013 15:34:09 Steuer-Spar-Erklärung 2012 wurde entfernt.
14-06-2013 15:34:50 Steuer-Spar-Erklärung 2012 wurde installiert.

==================== Faulty Device Manager Devices =============

Name: VMware VMparport
Description: VMware VMparport
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: VMparport
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/15/2013 04:23:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (06/15/2013 03:40:37 PM) (Source: Application Hang) (User: )
Description: Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 198c

Startzeit: 01ce69cd42f40033

Endzeit: 0

Anwendungspfad: C:\Users\Siergbert\Desktop\OTL.exe

Berichts-ID:

Error: (06/15/2013 03:20:21 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: APP_Register, location: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe, command: /r,

Error: (06/15/2013 03:20:19 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: APP_Register, location: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe, command: /r,

Error: (06/15/2013 03:19:48 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.  Action DWUS_Schedule.C3A146F5_4B48_11D5_A819_00B0D0428C0C, location: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\, command: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe /ssi{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA},30:CEBCB7A8D9ABA0385EACB71899EC978FBE8C108FDE8BB78FCE4C279FF90B80D8C99BB098D9AC Default

Error: (06/15/2013 03:19:46 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.  Action DWUS_Bootstrap.C3A146F5_4B48_11D5_A819_00B0D0428C0C, location: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\, command: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe -bootstrap

Error: (06/15/2013 02:09:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.

Error: (06/15/2013 02:01:00 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1904.Module C:\Windows\Downloaded Program Files\dwusplay.dll failed to register.  HRESULT -1073741502.  Contact your support personnel.

Error: (06/15/2013 02:00:59 PM) (Source: MsiInstaller) (User: SIEGBERT-ARB)
Description: Product: Update Manager -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.  Action DWUS_Bootstrap.C3A146F5_4B48_11D5_A819_00B0D0428C0C, location: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\, command: C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe -bootstrap

Error: (06/15/2013 02:00:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.1.7601.18103, Zeitstempel: 0x512d9f39
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005055a
ID des fehlerhaften Prozesses: 0x428
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3


System errors:
=============
Error: (06/15/2013 04:18:54 PM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (06/15/2013 04:18:54 PM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (06/15/2013 04:18:54 PM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (06/15/2013 04:18:54 PM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (06/15/2013 04:18:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Printer Control" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/15/2013 04:18:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VMware VMparport" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%20

Error: (06/15/2013 04:18:16 PM) (Source: BugCheck) (User: )
Description: 0x00000109 (0xa3a039d8beef7a59, 0xb3b7465f116dba3b, 0xfffff880020af6c0, 0x0000000000000002)C:\Windows\Minidump\061513-18127-01.dmp061513-18127-01

Error: (06/15/2013 04:18:16 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ?15.?06.?2013 um 16:13:20 unerwartet heruntergefahren.

Error: (06/15/2013 03:20:22 PM) (Source: DCOM) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\agent.exe -Embedding5{FFF2D28F-E4EE-44D9-8104-8E71556757F6}

Error: (06/15/2013 03:20:18 PM) (Source: DCOM) (User: )
Description: {FFF2D28F-E4EE-44D9-8104-8E71556757F6}


Microsoft Office Sessions:
=========================
Error: (04/25/2011 08:20:03 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 15 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/25/2011 08:17:55 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 12 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 14%
Total physical RAM: 20471.11 MB
Available physical RAM: 17571.65 MB
Total Pagefile: 22469.3 MB
Available Pagefile: 19365.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (Windows 7) (Fixed) (Total:120 GB) (Free:30.99 GB) NTFS (Disk=1 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:345.75 GB) (Free:221.72 GB) NTFS (Disk=1 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 10FB2535)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A7A7A7A7)
Partition 1: (Active) - (Size=120 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=346 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Gruss cyborg111

Perfekt

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo
habe Combofix durchlaufen lassen. Ich konnte aber spybot nicht beenden.Ich hoffe das ist kein problem.

