Hallo HILFE bitte ich habe schon immer Mozilla bei mir geht seit kurzem auf der seite immer unten ein länglicher balken auf sieht aus wie werbung das nervt total und an der linken seite steht WEBCAKE wie bekomme ich das weg

und das 2 te wen ich bei Facebook bin geht immer so ein onlinetagebuch auf oder so live sex cams auf im extra Tab voll müll halt bitte bitte hilfe antwort bitte wenn ihr so nett seit an matthias1rom@yahoo.de danke euch

Hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Das geht nicht habe das 32 bit genommen habe auch 32 bit ich habe da ein Oben IT aber da geht nix mit scan

also das geht bei mir nicht keine ahnung :-( schade

Zitat von schrauber

Hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Additions Logfile:
[CODE]Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-08-2013 01
Ran by Matthias at 2013-08-15 17:31:19
Running from C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0J60MAAN
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

AAC Decoder (Version: 7.1.0)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4)
Akamai NetSession Interface
Apple Application Support (Version: 1.2.0)
Apple Software Update (Version: 2.1.1.116)
AutoUpdate (Version: 1.1)
Avi Player (Version: )
Bilder-Wasserzeichen 1
Bonjour (Version: 2.0.0.34)
Bundled software uninstaller
Compatibility Pack für 2007 Office System (Version: 12.0.6425.1000)
Converter version 0.1 (Version: 0.1)
D3DX10 (Version: 15.4.2368.0902)
Dell Resource CD (Version: 1.00.0000)
Dell Touchpad (Version: 9.1.18.6)
DivX Codec (Version: 6.9.1)
DivX Converter (Version: 7.1.0)
DivX Player (Version: 7.2.0)
DivX Plus DirectShow Filters
DivX Version Checker (Version: 7.1.0.9)
Dream Pinball 3D Demo (Version: 1.00)
EAX4 Unified Redist (Version: 4.001)
G Data InternetSecurity 2012 (Version: 22.0.0.0)
GamesCenter
GIMP 2.6.6
Grand Theft Auto Vice City (Version: 1.00.000)
H.264 Decoder (Version: 1.1.0)
heroes in the sky (Version: CBT)
ICQ7.5 (Version: 7.5)
J2SE Runtime Environment 5.0 Update 9 (Version: 1.5.0.90)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 21 (Version: 6.0.210)
kikin Plugin (Murb.com Edition) 1.11 (Version: 1.11)
Laptop Integrated Webcam Driver (1.04.01.1011)
Malwarebytes Anti-Malware Version 1.65.0.1400 (Version: 1.65.0.1400)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6425.1000)
Microsoft Silverlight (Version: 4.0.50401.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 9.7.0621)
MKV Splitter (Version: 1.0.1)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nokia Multimedia Player (Version: 6.00.001)
NVIDIA Drivers (Version: 1.3)
Open It! (Version: 1.1.1)
PunkBuster Services (Version: 0.987)
QuickSet (Version: 8.0.13)
Safari (Version: 5.31.22.7)
SCAR Divi CDE 3.31.00
Segoe UI (Version: 15.4.2271.0615)
Shareaza 2.6.0.0 (Version: 2.6.0.0)
SigmaTel Audio (Version: 5.10.5102.0)
SiSoftware Sandra Lite 2011.SP5 (Version: 17.80.2011.10)
Skat-Online V7
Skispringen 2006
Skype™ 4.2 (Version: 4.2.158)
TeamSpeak 2 RC2 (Version: 2.0.32.60)
TeamSpeak 3 Client
TeamSpeak 3 Client (HKCU Version: 3.0.10.1)
TeamViewer 6 (Version: 6.0.10194)
Unity Web Player (HKCU Version: )
Unreal Tournament
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Zip Opener
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)
Verbatim GREEN BUTTON 1.46
Vietcong 2
Visualizer Photo Resize (Version: 6.00.0000)
VLC media player 1.0.3 (Version: 1.0.3)
Wajam (Version: 1.51)
Watermark Image software version 1.9.6.4
Winamp Anwendungserkennung (HKCU Version: 1.0.0.1)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8064.206)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
WinRAR
World of Tanks
Yahoo! BrowserPlus 2.9.8


