Starker Schädlingsbefall und stark verminderte Leistung.

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:37 on 24/08/2013 (Strolchi)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-08-2013 01
Ran by Strolchi (administrator) on 24-08-2013 17:38:15
Running from C:\Users\Strolchi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TUInstallHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2264168 2011-07-28] (Realtek Semiconductor)
HKCU\...\Run: [Regedit32] - C:\Windows\system32\regedit.exe [x]
HKCR\...0c966feabec1\InprocServer32: [Default-shell32] C:\Users\Strolchi\AppData\Local\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}\n. ATTENTION! ====> ZeroAccess?
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-18] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-08-08] (Avira Operations GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101365&mntrId=f82dc08500000000000074de2bbc6f17
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101365&mntrId=f82dc08500000000000074de2bbc6f17
SearchScopes: HKCU - {82C6D3B4-BB86-423B-9F37-2DDF376DF002} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=aa1e4b86-724c-4a27-80c4-0528692eff3b&apn_sauid=DD91516A-4983-4B70-AC1E-D763376684B6
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Browser Companion Helper - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( )
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Browser Companion Helper Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( )
BHO-x32: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -  No File
Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default
FF user.js: detected! => C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\user.js
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.jappy.de/
FF Keyword.URL: hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=aa1e4b86-724c-4a27-80c4-0528692eff3b&apn_ptnrs=%5EABT&apn_sauid=DD91516A-4983-4B70-AC1E-D763376684B6&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Strolchi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: Browser Companion Helper - C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\Extensions\bbrs_002@blabbers.com
FF Extension: Babylon - C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\Extensions\ffxtlbr@babylon.com
FF Extension: DealPly - C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
FF Extension: No Name - C:\Users\Strolchi\AppData\Roaming\Mozilla\Firefox\Profiles\lujpcl5t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-07-14] (Advanced Micro Devices, Inc.)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-08-08] (Avira Operations GmbH & Co. KG)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2028864 2011-12-13] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-08-08] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-08-08] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-08] (Avira Operations GmbH & Co. KG)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-14] ()
R0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-14] ()
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] ()
R0 NDIS; C:\Windows\System32\drivers\ndis.sys [951680 2010-11-20] ()
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] ()
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] ()
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] ()
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] ()
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] ()
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] ()
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] ()
S3 nfrd960; C:\Windows\system32\drivers\nfrd960.sys [51264 2009-07-14] ()
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] ()
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] ()
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1659776 2011-03-11] ()
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] ()
S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] ()
S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-11] ()
S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-14] ()
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] ()
S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-14] ()
R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-17] ()
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] ()
R0 pciide; C:\Windows\System32\drivers\pciide.sys [12352 2009-07-14] ()
S3 pcmcia; C:\Windows\system32\drivers\pcmcia.sys [220752 2009-07-14] ()
R0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-14] ()
S2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [651264 2009-07-14] ()
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] ()
S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-14] ()
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] ()
S3 ql2300; C:\Windows\system32\drivers\ql2300.sys [1524816 2009-07-14] ()
S3 ql40xx; C:\Windows\system32\drivers\ql40xx.sys [128592 2009-07-14] ()
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] ()
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] ()
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] ()
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] ()
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] ()
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] ()
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] ()
S3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-14] ()
S1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] ()
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] ()
S1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] ()
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [210944 2012-04-28] ()
R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] ()
S3 RFCOMM; C:\Windows\System32\DRIVERS\rfcomm.sys [158720 2009-07-14] ()
S2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] ()
S3 RSUSBSTOR; C:\Windows\System32\Drivers\RtsUStor.sys [250984 2011-01-18] ()
R3 RTL8167; C:\Windows\System32\DRIVERS\Rt64win7.sys [436840 2011-03-04] ()
S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] ()
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] ()
S2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] ()
S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] ()
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] ()
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] ()
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] ()
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] ()