MFG
cyborg111

ComboFix 13-06-15.01 - Siergbert 16.06.2013  10:44:40.1.8 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.20471.17896 [GMT 2:00]
ausgeführt von:: c:\users\Siergbert\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\RadioRage_4j
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jauxstb.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbar.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbarsvc.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbprtct.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbrmon.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbrstub.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jdatact.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jdlghk.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jdyn.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jfeedmg.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jhighin.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jhkstub.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jhtmlmu.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jhttpct.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jidle.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jieovr.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jimpipe.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jmedint.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jmlbtn.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jmsg.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jPlugin.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jradio.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jregfft.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jreghk.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jregiet.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jscript.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jskin.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jsknlcr.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jskplay.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jSrcAs.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jSrchMn.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\4jtpinst.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\4juabtn.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\BOOTSTRAP.JS
c:\program files (x86)\RadioRage_4j\bar\1.bin\CHROME.MANIFEST
c:\program files (x86)\RadioRage_4j\bar\1.bin\chrome\4jffxtbr.jar
c:\program files (x86)\RadioRage_4j\bar\1.bin\CREXT.DLL
c:\program files (x86)\RadioRage_4j\bar\1.bin\CrExtP4j.exe
c:\program files (x86)\RadioRage_4j\bar\1.bin\INSTALL.RDF
c:\program files (x86)\RadioRage_4j\bar\1.bin\installKeys.js
c:\program files (x86)\RadioRage_4j\bar\1.bin\LOGO.BMP
c:\program files (x86)\RadioRage_4j\bar\1.bin\NP4jStub.dll
c:\program files (x86)\RadioRage_4j\bar\1.bin\T8EXTEX.DLL
c:\program files (x86)\RadioRage_4j\bar\1.bin\T8EXTPEX.DLL
c:\program files (x86)\RadioRage_4j\bar\1.bin\T8HTML.DLL
c:\program files (x86)\RadioRage_4j\bar\1.bin\T8RES.DLL
c:\program files (x86)\RadioRage_4j\bar\1.bin\T8TICKER.DLL
c:\program files (x86)\RadioRage_4j\bar\gen1\COMMON.T8S
c:\program files (x86)\RadioRage_4j\bar\IE9Mesg\COMMON.T8S
c:\program files (x86)\RadioRage_4j\bar\Message\COMMON.T8S
c:\program files (x86)\RadioRage_4j\bar\Settings\s_pid.dat
c:\users\Internet\AppData\Roaming\chromebrowser.exe
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-05-16 bis 2013-06-16  ))))))))))))))))))))))))))))))
.
.
2013-06-16 08:48 . 2013-06-16 08:48	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-06-16 08:48 . 2013-06-16 08:48	--------	d-----w-	c:\users\Internet\AppData\Local\temp
2013-06-16 08:48 . 2013-06-16 08:48	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2013-06-15 20:11 . 2013-06-15 20:11	27760	----a-w-	c:\windows\system32\drivers\ggsemc.sys
2013-06-15 20:11 . 2013-06-15 20:11	14448	----a-w-	c:\windows\system32\drivers\ggflt.sys
2013-06-15 20:10 . 2013-06-15 20:10	--------	d-----w-	c:\program files (x86)\Sony Ericsson
2013-06-15 20:05 . 2013-06-15 20:05	--------	d-----w-	c:\program files (x86)\Sony
2013-06-15 15:42 . 2013-06-15 15:42	--------	d-----w-	C:\FRST