==================== Restore Points =========================

08-08-2013 00:13:11 Windows Update
08-08-2013 22:00:05 Geplanter Prüfpunkt
10-08-2013 07:55:46 Windows Update
10-08-2013 23:40:13 Geplanter Prüfpunkt
12-08-2013 04:32:09 Geplanter Prüfpunkt
13-08-2013 14:52:55 Windows Update
14-08-2013 17:05:29 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {04EE5832-9601-4873-9D7C-F5F73F6B7DE7} - System32\Tasks\{5A2B1248-8AE9-4C4D-877D-E9100DCCEEF4} => C:\Program Files\Skype\Phone\Skype.exe [2010-04-06] (Skype Technologies S.A.)
Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-18] (Microsoft Corporation)
Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {31D0C8A4-B75D-4D62-A659-434925C2BAAA} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-18] (Microsoft Corporation)
Task: {45D6AC23-07D3-4B57-89F8-2E1BF93DE66C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {9D4F9134-E0B2-4D28-9ACD-4A3CFEB9C6CA} - System32\Tasks\{97E5F861-A1D9-4C01-93A6-FF2883E23F04} => C:\Program Files\Skype\Phone\Skype.exe [2010-04-06] (Skype Technologies S.A.)
Task: {A4267D81-A52D-45C4-A7FC-26C3431C7730} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-16] (Adobe Systems Incorporated)
Task: {A5359BE6-71FE-4155-B647-F08F093CFA71} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {AC07B049-117F-4912-8F4C-B3447705891A} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-18] (Microsoft Corp.)
Task: {B25DE228-0A56-4B29-B982-DC19B51557C5} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {BDF988F1-1418-4F19-B568-43277866DE5E} - System32\Tasks\At1 => C:\Users\Matthias\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-08-15] ()
Task: {BF4148F0-3972-4F56-A13A-0866C0D18744} - System32\Tasks\{9649D7BA-9CA0-45C1-9D5B-1E1522AC7C40} => c:\program files\mozilla firefox\firefox.exe [2013-07-03] (Mozilla Corporation)
Task: {C1DBE6E1-C9FF-494A-9C57-AEFD23BC573D} - System32\Tasks\{8763D527-4D2F-4CE6-B7FC-3BE4FCB6ABB5} => C:\Program Files\Internet Explorer\iexplore.exe [2012-01-08] (Microsoft Corporation)
Task: {D32980C7-29E5-449F-B4AA-6A71873C3A57} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-18] (Microsoft Corporation)
Task: {DD7896D9-F189-4BFF-A8F8-8B559CDCCD9C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {FB26020E-F547-41FB-9133-A585125FF19D} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-18] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\At1.job => C:\Users\Matthias\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE

==================== Faulty Device Manager Devices =============

Name: Laptop Integrated Webcam
Description: Laptop Integrated Webcam
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Creative Technology Ltd.
Service: OEM02Dev
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 57469286

Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 57469286

Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 27951651

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 27951651

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 21591

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 21591

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/12/2013 09:21:30 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 20483


System errors:
=============
Error: (08/15/2013 04:18:43 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (08/14/2013 02:13:41 PM) (Source: Service Control Manager) (User: )
Description: 30000STacSV

Error: (08/13/2013 04:33:23 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (08/11/2013 08:48:01 PM) (Source: Service Control Manager) (User: )
Description: G Data Personal Firewall1

Error: (08/07/2013 02:34:46 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (08/06/2013 07:57:32 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (08/05/2013 08:57:33 PM) (Source: Service Control Manager) (User: )
Description: 30000WerSvc

Error: (08/05/2013 02:34:16 PM) (Source: Service Control Manager) (User: )
Description: 30000STacSV

Error: (08/04/2013 03:18:54 PM) (Source: Service Control Manager) (User: )
Description: Computer Backup (MyPC Backup)%%1053

Error: (08/04/2013 03:18:54 PM) (Source: Service Control Manager) (User: )
Description: 30000Computer Backup (MyPC Backup)


Microsoft Office Sessions:
=========================
Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 57469286

Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 57469286

Error: (08/14/2013 02:13:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 27951651

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 27951651

Error: (08/13/2013 05:07:02 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 21591