S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-14] ()
S3 Sftfs; C:\Windows\System32\DRIVERS\Sftfslh.sys [764264 2011-10-01] ()
S3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaylh.sys [268648 2011-10-01] ()
S3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirlh.sys [25960 2011-10-01] ()
S3 Sftvol; C:\Windows\System32\DRIVERS\Sftvollh.sys [22376 2011-10-01] ()
S3 SiSGbeLH; C:\Windows\System32\DRIVERS\SiSG664.sys [56832 2009-06-10] ()
S3 SiSRaid2; C:\Windows\system32\drivers\SiSRaid2.sys [43584 2009-07-14] ()
S3 SiSRaid4; C:\Windows\system32\drivers\sisraid4.sys [80464 2009-07-14] ()
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] ()
S0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-14] ()
S3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] ()
S3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] ()
S3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] ()
S3 stexstor; C:\Windows\system32\drivers\stexstor.sys [24656 2009-07-14] ()
R3 swenum; C:\Windows\System32\DRIVERS\swenum.sys [12496 2009-07-14] ()
R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1918320 2012-03-30] ()
S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1918320 2012-03-30] ()
S2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45056 2010-11-20] ()
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] ()
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] ()
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2010-11-20] ()
R1 TermDD; C:\Windows\System32\DRIVERS\termdd.sys [63360 2010-11-20] ()
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39424 2010-11-20] ()
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [59392 2010-11-20] ()
S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [31232 2010-11-20] ()
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] ()
S3 uagp35; C:\Windows\system32\drivers\uagp35.sys [64080 2009-07-14] ()
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] ()
S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-14] ()
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-20] ()
S3 UmPass; C:\Windows\system32\drivers\umpass.sys [9728 2009-07-14] ()
S3 usbaudio; C:\Windows\System32\drivers\usbaudio.sys [109696 2010-11-20] ()
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [98816 2011-03-25] ()
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100352 2009-07-14] ()
R3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [52736 2011-03-25] ()
R3 usbfilter; C:\Windows\System32\DRIVERS\usbfilter.sys [44672 2010-11-29] ()
R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2011-03-25] ()
R3 usbohci; C:\Windows\System32\DRIVERS\usbohci.sys [25600 2011-03-25] ()
S3 usbprint; C:\Windows\system32\drivers\usbprint.sys [25088 2009-07-14] ()
S3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] ()
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2011-03-25] ()
S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [184960 2010-11-20] ()
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] ()
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] ()
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] ()
S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] ()
S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-14] ()
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] ()
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] ()
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] ()
S3 vsmraid; C:\Windows\system32\drivers\vsmraid.sys [161872 2009-07-14] ()
R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] ()
R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] ()
S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-14] ()
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] ()
S1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] ()
S3 Wd; C:\Windows\system32\drivers\wd.sys [21056 2009-07-14] ()
R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [654928 2009-07-14] ()
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] ()
S3 WimFltr; C:\Windows\System32\DRIVERS\wimfltr.sys [154168 2008-05-24] ()
S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-14] ()
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] ()
R3 WmiAcpi; C:\Windows\System32\DRIVERS\wmiacpi.sys [14336 2009-07-14] ()
S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] ()
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [112128 2010-11-20] ()
S3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [172544 2010-11-20] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-24 17:37 - 2013-08-24 17:37 - 00000478 _____ C:\Users\Strolchi\Desktop\defogger_disable.log
2013-08-24 17:37 - 2013-08-24 17:37 - 00000000 ____D C:\FRST
2013-08-24 17:37 - 2013-08-24 17:37 - 00000000 _____ C:\Users\Strolchi\defogger_reenable
2013-08-24 17:36 - 2013-08-24 17:36 - 01576734 _____ (Farbar) C:\Users\Strolchi\Desktop\FRST64.exe
2013-08-24 17:32 - 2013-08-24 17:32 - 00050477 _____ C:\Users\Strolchi\Desktop\Defogger.exe
2013-08-18 04:02 - 2013-08-18 04:02 - 00000000 ____D C:\Users\Strolchi\AppData\Local\{D0411400-257F-4B1D-882D-69E6128B6187}
2013-08-17 16:52 - 2013-08-17 16:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 16:06 - 2013-08-17 16:06 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Strolchi\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-17 16:05 - 2013-08-17 16:05 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-17 16:05 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-09 14:26 - 2013-08-09 14:26 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
2013-08-08 17:58 - 2013-08-08 17:57 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 17:46 - 2013-08-08 17:46 - 00001996 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 17:46 - 2013-08-08 17:46 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 17:45 - 2013-08-08 17:38 - 00130016 _____ C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 17:45 - 2013-08-08 17:38 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 17:45 - 2013-08-08 17:38 - 00028600 _____ C:\Windows\system32\Drivers\avkmgr.sys
2013-08-02 21:17 - 2013-08-19 20:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-02 21:17 - 2013-08-02 21:17 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-02 21:15 - 2013-08-02 21:17 - 21703480 _____ (Mozilla) C:\Users\Strolchi\Downloads\Firefox_Setup_22.0.exe
2013-08-02 10:40 - 2013-08-02 10:40 - 01069944 _____ (Solid State Networks) C:\Users\Strolchi\Downloads\install_reader11_de_mssa_aaa_aih.exe