2013-06-14 21:45 . 2013-05-13 23:48	9460464	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{588C9372-2ACD-40B0-9C6C-65558EB7F073}\mpengine.dll	ERROR(0x00000005)
2013-06-14 15:31 . 2013-06-14 15:35	--------	d-----w-	c:\program files (x86)\Akademische Arbeitsgemeinschaft
2013-06-14 13:58 . 2013-06-14 13:58	--------	d-----w-	c:\users\Siergbert\AppData\Roaming\QuickScan
2013-06-13 11:22 . 2013-06-13 11:22	--------	d-----w-	c:\users\Online Surfen
2013-06-12 09:12 . 2013-03-26 15:59	92256	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\BingDesktop\Updater\BingDesktopRestarter.exe	ERROR(0x00000005)
2013-06-12 08:41 . 2013-05-17 01:25	257536	----a-w-	c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-06-12 08:41 . 2013-05-17 01:25	235520	----a-w-	c:\program files (x86)\Internet Explorer\IEShims.dll
2013-06-12 08:41 . 2013-05-17 00:58	701952	----a-w-	c:\program files\Internet Explorer\ieproxy.dll
2013-06-12 08:41 . 2013-05-17 00:58	356352	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2013-06-12 08:37 . 2013-06-08 14:08	1365504	----a-w-	c:\windows\system32\urlmon.dll
2013-06-12 08:36 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-06-12 08:30 . 2013-06-12 08:30	--------	d-----w-	c:\program files (x86)\Common Files\Java
2013-06-12 08:30 . 2013-04-04 03:35	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-12 05:33 . 2009-01-25 11:14	17272	----a-w-	c:\windows\system32\sdnclean64.exe
2013-06-12 05:33 . 2013-06-12 05:33	--------	d-----w-	c:\program files (x86)\Spybot - Search & Destroy 2
2013-06-04 07:15 . 2013-06-04 07:15	103448	----a-w-	c:\windows\system32\drivers\ssudbus.sys
2013-06-04 07:15 . 2013-06-04 07:15	203672	----a-w-	c:\windows\system32\drivers\ssudmdm.sys
2013-06-02 17:46 . 2013-06-02 17:46	--------	d-sh--r-	c:\users\Internet\AppData\Roaming\Qwapatka
2013-06-02 17:45 . 2013-06-06 20:25	--------	d-----w-	c:\users\Internet\AppData\Roaming\noc
2013-05-28 10:05 . 2013-05-28 10:05	--------	d-----w-	C:\Medion
2013-05-26 14:16 . 2013-06-02 18:09	--------	d-----w-	c:\users\Internet\AppData\Local\Mozilla Firefox
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 08:41 . 2010-04-07 18:52	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-06-12 03:19 . 2012-08-05 08:48	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 03:19 . 2011-05-25 10:48	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-17 03:54 . 2011-08-11 07:30	22240	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig600.dll	ERROR(0x00000005)
2013-05-13 23:48 . 2010-04-07 19:10	9460464	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll	ERROR(0x00000005)
2013-05-07 12:36 . 2013-05-07 12:36	83160	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-05-02 00:06 . 2010-03-27 16:28	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-15 23:15	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 23:15	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 23:15	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 23:15	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 23:15	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 23:15	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 02:17	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-10 06:01 . 2013-05-15 23:15	265064	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-15 23:15	983400	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-15 23:15	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-03-29 07:26 . 2013-04-14 07:59	204032	----a-w-	c:\windows\system32\drivers\WinisoCDBus.sys
2013-03-27 18:03 . 2013-03-27 18:03	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-03-27 18:03 . 2013-03-27 18:03	130016	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-03-27 18:03 . 2013-03-27 18:03	100712	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-03-19 06:04 . 2013-04-10 07:10	5550424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-03-19 05:53 . 2013-05-15 23:15	48640	----a-w-	c:\windows\system32\wwanprotdim.dll
2013-03-19 05:53 . 2013-05-15 23:15	230400	----a-w-	c:\windows\system32\wwansvc.dll
2013-03-19 05:46 . 2013-04-10 07:10	43520	----a-w-	c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 07:10	3968856	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 07:10	3913560	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 07:10	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 07:10	112640	----a-w-	c:\windows\system32\smss.exe
