WindowsXP: Avast meldet Virenbefall

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 01-08-2013 01
Ran by Ralf at 2013-08-19 19:01:38 Run:1
Running from C:\Dokumente und Einstellungen\Ralf\Desktop
Boot Mode: Normal

==============================================

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SW20 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SW24 => Value deleted successfully.
C:\WINDOWS\system32\sw20.exe => Moved successfully.
C:\WINDOWS\system32\sw24.exe => Moved successfully.
C:\Windows\Installer\{15d4169e-adfb-ab0e-787d-099ede78ebac} => Moved successfully.
"C:\Windows\Installer\{15d4169e-adfb-ab0e-787d-099ede78ebac}\@" => File/Directory not found.

==== End of Fixlog ====
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-08-2013 01 (ATTENTION: ====> FRST version is 18 days old and could be outdated)
Ran by Ralf (administrator) on 19-08-2013 19:02:38
Running from C:\Dokumente und Einstellungen\Ralf\Desktop
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe
(DATEV e.G.) C:\DATEV\PROGRAMM\B0001364\DtvScSer.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0001442\PSNTSERV.EXE
(DATEV eG) C:\DATEV\PROGRAMM\B0000150\ScServer\DVckService.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(DATEV eG) C:\DATEV\PROGRAMM\B0000398\SiPaHost.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0000150\ScWTS\DVCCSAWTSSetEntryNTE.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0000347\ScMgmt\ScardManager.exe
() C:\WINDOWS\samsung\panelmgr\SSMMgr.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\avastUI.exe
(Microsoft Corporation) C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(KOBIL Systems GmbH) C:\DATEV\PROGRAMM\B0000404\msdisrv.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\sqlservr.exe
() C:\Programme\CDBurnerXP\NMSAccessU.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0000347\ScMgmt\SCardService.exe
(Secunia) C:\Programme\Secunia\PSI\sua.exe
(Datev eG) C:\DATEV\PROGRAMM\B0000398\SiPaHostService.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0001363\SCmIdentityScanner.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
(DATEV eG) C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdhost.exe
(DATEV eG) C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16208384 2006-05-27] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SkyTel] - C:\Windows\SkyTel.EXE [2879488 2006-05-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SiPaHost] - C:\DATEV\PROGRAMM\B0000398\SiPaHost.exe [595552 2011-05-09] (DATEV eG)
HKLM\...\Run: [DVCCSAWTSSetEntryNTE] - C:\DATEV\PROGRAMM\B0000150\ScWTS\DVCCSAWTSSetEntryNTE.exe [549472 2011-06-28] (DATEV eG)
HKLM\...\Run: [DATEV_SCardMan] - C:\DATEV\PROGRAMM\B0000347\ScMgmt\ScardManager.exe [368736 2010-09-22] (DATEV eG)
HKLM\...\Run: [Samsung PanelMgr] - C:\WINDOWS\samsung\panelmgr\SSMMgr.exe [692224 2012-02-15] ()
HKLM\...\Run: [DATEV Update-Monitor] - C:\DATEV\PROGRAMM\Install\DvInesASDMon.Exe [288352 2012-08-30] (DATEV eG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avast] - C:\Programme\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
Winlogon\Notify\DVCCSA: DVCCSAnotify002.dll (DATEV eG)
HKCU\...\Run: [H/PC Connection Agent] - C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE [417871 2003-04-22] (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\CleanupPrintJobs.lnk
ShortcutTarget: CleanupPrintJobs.lnk -> C:\DATEV\PROGRAMM\B0001401\CleanupPrintJobs.exe (TODO: <Firmenname>)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\SkyUserDevmode-Update.lnk
ShortcutTarget: SkyUserDevmode-Update.lnk -> C:\DATEV\PROGRAMM\B0001401\UpdateDevmode.exe (DATEV eG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
BHO: DtvIePwdSafeBHO Class - {6EF6B546-25FB-455B-801F-FDB3B3D39F9E} - C:\DATEV\PROGRAMM\B0000397\DtvIePwdSafe.dll (DATEV eG)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: SCardBHOEvent Class - {AF8CD625-E04A-4A8F-A90A-0C74846C2E30} - C:\DATEV\SYSTEM\DVCCSAScardBHO002.dll (DATEV eG)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1349797444478
DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} https://portal-inotes.linde.com/dwa7W.cab
Handler: ipp - No CLSID Value - 
Handler: mctp - {d7b95390-b1c5-11d0-b111-0080c712fe82} - C:\Programme\Microsoft ActiveSync\aatp.dll (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp - No CLSID Value - 
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Ralf\Anwendungsdaten\Mozilla\Firefox\Profiles\qzkzla7a.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Extension: No Name - C:\Dokumente und Einstellungen\Ralf\Anwendungsdaten\Mozilla\Firefox\Profiles\qzkzla7a.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF Extension: Default - C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] C:\Programme\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Programme\AVAST Software\Avast\WebRep\FF