==================== One Month Modified Files and Folders =======

2013-08-24 17:37 - 2013-08-24 17:37 - 00377856 _____ C:\Users\Strolchi\Desktop\gmer_2.1.19163.exe
2013-08-24 17:37 - 2013-08-24 17:37 - 00000478 _____ C:\Users\Strolchi\Desktop\defogger_disable.log
2013-08-24 17:37 - 2013-08-24 17:37 - 00000000 ____D C:\FRST
2013-08-24 17:37 - 2013-08-24 17:37 - 00000000 _____ C:\Users\Strolchi\defogger_reenable
2013-08-24 17:37 - 2011-12-01 20:30 - 00000000 ____D C:\Users\Strolchi
2013-08-24 17:36 - 2013-08-24 17:36 - 01576734 _____ (Farbar) C:\Users\Strolchi\Desktop\FRST64.exe
2013-08-24 17:32 - 2013-08-24 17:32 - 00050477 _____ C:\Users\Strolchi\Desktop\Defogger.exe
2013-08-24 17:09 - 2012-11-25 20:55 - 00047385 _____ C:\Windows\setupact.log
2013-08-24 17:09 - 2011-12-01 20:31 - 00000000 ___HD C:\ASUS.DAT
2013-08-23 11:34 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-23 11:34 - 2009-07-14 06:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-20 02:52 - 2013-01-30 02:03 - 00466432 ___SH C:\Users\Strolchi\Downloads\Thumbs.db
2013-08-19 20:07 - 2013-08-02 21:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 05:34 - 2012-11-28 01:01 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\vlc
2013-08-18 04:02 - 2013-08-18 04:02 - 00000000 ____D C:\Users\Strolchi\AppData\Local\{D0411400-257F-4B1D-882D-69E6128B6187}
2013-08-17 16:53 - 2013-08-17 16:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-17 16:06 - 2013-08-17 16:06 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Strolchi\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-17 16:05 - 2013-08-17 16:05 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-17 16:05 - 2013-08-17 16:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-17 15:38 - 2012-11-25 18:15 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\FileZilla
2013-08-09 14:26 - 2013-08-09 14:26 - 00000240 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
2013-08-08 18:07 - 2013-03-14 21:16 - 00005038 _____ C:\Windows\PFRO.log
2013-08-08 18:02 - 2012-04-07 19:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-08 17:57 - 2013-08-08 17:58 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-08 17:52 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-08 17:46 - 2013-08-08 17:46 - 00001996 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-08 17:46 - 2013-08-08 17:46 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\ProgramData\Avira
2013-08-08 17:45 - 2013-08-08 17:45 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-08 17:41 - 2011-11-12 17:23 - 00002096 _____ C:\Windows\system32\AutoRunFilter.ini
2013-08-08 17:41 - 2011-11-12 17:23 - 00001337 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-08 17:38 - 2013-08-08 17:45 - 00130016 _____ C:\Windows\system32\Drivers\avipbb.sys
2013-08-08 17:38 - 2013-08-08 17:45 - 00100712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-08 17:38 - 2013-08-08 17:45 - 00028600 _____ C:\Windows\system32\Drivers\avkmgr.sys
2013-08-08 17:36 - 2013-05-28 11:17 - 00000302 _____ C:\Windows\Tasks\Dealply.job
2013-08-07 17:49 - 2012-05-28 13:30 - 00000000 ____D C:\Users\Strolchi\AppData\Roaming\SoftGrid Client
2013-08-07 17:30 - 2011-02-19 06:24 - 01405864 _____ C:\Windows\system32\perfh007.dat
2013-08-07 17:30 - 2011-02-19 06:24 - 00370986 _____ C:\Windows\system32\perfc007.dat
2013-08-07 17:30 - 2009-07-14 07:13 - 00005438 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-04 15:52 - 2012-02-11 03:11 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-08-03 21:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-02 21:17 - 2013-08-02 21:17 - 00001153 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-02 21:17 - 2013-08-02 21:15 - 21703480 _____ (Mozilla) C:\Users\Strolchi\Downloads\Firefox_Setup_22.0.exe
2013-08-02 21:09 - 2013-07-14 04:28 - 00000000 ____D C:\ProgramData\Skype
2013-08-02 10:40 - 2013-08-02 10:40 - 01069944 _____ (Solid State Networks) C:\Users\Strolchi\Downloads\install_reader11_de_mssa_aaa_aih.exe
2013-07-27 22:05 - 2011-11-12 16:56 - 02098629 _____ C:\Windows\WindowsUpdate.log