2012-05-11 12:16 . 2012-05-11 12:16	171520	----a-w-	c:\program files (x86)\Common Files\dsfOggDemux2.dll
2011-04-18 20:51 . 2011-04-18 20:51	653136	----a-w-	c:\program files (x86)\Common Files\MSVCR90.dll
2011-04-18 20:51 . 2011-04-18 20:51	569680	----a-w-	c:\program files (x86)\Common Files\MSVCP90.dll
2011-01-12 00:00 . 2011-01-12 00:00	30208	----a-w-	c:\program files (x86)\Common Files\wmpinfo.dll
2011-01-12 00:00 . 2011-01-12 00:00	240128	----a-w-	c:\program files (x86)\Common Files\dsfVorbisDecoder.dll
2011-01-12 00:00 . 2011-01-12 00:00	146944	----a-w-	c:\program files (x86)\Common Files\dsfFLACDecoder.dll
2011-01-12 00:00 . 2011-01-12 00:00	221184	----a-w-	c:\program files (x86)\Common Files\dsfFLACEncoder.dll
2011-01-12 00:00 . 2011-01-12 00:00	204800	----a-w-	c:\program files (x86)\Common Files\dsfNativeFLACSource.dll
2010-12-16 19:39 . 2010-12-16 19:39	302592	----a-w-	c:\program files (x86)\Common Files\webmmux.dll
2010-12-16 19:39 . 2010-12-16 19:39	701440	----a-w-	c:\program files (x86)\Common Files\vp8encoder.dll
2010-12-16 19:39 . 2010-12-16 19:39	412672	----a-w-	c:\program files (x86)\Common Files\vp8decoder.dll
2010-12-16 19:39 . 2010-12-16 19:39	292352	----a-w-	c:\program files (x86)\Common Files\webmsplit.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-03-10 1521800]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2013-03-10 21:38	1521800	----a-w-	c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-03-10 1521800]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2013-05-16 3642312]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-03-18 448736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"VMware hqtray"="c:\program files (x86)\VMware\VMware Player\hqtray.exe" [2010-01-22 64048]
"QNAP_NASNetBak"="c:\program files (x86)\QNAP\NetBak\NetBak.exe" [2010-04-14 720896]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-03-10 1644680]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-05-07 345312]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-05-16 3830224]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Scanner Finder.lnk - c:\program files (x86)\ScanWizard 5\ScannerFinder.exe [2011-12-23 356352]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Printer Control;Printer Control;c:\windows\system32\PrintCtrl.exe;c:\windows\SYSNATIVE\PrintCtrl.exe [x]
R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys;c:\windows\SYSNATIVE\drivers\cmudax.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rt70x64;RT2500 USB Wireless LAN Driver for Vista;c:\windows\system32\DRIVERS\netr7064.sys;c:\windows\SYSNATIVE\DRIVERS\netr7064.sys [x]
R3 RTL8023x64;Realtek 10/100-Netzwerkkartenfamilie-NDIS-x64-Treiber;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WBSCR;Winbond SmartCard Reader for I/O;c:\windows\system32\drivers\wbscr_x64.sys;c:\windows\SYSNATIVE\drivers\wbscr_x64.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AAV UpdateService;AAV UpdateService;c:\program files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe;c:\program files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 RadioRage_4jService;RadioRageService;c:\progra~2\RADIOR~2\bar\1.bin\4jbarsvc.exe;c:\progra~2\RADIOR~2\bar\1.bin\4jbarsvc.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys;c:\windows\SYSNATIVE\drivers\vmci.sys [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [x]
S2 WinisoCDBus;WinISO Virtual CD Drive;c:\windows\system32\drivers\WinisoCDBus.sys;c:\windows\SYSNATIVE\drivers\WinisoCDBus.sys [x]
S3 cjusb;REINER SCT cyberJack pinpad/e-com USB;c:\windows\system32\DRIVERS\cjusb.sys;c:\windows\SYSNATIVE\DRIVERS\cjusb.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 PAC207;SoC PC-Camera;c:\windows\system32\DRIVERS\PFC027.SYS;c:\windows\SYSNATIVE\DRIVERS\PFC027.SYS [x]
S3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\DRIVERS\ViaHub3.sys;c:\windows\SYSNATIVE\DRIVERS\ViaHub3.sys [x]
S3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys;c:\windows\SYSNATIVE\DRIVERS\xhcdrv.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs	REG_MULTI_SZ   	w3svc was