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 21591

Error: (08/12/2013 09:21:32 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/12/2013 09:21:30 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 20483


CodeIntegrity Errors:
===================================
Date: 2013-08-15 17:30:44.613
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:30:44.483
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:30:44.344
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:30:44.213
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:29:38.769
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:29:38.633
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:29:38.493
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:29:38.365
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:28:28.026
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2013-08-15 17:28:27.825
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 56%
Total physical RAM: 3069.31 MB
Available physical RAM: 1346.09 MB
Total Pagefile: 6342.9 MB
Available Pagefile: 4520.06 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.73 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:136.43 GB) (Free:46.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:5.96 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 38000000)
Partition 1: (Not Active) - (Size=118 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=136 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=3 GB) - (Type=OF Extended)

==================== End Of Log ============================




FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-08-2013 01
Ran by Matthias (administrator) on 15-08-2013 17:25:51
Running from C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0J60MAAN
Microsoft® Windows Vista™ Business  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\system32\PnkBstrA.exe
(SigmaTel, Inc.) C:\Windows\system32\STacSV.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
(cake bake) C:\Program Files\Movdap\WBDesktop.Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Creative Technology Ltd.) C:\Windows\OEM02Mon.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SigmaTel, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
(Akamai Technologies, Inc.) C:\Users\Matthias\AppData\Local\Akamai\netsession_win.exe
(Bake Cake) C:\Users\Matthias\AppData\Roaming\Movdap\WebCakeDesktop.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Dell Inc) C:\Program Files\Dell\QuickSet\quickset.exe
(Akamai Technologies, Inc.) C:\Users\Matthias\AppData\Local\Akamai\netsession_win.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Farbar) C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0J60MAAN\FRST (1).exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM\...\Run: [OEM02Mon.exe] - C:\Windows\OEM02Mon.exe [36864 2007-05-09] (Creative Technology Ltd.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [857648 2007-04-27] (Synaptics, Inc.)
HKLM\...\Run: [WinampAgent] - "C:\Program Files\Winamp\winampa.exe" [x]
HKLM\...\Run: [SigmatelSysTrayApp] - C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [405504 2007-05-06] (SigmaTel, Inc.)
HKLM\...\Run: [G Data AntiVirus Tray Application] - C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe [985624 2012-05-24] (G Data Software AG)
HKLM\...\Run: [GDFirewallTray] - C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1470968 2012-01-27] (G Data Software AG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Runonce: [Del2277910] - cmd.exe /Q /D /c del "C:\Users\Matthias\AppData\Local\Temp\0.del" [x]
HKCU\...\Run: [Sidebar] - "C:\Program Files\Desktop Sidebar\dsidebar.exe" [x]
HKCU\...\Run: [MsnMsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKCU\...\Run: [Wallpaper Changer] - C:\Program Files\Wallpaper Changer\Wallpaper Changer.exe /minimized [x]
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Matthias\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [WebCake Desktop] - C:\Users\Matthias\AppData\Roaming\Movdap\WebCakeDesktop.exe [52504 2013-08-10] (Bake Cake)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-18] (Microsoft Corporation)
HKCU\...\Runonce: [Del2276974] - cmd.exe /Q /D /c del "C:\Users\Matthias\AppData\Local\Temp\0.del" [x]
HKCU\...\Winlogon: [Shell] explorer.exe,C:\Documents and Settings\epmikani\Application Data\skype.dat <==== ATTENTION 
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
ShortcutTarget: QuickSet.lnk -> C:\Windows\Installer\{7F0C4457-8E64-491B-8D7B-991504365D1E}\NewShortcut2_53A01CC614B04512A2E710D39BF83DC4.exe (Macrovision Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss_din2g&mntrId=E2B5001F3C4F1468
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss_din2g&mntrId=E2B5001F3C4F1468
BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files\Movdap\WebCakeIEClient.dll (Let Them Eat Web-Cake LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll (Wajam)
BHO: G Data BankGuard - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files\Common Files\G Data\AVKProxy\BanksafeBHO.dll (G Data Software AG)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default
FF user.js: detected! => C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\user.js
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Matthias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.9.8 - C:\Users\Matthias\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\searchplugins\sweetim.xml
FF Extension: No Name - C:\Users\Matthias\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: WebCake - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\Extensions\plugin@getwebcake.com
FF Extension: No Name - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF Extension: No Name - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\neo7zl9w.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi
FF Extension: G Data BankGuard - C:\Program Files\Mozilla Firefox\extensions\{906305f7-aafc-45e9-8bbd-941950a84dad}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [gamescenter@gamescenter.com] C:\Program Files\GamesCenter\GamesCenter.xpi
FF Extension: No Name - C:\Program Files\GamesCenter\GamesCenter.xpi