ZeroAccess:
C:\Windows\Installer\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}
C:\Windows\Installer\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}\@
C:\Windows\Installer\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}\U\00000001.@

ZeroAccess:
C:\Users\Strolchi\AppData\Local\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}
C:\Users\Strolchi\AppData\Local\{1d7dd826-0eac-4797-7ee1-6b31771d2bb9}\@

Files to move or delete:
====================
C:\Users\Strolchi\lapqeteazore.exe
C:\Users\Strolchi\AppData\Local\Temp\~nsu.tmp\Au_.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe 014A9CB92514E27C0107614DF764BC06 ZeroAccess <==== ATTENTION!.
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2011-02-18 21:49] - [2010-11-20 15:34] - 0295808 ____A () D41D8CD98F00B204E9800998ECF8427E

C:\Windows\System32\Drivers\volsnap.sys IS INFECTED. <===== ATTENTION!



testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2013-07-18 10:28

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-08-2013 01
Ran by Strolchi at 2013-08-24 17:39:26
Running from C:\Users\Strolchi\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Installed Programs =======================

   
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
AMD APP SDK Runtime (Version: 2.5.709.2)
AMD Catalyst Install Manager (Version: 3.0.838.0)
AMD Fuel (Version: 2011.0713.1830.31376)
AMD Media Foundation Decoders (Version: 1.0.60713.1822)
AMD VISION Engine Control Center (x32 Version: 2011.0713.1830.31376)
ASUS AI Recovery (x32 Version: 1.0.19)
ASUS FancyStart (x32 Version: 1.1.0)
ASUS LifeFrame3 (x32 Version: 3.0.27)
ASUS Live Update (x32 Version: 3.0.8)
ASUS Power4Gear Hybrid (Version: 1.1.50)
ASUS SmartLogon (x32 Version: 1.0.0011)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0036)
ASUS Virtual Camera (x32 Version: 1.0.21)
ASUS WebStorage (x32 Version: 3.0.84.161)
ASUS_Screensaver (x32)
AsusVibe2.0 (x32 Version: 2.0.4.617)
Atheros Client Installation Program (x32 Version: 7.0)
ATK Package (x32 Version: 1.0.0010)
Avira Free Antivirus (x32 Version: 13.0.0.3885)
Bing Bar (x32 Version: 7.0.610.0)
Bookworm Deluxe (x32)
BrowserCompanion (x32)
Catalyst Control Center InstallProxy (x32 Version: 2011.0713.1830.31376)
Catalyst Control Center Localization All (x32 Version: 2011.0713.1830.31376)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0713.1830.31376)
CCC Help Chinese Standard (x32 Version: 2011.0713.1829.31376)
CCC Help Chinese Traditional (x32 Version: 2011.0713.1829.31376)
CCC Help Czech (x32 Version: 2011.0713.1829.31376)
CCC Help Danish (x32 Version: 2011.0713.1829.31376)
CCC Help Dutch (x32 Version: 2011.0713.1829.31376)
CCC Help English (x32 Version: 2011.0713.1829.31376)