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 DATEV Logon Service; C:\DATEV\PROGRAMM\B0001364\DtvScSer.exe [406112 2010-09-03] (DATEV e.G.)
S3 DATEV Update-Service; C:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe [157792 2012-07-03] (DATEV eG)
R2 DatevPrintService; C:\DATEV\PROGRAMM\B0001442\PSNTSERV.EXE [87040 2012-06-14] (DATEV eG)
R2 DVckService; C:\DATEV\PROGRAMM\B0000150\ScServer\DVckService.exe [2409056 2011-06-28] (DATEV eG)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-11-15] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-11-15] (Google Inc.)
R2 KOBIL_MSDI; C:\DATEV\PROGRAMM\B0000404\msdisrv.exe [194144 2010-08-25] (KOBIL Systems GmbH)
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [117656 2013-08-19] (Mozilla Foundation)
R2 MSSQL$DATEV_DBENGINE; C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\sqlservr.exe [43040096 2011-06-17] (Microsoft Corporation)
S4 MSSQLServerADHelper100; C:\Programme\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [44896 2010-04-03] (Microsoft Corporation)
R2 NMSAccess; C:\Programme\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [441136 2006-10-26] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
R2 SCardService; C:\DATEV\PROGRAMM\B0000347\ScMgmt\SCardService.exe [292960 2010-09-22] (DATEV eG)
S3 Secunia PSI Agent; C:\Programme\Secunia\PSI\PSIA.exe [1326176 2012-07-25] (Secunia)
R2 Secunia Update Agent; C:\Programme\Secunia\PSI\sua.exe [681056 2012-07-25] (Secunia)
R2 Sicherheitspaket-Dienst; C:\DATEV\PROGRAMM\B0000398\SiPaHostService.exe [271456 2011-05-09] (Datev eG)
S4 SQLAgent$DATEV_DBENGINE; C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\SQLAGENT.EXE [370016 2011-06-17] (Microsoft Corporation)
R2 SQLBrowser; C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe [267616 2010-04-03] (Microsoft Corporation)
R2 SQLWriter; C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe [97632 2010-04-03] (Microsoft Corporation)
S3 AppMgmt; %SystemRoot%\System32\appmgmts.dll [x]
S3 Datev.Database.Conserve; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe Datev.Database.Conserve SvcRunLevel=1000 [x]
R2 Datev.Framework.RemoteServiceModel.EnablerService; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe Datev.Framework.RemoteServiceModel.EnablerService -SvcRunLevel=9999 -Single [x]
R3 Datev.Framework.RemoteServices; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe Datev.Framework.RemoteServices -SvcRunLevel=1000 -Single [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" [x]
R3 MSSQLFDLauncher$DATEV_DBENGINE; "C:\Programme\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdlauncher.exe" -s MSSQL10_50.DATEV_DBENGINE [x]