========================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [1540120 2012-05-25] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [468472 2012-01-27] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [1583576 2012-06-01] (G Data Software AG)
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [1899816 2012-06-04] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [470008 2012-03-29] (G Data Software AG)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75064 2012-09-27] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\RpcAgentSrv.exe [93848 2008-09-18] (SiSoftware)
R2 STacSV; C:\Windows\system32\STacSV.exe [94208 2007-05-06] (SigmaTel, Inc.)
S3 WajamUpdater; C:\Program Files\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam)
R2 WebCakeUpdater; C:\Program Files\Movdap\WBDesktop.Updater.exe [51992 2013-08-10] (cake bake)

==================== Drivers (Whitelisted) ====================

R2 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2009-07-20] (Protect Software GmbH)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [41848 2012-09-22] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [90744 2012-09-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [49528 2012-09-22] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54648 2012-09-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [30416 2012-09-22] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50040 2012-09-22] (G Data Software AG)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-08-15] (Malwarebytes Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2007-05-06] (SigmaTel, Inc.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 SQTECH905C; System32\Drivers\Capt905c.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-15 17:18 - 2013-08-15 17:18 - 01068807 _____ (Farbar) C:\Users\Matthias\Downloads\FRST(1).exe
2013-08-15 17:01 - 2013-08-15 17:01 - 01356205 _____ (Farbar) C:\Users\Matthias\Downloads\FRST.exe
2013-08-15 16:55 - 2013-08-15 16:55 - 00000903 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-15 16:55 - 2013-08-15 16:55 - 00000426 _____ C:\Windows\Tasks\At1.job
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\DSite
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Program Files\OpenIt
2013-08-15 16:54 - 2013-08-15 16:54 - 00714352 _____ C:\Users\Matthias\Downloads\ZipOpenerSetup.exe
2013-08-15 16:29 - 2013-08-15 16:29 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-08-15 16:20 - 2013-08-15 16:20 - 00000000 ____D C:\Users\Matthias\AppData\Local\{0AD5F7D3-CCBA-42A9-B314-A5FB098D696E}
2013-08-13 16:35 - 2013-08-13 16:35 - 00000000 ____D C:\Users\Matthias\AppData\Local\{CD126BCC-A3CB-4D7A-85BA-10D27809CE07}
2013-08-10 10:23 - 2013-08-15 16:20 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Movdap
2013-08-10 10:23 - 2013-08-13 17:36 - 00000000 ____D C:\Program Files\Movdap
2013-08-07 14:36 - 2013-08-07 14:36 - 00000000 ____D C:\Users\Matthias\AppData\Local\{9B84FB1F-CBB0-4823-9392-9080CC10F46E}
2013-08-04 15:21 - 2013-08-04 15:21 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Optimizer Pro
2013-08-04 15:14 - 2013-08-04 15:22 - 00000000 ____D C:\Program Files\MyPC Backup
2013-08-04 15:13 - 2013-08-13 17:36 - 00000000 ____D C:\Program Files\Web Cake
2013-08-04 15:13 - 2013-08-04 15:23 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-08-04 15:12 - 2013-08-04 15:12 - 00000000 ____D C:\Users\Matthias\AppData\Local\Babylon
2013-08-04 15:10 - 2013-08-04 15:11 - 00947584 _____ C:\Users\Matthias\Downloads\Player_Setup.exe
2013-08-01 19:20 - 2013-08-01 19:20 - 00000000 ____D C:\Users\Matthias\AppData\Local\{88627E00-D22E-4075-B4E4-36B52458B860}
2013-07-27 14:08 - 2013-07-27 14:08 - 00000000 ____D C:\Users\Matthias\AppData\Local\{ECECF328-AF6A-4EA5-9C61-428E1EE27631}
2013-07-25 14:52 - 2013-07-25 14:52 - 00000000 ____D C:\Users\Matthias\AppData\Local\{46F3854D-84D4-4766-B425-B42F1D965CCC}
2013-07-23 16:04 - 2013-07-23 16:04 - 01541059 _____ C:\Users\Matthias\Desktop\20130723_1549_china-Ch10_IS2_28_desert.wotreplay
2013-07-19 21:14 - 2013-07-19 21:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\{CCDC2E3A-06F5-4574-A5E3-50B4B5B7D764}
2013-07-17 11:14 - 2013-07-17 11:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\{D7BAE23A-290E-4FEA-82B9-0FF6226FF210}
2013-07-16 19:55 - 2013-07-16 19:55 - 00000000 ____D C:\Users\Matthias\AppData\Local\{E2CFDB0D-FEF6-4728-A580-2BCF17374DBE}
2013-07-16 18:31 - 2013-07-16 18:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-07-16 18:22 - 2013-07-16 18:23 - 00000000 ____D C:\Users\Matthias\AppData\Local\IsolatedStorage
2013-07-16 18:22 - 2013-07-16 18:22 - 00000000 ____D C:\Users\Matthias\Documents\Medion
2013-07-16 18:22 - 2013-07-16 18:22 - 00000000 ____D C:\Users\Matthias\AppData\Local\MEDION