apphost	REG_MULTI_SZ   	apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 09:14	451872	----a-w-	c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-05 03:19]
.
2013-06-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-13 11:47]
.
2013-06-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-13 11:47]
.
2013-06-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1001Core.job
- c:\users\Siergbert\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-13 06:57]
.
2013-06-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1001UA.job
- c:\users\Siergbert\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-13 06:57]
.
2013-06-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005Core.job
- c:\users\Internet\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-02 17:46]
.
2013-06-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-653235695-442421164-2126622450-1005UA.job
- c:\users\Internet\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-02 17:46]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"="c:\windows\Syswow64\cmicnfg.cpl" [2010-03-27 3928064]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-02-18 415816]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2010-02-18 2093128]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-02-18 4271688]
"PrintDisp"="c:\windows\system32\PrintDisp.exe" [2009-06-22 864768]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-29 10038304]
"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]
"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]
"VIAxHCUtl"="c:\via_xhci\usb3Monitor.exe" [2012-03-26 331776]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 660360]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = localhost:21320
IE: add to &BOM - c:\\PROGRA~2\\BIET-O~1\\\\AddToBOM.hta
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.178.1
DPF: {2F0D96B4-7D9D-4767-A657-F7ECC9114886} - hxxp://192.168.178.31/IPCamPluginDMPT.cab
DPF: {369383F8-C8B7-42E1-819E-D47E3ABAD4BC} - hxxp://192.168.178.29:8080/cgi-bin/QNAPG726.cab
DPF: {4DA8C6E4-312A-4A8F-B02B-491B2BF09CF2} - hxxp://192.168.178.29:8080/cgi-bin/QNAPQ264.cab
DPF: {603E0052-7B06-496B-A04B-192419174876} - hxxp://192.168.178.29:8080/cgi-bin/QNAPQIVG.cab
DPF: {937FE81C-FECF-4A55-9754-49D6D6550EDC} - hxxp://192.168.178.29:8080/cgi-bin/NNVRVMon.cab
DPF: {B824D61F-DAF3-40BF-BA5E-430D250FF51C} - hxxp://192.168.178.29:8080/cgi-bin/QNAPQMP4.cab
DPF: {F5F2CE2F-C516-4428-8758-7178B1E1ABAB} - hxxp://192.168.178.29:8080/cgi-bin/QNAPQVivoTek.cab
FF - ProfilePath - c:\users\Siergbert\AppData\Roaming\Mozilla\Firefox\Profiles\cscwwvzo.default-1370976845702\
FF - prefs.js: browser.startup.homepage - hxxp://www.ebay.de/|hxxp://www.google.de/
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{48909954-14fb-4971-a7b3-47e7af10b38a} - c:\progra~2\RADIOR~2\bar\1.bin\4jbar.dll
BHO-{5848763c-2668-44ca-adbe-2999a6ee2858} - c:\program files (x86)\RadioRage_4j\bar\1.bin\4jSrcAs.dll
Toolbar-10 - (no file)
Toolbar-{78ba36c9-6036-482b-b48d-ecca6f964b84} - c:\program files (x86)\RadioRage_4j\bar\1.bin\4jbar.dll
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-RadioRage Search Scope Monitor - c:\progra~2\RADIOR~2\bar\1.bin\4jsrchmn.exe
Wow6432Node-HKLM-Run-RadioRage_4j Browser Plugin Loader - c:\progra~2\RADIOR~2\bar\1.bin\4jbrmon.exe
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-10 - (no file)
AddRemove-FRITZ! 2.0 - c:\windows\IsUn0407.exe
AddRemove-QNAP_NASNetBak - c:\windows\system32\qnapuninstall.exe
AddRemove-Steam App 340 - h:\programme\Steam\steam.exe
AddRemove-Steam App 60 - h:\programme\Steam\steam.exe
AddRemove-_{ADDBE07D-95B8-4789-9C76-187FFF9624B4} - c:\program files (x86)\Corel\CorelDRAW Essential Edition 3\Programs\MSILauncher {ADDBE07D-95B8-4789-9C76-187FFF9624B4}
AddRemove-WinSetupFromUSB - c:\winsetupfromusb\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000004
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-16  10:50:15
ComboFix-quarantined-files.txt  2013-06-16 08:50
.
Vor Suchlauf: 18 Verzeichnis(se), 29.694.545.920 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 29.265.833.984 Bytes frei
.
- - End Of File - - 125DCE7744350435BC5031D38688BC17
D41D8CD98F00B204E9800998ECF8427E
         