==================== Drivers (Whitelisted) ====================

R2 ACEDRV08; C:\WINDOWS\system32\drivers\ACEDRV08.sys [108768 2010-07-11] (Protect Software GmbH)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-07-25] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-07-25] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-07-25] ()
R3 AVMWAN; C:\Windows\System32\DRIVERS\avmwan.sys [37568 2001-08-17] (AVM GmbH)
R2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [41984 2007-01-17] (Samsung Electronics Co., Ltd.)
S3 DWCOM; C:\Windows\System32\DRIVERS\dwcom.sys [30592 2009-11-23] (DENSO WAVE INC.)
R3 fpcibase; C:\Windows\System32\DRIVERS\fpcibase.sys [444416 2001-08-17] (AVM GmbH)
R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [144384 2008-04-13] (Windows (R) Server 2003 DDK provider)
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [18688 2001-08-17] (Microsoft Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 nvata; C:\Windows\System32\DRIVERS\nvata.sys [100736 2006-04-24] (NVIDIA Corporation)
R3 NVENETFD; C:\Windows\System32\DRIVERS\NVENETFD.sys [52736 2006-03-22] (NVIDIA Corporation)
R3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [18944 2006-03-22] (NVIDIA Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf.sys [15544 2010-09-01] (Secunia)
R3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
S4 RsFx0151; C:\Windows\System32\DRIVERS\RsFx0151.sys [240736 2011-06-17] (Microsoft Corporation)
R2 SC_SERV3D; C:\WINDOWS\system32\drivers\d3_kafm.sys [75320 2011-07-19] (Datev eG)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [685816 2010-07-11] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [31273 2003-02-22] (Microsoft Corporation)
S3 catchme; \??\C:\DOKUME~1\Ralf\LOKALE~1\Temp\catchme.sys [x]
S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [x]
S4 IntelIde; No ImagePath
S3 MSICPL; \??\E:\install4\MSICPL.sys [x]
S3 NTACCESS; \??\E:\NTACCESS.sys [x]
S3 SetupNTGLM7X; \??\E:\NTGLM7X.sys [x]
U3 TlntSvr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-19 18:41 - 2013-08-19 18:42 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Adobe
2013-08-19 18:41 - 2013-08-19 18:41 - 00000000 ____D C:\Programme\Adobe
2013-08-19 15:18 - 2013-08-19 15:19 - 00012930 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-19 15:06 - 2013-08-19 15:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-19 15:06 - 2013-08-19 15:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-19 15:05 - 2013-08-19 15:05 - 00005664 _____ C:\WINDOWS\KB2863058.log
2013-08-19 15:05 - 2013-08-19 15:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-19 15:05 - 2013-08-19 15:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-19 10:01 - 2013-08-19 18:47 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-08-19 09:06 - 2013-08-19 15:06 - 00011223 _____ C:\WINDOWS\KB2859537.log
2013-08-19 09:06 - 2013-08-19 15:06 - 00010371 _____ C:\WINDOWS\KB2850869.log
2013-08-12 22:22 - 2013-08-12 22:22 - 00027362 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\FRST3.txt
2013-08-12 22:19 - 2013-08-12 22:19 - 00000964 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\checkup.txt
2013-08-12 20:52 - 2013-08-12 20:52 - 00000000 ____D C:\Programme\ESET
2013-08-07 22:09 - 2013-08-07 22:09 - 00029988 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\FRST2.txt
2013-08-07 21:42 - 2013-08-07 21:42 - 00000756 _____ C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-07 21:39 - 2013-08-07 21:39 - 00001065 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\AdwCleaner[S1].txt
2013-08-07 21:35 - 2013-08-07 21:36 - 00001065 _____ C:\AdwCleaner[S1].txt
2013-08-07 15:01 - 2013-08-19 15:15 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-05 09:35 - 2013-08-05 09:35 - 00001887 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-08-04 22:11 - 2013-08-04 22:11 - 00014526 _____ C:\ComboFix.txt
2013-08-04 21:39 - 2013-08-04 21:39 - 00000000 _RSHD C:\cmdcons
2013-08-04 21:39 - 2010-07-11 19:21 - 00000211 _____ C:\Boot.bak
2013-08-04 21:39 - 2004-08-03 23:00 - 00262448 __RSH C:\cmldr
2013-08-04 21:38 - 2013-08-04 22:11 - 00000000 ____D C:\ComboFix
2013-08-04 21:26 - 2013-08-04 21:26 - 00000000 ___RD C:\Dokumente und Einstellungen\Ralf\Startmenü\Programme\Verwaltung
2013-08-04 21:26 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-08-04 21:26 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-08-04 21:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-08-04 21:26 - 2000-08-31 02:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-08-04 21:25 - 2013-08-04 22:11 - 00000000 ____D C:\Qoobox
2013-08-04 21:25 - 2013-08-04 22:10 - 00000000 ____D C:\WINDOWS\erdnt
2013-08-03 13:14 - 2013-08-03 13:14 - 00052163 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\GMER.text
2013-08-03 12:45 - 2013-08-03 12:46 - 00025476 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\Addition.txt
2013-08-03 12:44 - 2013-08-03 12:44 - 00000000 ____D C:\FRST
2013-08-03 12:37 - 2013-08-03 12:37 - 00000630 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\defogger_disable.log
2013-08-03 12:37 - 2013-08-03 12:37 - 00000020 _____ C:\Dokumente und Einstellungen\Ralf\defogger_reenable
2013-08-03 12:34 - 2013-08-03 12:34 - 00377856 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\gmer_2.1.19163.exe
2013-08-03 12:33 - 2013-08-03 12:33 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Ralf\Desktop\FRST.exe
2013-08-03 12:30 - 2013-08-03 12:30 - 00050477 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\Defogger.exe
2013-07-25 14:07 - 2013-08-19 18:57 - 00000304 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-07-25 14:07 - 2013-07-25 14:07 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00175176 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00001653 _____ C:\Dokumente und Einstellungen\All Users\Desktop\avast! Free Antivirus.lnk
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-07-25 14:07 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-07-25 14:07 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2013-07-25 14:07 - 2013-05-09 10:59 - 00049760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2013-07-25 14:07 - 2013-05-09 10:59 - 00049376 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-07-25 14:07 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-07-25 14:07 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-07-25 14:06 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-07-25 14:05 - 2013-07-25 14:05 - 00000000 ____D C:\Programme\AVAST Software