==================== One Month Modified Files and Folders =======

2013-08-15 17:25 - 2013-08-15 17:25 - 00000000 ____D C:\FRST
2013-08-15 17:18 - 2013-08-15 17:18 - 01068807 _____ (Farbar) C:\Users\Matthias\Downloads\FRST(1).exe
2013-08-15 17:16 - 2012-05-08 19:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-15 17:01 - 2013-08-15 17:01 - 01356205 _____ (Farbar) C:\Users\Matthias\Downloads\FRST.exe
2013-08-15 16:55 - 2013-08-15 16:55 - 00000903 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-15 16:55 - 2013-08-15 16:55 - 00000426 _____ C:\Windows\Tasks\At1.job
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\DSite
2013-08-15 16:55 - 2013-08-15 16:55 - 00000000 ____D C:\Program Files\OpenIt
2013-08-15 16:54 - 2013-08-15 16:54 - 00714352 _____ C:\Users\Matthias\Downloads\ZipOpenerSetup.exe
2013-08-15 16:51 - 2006-11-02 14:47 - 00003648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-15 16:51 - 2006-11-02 14:47 - 00003648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-15 16:29 - 2013-08-15 16:29 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-08-15 16:24 - 2006-11-02 14:52 - 01351942 _____ C:\Windows\WindowsUpdate.log
2013-08-15 16:20 - 2013-08-15 16:20 - 00000000 ____D C:\Users\Matthias\AppData\Local\{0AD5F7D3-CCBA-42A9-B314-A5FB098D696E}
2013-08-15 16:20 - 2013-08-10 10:23 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Movdap
2013-08-15 16:17 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-15 16:16 - 2006-11-02 15:01 - 00032602 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-15 05:00 - 2009-12-06 02:41 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\vlc
2013-08-14 21:54 - 2009-08-01 19:59 - 00106496 _____ C:\Users\Matthias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-13 20:34 - 2009-07-16 01:31 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Skype
2013-08-13 19:24 - 2010-03-11 21:06 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\TS3Client
2013-08-13 17:36 - 2013-08-10 10:23 - 00000000 ____D C:\Program Files\Movdap
2013-08-13 17:36 - 2013-08-04 15:13 - 00000000 ____D C:\Program Files\Web Cake
2013-08-13 16:35 - 2013-08-13 16:35 - 00000000 ____D C:\Users\Matthias\AppData\Local\{CD126BCC-A3CB-4D7A-85BA-10D27809CE07}
2013-08-09 14:39 - 2013-06-11 23:26 - 00000000 ____D C:\Users\Matthias\Desktop\Neuer Ordner (3)
2013-08-07 14:36 - 2013-08-07 14:36 - 00000000 ____D C:\Users\Matthias\AppData\Local\{9B84FB1F-CBB0-4823-9392-9080CC10F46E}
2013-08-07 14:32 - 2006-11-02 15:00 - 00326664 _____ C:\Windows\PFRO.log
2013-08-05 17:00 - 2006-11-02 12:33 - 01564930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-04 15:23 - 2013-08-04 15:13 - 00000000 ____D C:\Program Files\Optimizer Pro
2013-08-04 15:22 - 2013-08-04 15:14 - 00000000 ____D C:\Program Files\MyPC Backup