Danke noch mal für deine Hilfe. Hab leider immer noch keine Ahnung was da los ist bei mir

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST Log. Noch Probleme?

Alles erledigt hier die ganzen Files.

 AdwCleaner v2.303 - Datei am 16/06/2013 um 12:59:26 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzer : Siergbert - SIEGBERT-ARB
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Siergbert\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\user.js
Datei Gelöscht : C:\Users\Public\Desktop\iLivid.lnk
Datei Gelöscht : C:\Users\Siergbert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickStores.url
Datei Gelöscht : C:\Users\Siergbert\AppData\Roaming\Microsoft\Windows\Start Menu\QuickStores.url
Ordner Gelöscht : C:\Program Files (x86)\AddLyrics
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\Ilivid
Ordner Gelöscht : C:\Program Files (x86)\Perion
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\ParetoLogic
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\byg50k4q.default\extensions\4jffxtbr@RadioRage_4j.com
Ordner Gelöscht : C:\Users\Internet\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Internet\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Online Surfen\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Online Surfen\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\AddLyrics
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\APN
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Ordner Gelöscht : C:\Users\Siergbert\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\incredibar.com
Ordner Gelöscht : C:\Users\Siergbert\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Siergbert\AppData\Roaming\DriverCure
Ordner Gelöscht : C:\Users\Siergbert\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Siergbert\AppData\Roaming\ParetoLogic
Ordner Gelöscht : C:\Windows\assembly\GAC_MSIL\QuickStoresToolbar
Ordner Gelöscht : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\5355dd8be03de412
Schlüssel Gelöscht : HKLM\Software\APN
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ilivid
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\ExpressFiles
Schlüssel Gelöscht : HKLM\Software\IB Updater
Schlüssel Gelöscht : HKLM\Software\ilivid
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Software
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\Siergbert\AppData\Roaming\Mozilla\Firefox\Profiles\cscwwvzo.default-1370976845702\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\i1ukk8vx.default-1370887277106\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\byg50k4q.default\prefs.js

Gelöscht : user_pref("quickstores.toolbar.affid", "2017");
Gelöscht : user_pref("quickstores.toolbar.guid", "{1A727E01-73D6-4B14-C5E5-A8236A22B75B}");

-\\ Google Chrome v27.0.1453.110

Datei : C:\Users\Siergbert\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.32] : icon_url = "hxxp://www.delta-search.com/favicon.ico",
Gelöscht [l.35] : keyword = "delta-search.com",
Gelöscht [l.38] : search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119556&babsrc=SP_ss&mntrId[...]
Gelöscht [l.705] : homepage = "hxxp://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntrId=8c3bd18c0000000000000[...]

Datei : C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [16220 octets] - [16/06/2013 12:59:26]

########## EOF - C:\AdwCleaner[S1].txt - [16281 octets] ##########
         

und

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Ultimate x64
Ran by Siergbert on 16.06.2013 at 13:07:14,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] radiorage_4jservice 
Successfully deleted: [Service] radiorage_4jservice 



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{110a9ea2-8810-4c04-b916-cfd4e9427fec}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33C55BE3-0F37-4B71-B9D8-A4B15891F6FB}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{110a9ea2-8810-4c04-b916-cfd4e9427fec}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48909954-14FB-4971-A7B3-47E7AF10B38A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5848763C-2668-44CA-ADBE-2999A6EE2858}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Siergbert\appdata\local\radiorage_4j"
Successfully deleted: [Folder] "C:\Users\Siergbert\appdata\locallow\radiorage_4j"
Successfully deleted: [Empty Folder] C:\Users\Siergbert\appdata\local\{1086A54F-8A4D-4E0E-B0F4-FE414E84A389}
Successfully deleted: [Empty Folder] C:\Users\Siergbert\appdata\local\{1A30B2F0-D11A-42F3-B2BC-BF6EF17C50AD}
Successfully deleted: [Empty Folder] C:\Users\Siergbert\appdata\local\{AF66C197-0499-4EEB-A505-075D99375298}



~~~ FireFox

Emptied folder: C:\Users\Siergbert\AppData\Roaming\mozilla\firefox\profiles\cscwwvzo.default-1370976845702\minidumps [2 files]



~~~ Chrome

Successfully deleted: [Registry Key] hkey_local_machine\software\policies\google\chrome\extensioninstallforcelist