==================== One Month Modified Files and Folders =======

2013-08-19 18:57 - 2013-07-25 14:07 - 00000304 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-08-19 18:57 - 2010-07-11 19:25 - 01154780 _____ C:\WINDOWS\WindowsUpdate.log
2013-08-19 18:56 - 2010-07-11 19:44 - 00000053 _____ C:\biosinfo
2013-08-19 18:55 - 2010-11-15 10:22 - 00001082 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-19 18:55 - 2010-07-11 20:19 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-08-19 18:55 - 2010-07-11 20:19 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-08-19 18:55 - 2010-07-11 19:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-08-19 18:54 - 2010-07-11 19:30 - 00000190 ___SH C:\Dokumente und Einstellungen\Ralf\ntuser.ini
2013-08-19 18:54 - 2010-07-11 19:29 - 00032640 _____ C:\WINDOWS\SchedLgU.Txt
2013-08-19 18:51 - 2010-07-11 20:33 - 00000000 ____D D:\\Downloads
2013-08-19 18:47 - 2013-08-19 10:01 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-08-19 18:47 - 2012-05-03 09:15 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-08-19 18:47 - 2011-08-31 17:15 - 00000696 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2013-08-19 18:42 - 2013-08-19 18:41 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Adobe
2013-08-19 18:41 - 2013-08-19 18:41 - 00000000 ____D C:\Programme\Adobe
2013-08-19 18:41 - 2010-07-11 20:17 - 00000000 ___RD C:\Programme
2013-08-19 18:40 - 2010-07-11 19:30 - 00000000 ____D C:\Dokumente und Einstellungen\Ralf
2013-08-19 18:32 - 2010-11-15 10:22 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-19 18:14 - 2012-04-17 09:06 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-08-19 17:20 - 2010-07-11 20:58 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-08-19 16:33 - 2010-07-11 20:16 - 01027038 _____ C:\WINDOWS\setupapi.log
2013-08-19 16:33 - 2010-07-11 20:16 - 00173343 _____ C:\WINDOWS\setupact.log
2013-08-19 15:19 - 2013-08-19 15:18 - 00012930 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-19 15:19 - 2010-07-12 19:36 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-19 15:19 - 2010-07-11 20:17 - 01632002 _____ C:\WINDOWS\FaxSetup.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00791839 _____ C:\WINDOWS\ocgen.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00627008 _____ C:\WINDOWS\tsoc.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00551941 _____ C:\WINDOWS\comsetup.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00332701 _____ C:\WINDOWS\ntdtcsetup.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00259095 _____ C:\WINDOWS\iis6.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00090435 _____ C:\WINDOWS\ocmsn.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00081843 _____ C:\WINDOWS\msgsocm.log
2013-08-19 15:19 - 2010-07-11 20:17 - 00001374 _____ C:\WINDOWS\imsins.log
2013-08-19 15:19 - 2010-07-11 19:51 - 00213805 _____ C:\WINDOWS\updspapi.log
2013-08-19 15:18 - 2013-08-07 15:01 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-19 15:15 - 2010-07-13 15:38 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-19 15:08 - 2010-07-11 20:17 - 01484922 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-19 15:06 - 2013-08-19 15:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-19 15:06 - 2013-08-19 15:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-19 15:06 - 2013-08-19 09:06 - 00011223 _____ C:\WINDOWS\KB2859537.log
2013-08-19 15:06 - 2013-08-19 09:06 - 00010371 _____ C:\WINDOWS\KB2850869.log
2013-08-19 15:06 - 2010-07-11 20:17 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-08-19 15:05 - 2013-08-19 15:05 - 00005664 _____ C:\WINDOWS\KB2863058.log
2013-08-19 15:05 - 2013-08-19 15:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-19 15:05 - 2013-08-19 15:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-19 15:05 - 2010-07-12 19:38 - 00034630 _____ C:\WINDOWS\system32\TZLog.log