2013-08-04 15:21 - 2013-08-04 15:21 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Optimizer Pro
2013-08-04 15:12 - 2013-08-04 15:12 - 00000000 ____D C:\Users\Matthias\AppData\Local\Babylon
2013-08-04 15:11 - 2013-08-04 15:10 - 00947584 _____ C:\Users\Matthias\Downloads\Player_Setup.exe
2013-08-02 16:45 - 2006-11-02 14:52 - 00035421 _____ C:\Windows\setupact.log
2013-08-01 19:20 - 2013-08-01 19:20 - 00000000 ____D C:\Users\Matthias\AppData\Local\{88627E00-D22E-4075-B4E4-36B52458B860}
2013-07-27 14:08 - 2013-07-27 14:08 - 00000000 ____D C:\Users\Matthias\AppData\Local\{ECECF328-AF6A-4EA5-9C61-428E1EE27631}
2013-07-25 14:52 - 2013-07-25 14:52 - 00000000 ____D C:\Users\Matthias\AppData\Local\{46F3854D-84D4-4766-B425-B42F1D965CCC}
2013-07-23 16:04 - 2013-07-23 16:04 - 01541059 _____ C:\Users\Matthias\Desktop\20130723_1549_china-Ch10_IS2_28_desert.wotreplay
2013-07-19 21:14 - 2013-07-19 21:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\{CCDC2E3A-06F5-4574-A5E3-50B4B5B7D764}
2013-07-17 11:46 - 2009-07-14 20:12 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\ICQ
2013-07-17 11:14 - 2013-07-17 11:14 - 00000000 ____D C:\Users\Matthias\AppData\Local\{D7BAE23A-290E-4FEA-82B9-0FF6226FF210}
2013-07-16 19:59 - 2012-05-08 19:10 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-16 19:59 - 2012-05-08 19:10 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-16 19:57 - 2009-09-16 23:22 - 00000000 ____D C:\Users\Matthias\AppData\Local\Adobe
2013-07-16 19:55 - 2013-07-16 19:55 - 00000000 ____D C:\Users\Matthias\AppData\Local\{E2CFDB0D-FEF6-4728-A580-2BCF17374DBE}
2013-07-16 19:47 - 2006-11-02 17:40 - 00000000 ____D C:\Windows\WindowsMobile
2013-07-16 18:31 - 2013-07-16 18:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-07-16 18:31 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\LogFiles
2013-07-16 18:23 - 2013-07-16 18:22 - 00000000 ____D C:\Users\Matthias\AppData\Local\IsolatedStorage
2013-07-16 18:22 - 2013-07-16 18:22 - 00000000 ____D C:\Users\Matthias\Documents\Medion
2013-07-16 18:22 - 2013-07-16 18:22 - 00000000 ____D C:\Users\Matthias\AppData\Local\MEDION
2013-07-16 18:19 - 2009-07-14 15:00 - 00000000 ____D C:\Users\Matthias
2013-07-16 17:30 - 2010-03-08 22:37 - 00000000 ____D C:\Users\Matthias\AppData\Local\TeamSpeak 3 Client

Files to move or delete:
====================
C:\ProgramData\dsgsdgdsgdsgw.pad
C:\Windows\Tasks\At1.job

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-15 16:24

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ich habe doch das 1 schon gemacht habe dir das ergebnis schon hir rein gemacht was ist das 2te für ein program ???

Das erste ist ein Scanner, das zweite ein erstes removal tool. Ich poste die solange Anleitungen für Remover bis Du sauber bist, das geht nicht in einem Schuss. Ich denke es werden so 8-10 Posts insgesamt.