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.06.2013 at 13:09:50,06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

und

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=90c1c8c288f01044bfb1d309c6d6d065
# engine=14085
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-16 12:25:33
# local_time=2013-06-16 02:25:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 79255 236808823 12229 0
# compatibility_mode=5893 16776573 100 94 3929 123015383 0 0
# scanned=244756
# found=6
# cleaned=0
# scan_time=3384
sh=2D68A09E2DE3BA3CA54B32C0342C360B342915BF ft=0 fh=0000000000000000 vn="BAT/CoinMiner.BB trojan" ac=I fn="C:\Users\Internet\AppData\Roaming\noc\1.bat"
sh=9E1C23C22AB811DCB25443A9752CB5A934EAD4A1 ft=0 fh=0000000000000000 vn="BAT/CoinMiner.BB trojan" ac=I fn="C:\Users\Internet\AppData\Roaming\noc\dan.bat"
sh=15A2917873048CA631801FF39731CC510F80EFD8 ft=1 fh=9194ec692ec7f912 vn="a variant of Win32/Agent.PRC trojan" ac=I fn="C:\Users\Internet\AppData\Roaming\Qwapatka\Qwapatka.scr"
sh=10B5F79764735857B8194A414BE9B94EAC7AF6EA ft=1 fh=25f8e4c1b8435103 vn="a variant of Win32/Dialer.ALifeDialer application" ac=I fn="D:\Eigene Dateien\Hacking\cgiscan.exe"
sh=547AF5F27541B3B4AC3AB511A57C7495C54AC23B ft=1 fh=5d37c07a45ebca62 vn="a variant of Win32/Dialer.ALifeDialer application" ac=I fn="D:\Eigene Dateien\Hacking\Evidence Eliminator.exe"
sh=5C7F2A32FA9DA09E326268705080EA51500473A6 ft=1 fh=1e8df37be03a636f vn="a variant of Win32/Dialer.ALifeDialer application" ac=I fn="D:\Eigene Dateien\Hacking\ICQrInformation.exe"
         

und

 Results of screen317's Security Check version 0.99.64  
 Windows 7 Service Pack 1 x64   
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Java 7 Update 21  
 Java(TM) SE Development Kit 6 Update 20 
 JavaFX(TM) 1.3 SDK   
 Adobe Flash Player 11.7.700.224  
 Mozilla Firefox (21.0) 
 Google Chrome 26.0.1410.64  
 Google Chrome 27.0.1453.110  
````````Process Check: objlist.exe by Laurent````````  
 Spybot Teatimer.exe is disabled! 
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

und zu guter letzt

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-06-16 15:37:10
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Scsi\mv91xx1Port4Path0Target1Lun0 SAMSUNG_ rev.CR10 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\SIERGB~1\AppData\Local\Temp\uxtorkow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe[1456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69        0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe[1456] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155       00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe[2056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[2396] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69             0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[2396] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155            00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!GetMenu + 412                         0000000076a451dd 7 bytes JMP 0000000110053ac0
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!PeekMessageA + 407                    0000000076a4610b 7 bytes JMP 0000000110053c10
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!CreateDialogIndirectParamW + 131      0000000076a4c6c1 7 bytes JMP 0000000110053bf0
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectA + 199             0000000076a8fc98 7 bytes JMP 0000000110053c60
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectW + 52              0000000076a8fcd1 7 bytes JMP 0000000110053d30
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\USER32.dll!MessageBoxExA + 31                    0000000076a8fcf5 7 bytes JMP 0000000110053ce0
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69              0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155             00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe[5388] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075231465 2 bytes [23, 75]
.text  C:\Program Files\Logitech\GamePanel Software\Applets\ColorOnly\LCDYT.exe[5388] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[5504] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69              0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[5504] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155             00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2
.text  C:\Program Files (x86)\Windows Media Player\wmplayer.exe[6596] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                   0000000075231465 2 bytes [23, 75]
.text  C:\Program Files (x86)\Windows Media Player\wmplayer.exe[6596] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                  00000000752314bb 2 bytes [23, 75]
.text  ...                                                                                                                                      * 2

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001109e45a82                                                              
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001109e45a82 (not active ControlSet)                                          

---- Files - GMER 2.1 ----

File   C:\Users\Siergbert\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D5VAB1FY\clients[2].txt                          1 bytes

---- EOF - GMER 2.1 ----
         

jetzt bin ich mal gespannt

danke für die Hilfe
MFG
cyborg111

FRST, nicht Gmer