2013-08-19 14:51 - 2010-07-11 20:09 - 00000000 ____D C:\Programme\Opera
2013-08-19 09:00 - 2006-02-28 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2013-08-12 22:22 - 2013-08-12 22:22 - 00027362 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\FRST3.txt
2013-08-12 22:19 - 2013-08-12 22:19 - 00000964 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\checkup.txt
2013-08-12 20:52 - 2013-08-12 20:52 - 00000000 ____D C:\Programme\ESET
2013-08-09 16:32 - 2010-07-11 22:23 - 00000028 _____ C:\WINDOWS\ODBC.INI
2013-08-09 16:30 - 2013-02-13 09:50 - 00000000 ____D D:\\7455c8a50126528564084448b5
2013-08-07 22:09 - 2013-08-07 22:09 - 00029988 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\FRST2.txt
2013-08-07 21:44 - 2012-08-01 16:41 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-08-07 21:42 - 2013-08-07 21:42 - 00000756 _____ C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-07 21:39 - 2013-08-07 21:39 - 00001065 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\AdwCleaner[S1].txt
2013-08-07 21:36 - 2013-08-07 21:35 - 00001065 _____ C:\AdwCleaner[S1].txt
2013-08-05 09:35 - 2013-08-05 09:35 - 00001887 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
2013-08-05 09:34 - 2010-11-15 10:22 - 00000000 ____D C:\Programme\Google
2013-08-05 09:02 - 2010-07-11 19:29 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2013-08-04 22:11 - 2013-08-04 22:11 - 00014526 _____ C:\ComboFix.txt
2013-08-04 22:11 - 2013-08-04 21:38 - 00000000 ____D C:\ComboFix
2013-08-04 22:11 - 2013-08-04 21:25 - 00000000 ____D C:\Qoobox
2013-08-04 22:10 - 2013-08-04 21:25 - 00000000 ____D C:\WINDOWS\erdnt
2013-08-04 22:09 - 2006-02-28 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2013-08-04 21:39 - 2013-08-04 21:39 - 00000000 _RSHD C:\cmdcons
2013-08-04 21:39 - 2010-07-11 21:15 - 00000327 __RSH C:\boot.ini
2013-08-04 21:37 - 2012-04-17 09:06 - 00692104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-04 21:37 - 2012-04-17 09:06 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-08-04 21:26 - 2013-08-04 21:26 - 00000000 ___RD C:\Dokumente und Einstellungen\Ralf\Startmenü\Programme\Verwaltung
2013-08-04 21:26 - 2010-07-11 20:16 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente
2013-08-04 21:26 - 2010-07-11 19:30 - 00000000 ___RD C:\Dokumente und Einstellungen\Ralf\Startmenü\Programme
2013-08-03 13:14 - 2013-08-03 13:14 - 00052163 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\GMER.text
2013-08-03 12:46 - 2013-08-03 12:45 - 00025476 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\Addition.txt
2013-08-03 12:44 - 2013-08-03 12:44 - 00000000 ____D C:\FRST
2013-08-03 12:37 - 2013-08-03 12:37 - 00000630 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\defogger_disable.log
2013-08-03 12:37 - 2013-08-03 12:37 - 00000020 _____ C:\Dokumente und Einstellungen\Ralf\defogger_reenable
2013-08-03 12:34 - 2013-08-03 12:34 - 00377856 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\gmer_2.1.19163.exe
2013-08-03 12:33 - 2013-08-03 12:33 - 01222124 _____ (Farbar) C:\Dokumente und Einstellungen\Ralf\Desktop\FRST.exe
2013-08-03 12:30 - 2013-08-03 12:30 - 00050477 _____ C:\Dokumente und Einstellungen\Ralf\Desktop\Defogger.exe
2013-07-26 04:47 - 2012-06-13 18:04 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2013-07-26 04:47 - 2010-07-12 09:06 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
2013-07-26 04:47 - 2010-07-12 09:06 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2013-07-26 04:47 - 2010-07-12 09:05 - 02005504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2013-07-26 04:47 - 2010-07-12 09:05 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2013-07-26 04:47 - 2010-07-12 09:05 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2013-07-26 04:47 - 2009-03-08 05:41 - 06017536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll
2013-07-26 04:47 - 2009-03-08 05:34 - 01469440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl
2013-07-26 04:47 - 2009-03-08 05:34 - 01215488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll
2013-07-26 04:47 - 2009-03-08 05:34 - 00920064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll
2013-07-26 04:47 - 2009-03-08 05:34 - 00206848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll
2013-07-26 04:47 - 2009-03-08 05:34 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll
2013-07-26 04:47 - 2009-03-08 05:34 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll
2013-07-26 04:47 - 2009-03-08 05:33 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll
2013-07-26 04:47 - 2009-03-08 05:33 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll
2013-07-26 04:47 - 2009-03-08 05:32 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-07-26 04:47 - 2009-03-08 05:32 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-07-26 04:47 - 2009-03-08 05:32 - 00611840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll
2013-07-26 04:47 - 2009-03-08 05:31 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll
2013-07-26 04:47 - 2009-03-08 05:31 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll
2013-07-26 04:47 - 2009-03-08 05:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 06017536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 01469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-07-26 04:47 - 2006-02-28 14:00 - 01215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2013-07-26 04:47 - 2006-02-28 14:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-07-26 04:46 - 2010-07-12 09:05 - 11113472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
2013-07-26 04:46 - 2010-07-12 09:05 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2013-07-26 04:46 - 2009-03-08 15:09 - 00387584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll
2013-07-26 04:46 - 2009-03-08 05:39 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-07-26 04:46 - 2006-02-28 14:00 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2013-07-25 21:23 - 2009-03-08 05:32 - 00174592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe
2013-07-25 21:23 - 2006-02-28 14:00 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-07-25 17:52 - 2006-02-28 14:00 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2013-07-25 14:07 - 2013-07-25 14:07 - 00770344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00369584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00175176 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-07-25 14:07 - 2013-07-25 14:07 - 00001653 _____ C:\Dokumente und Einstellungen\All Users\Desktop\avast! Free Antivirus.lnk
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys.sum
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2013-07-25 14:07 - 2013-07-25 14:07 - 00000175 _____ C:\WINDOWS\system32\Drivers\aswSnx.sys.sum
2013-07-25 14:07 - 2010-07-11 19:26 - 00002951 _____ C:\WINDOWS\system32\CONFIG.NT
2013-07-25 14:05 - 2013-07-25 14:05 - 00000000 ____D C:\Programme\AVAST Software

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2006-02-28 14:00] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e 

C:\Windows\System32\winlogon.exe
[2006-02-28 14:00] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a 

C:\Windows\System32\svchost.exe
[2006-02-28 14:00] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 

C:\Windows\System32\services.exe
[2006-02-28 14:00] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc 

C:\Windows\System32\User32.dll
[2006-02-28 14:00] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd 

C:\Windows\System32\userinit.exe
[2006-02-28 14:00] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 

C:\Windows\System32\Drivers\volsnap.sys
[2006-02-28 14:00] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d 


==================== End Of Log ============================