CCC Help Finnish (x32 Version: 2011.0713.1829.31376)
CCC Help French (x32 Version: 2011.0713.1829.31376)
CCC Help German (x32 Version: 2011.0713.1829.31376)
CCC Help Greek (x32 Version: 2011.0713.1829.31376)
CCC Help Hungarian (x32 Version: 2011.0713.1829.31376)
CCC Help Italian (x32 Version: 2011.0713.1829.31376)
CCC Help Japanese (x32 Version: 2011.0713.1829.31376)
CCC Help Korean (x32 Version: 2011.0713.1829.31376)
CCC Help Norwegian (x32 Version: 2011.0713.1829.31376)
CCC Help Polish (x32 Version: 2011.0713.1829.31376)
CCC Help Portuguese (x32 Version: 2011.0713.1829.31376)
CCC Help Russian (x32 Version: 2011.0713.1829.31376)
CCC Help Spanish (x32 Version: 2011.0713.1829.31376)
CCC Help Swedish (x32 Version: 2011.0713.1829.31376)
CCC Help Thai (x32 Version: 2011.0713.1829.31376)
CCC Help Turkish (x32 Version: 2011.0713.1829.31376)
ccc-utility64 (Version: 2011.0713.1830.31376)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Cooking Dash (x32)
CyberLink LabelPrint (x32 Version: 2.5.1908)
CyberLink Power2Go (x32 Version: 6.1.3602c)
D3DX10 (x32 Version: 15.4.2368.0902)
DealPly (x32 Version: )
Fast Boot (Version: 1.0.9)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Game Park Console (x32 Version: 6.2.1.1)
Governor of Poker (x32)
Hotel Dash Suite Success (x32)
Java Auto Updater (x32 Version: 2.0.6.1)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
Jewel Quest 3 (x32)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Luxor 3 (x32)
Mahjongg dimensions (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (x32 Version: 4.1.10329.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
Nuance PDF Reader (x32 Version: 6.00.0041)
PhotoScape (x32)
Plants vs Zombies (x32)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (x32 Version: 7.42.304.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6418)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
Sonic Focus (x32 Version: 1.0.0.4)
syncables desktop SE (x32 Version: 5.5.746.11492)
TeamViewer 7 (x32 Version: 7.0.12979)
TuneUp Utilities 2011 (x32 Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update_DealPly (HKCU)
VLC media player 2.0.4 (x32 Version: 2.0.4)
Ware PS/2-X64 8.0.5.1_WHQL (Version: 8.0.5.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
WinFlash (x32 Version: 2.31.1)
Wireless Console 3 (x32 Version: 3.0.21)
World of Goo (x32)
Zuma Deluxe 1.0 (x32)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2)
بريد Windows Live (x32 Version: 15.4.3502.0922)
عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (x32 Version: 15.4.5722.2)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {123A2627-2DF4-434F-ACA6-397BDF3506AA} - System32\Tasks\DealPly => C:\Users\Strolchi\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE [2013-05-28] ()
Task: {14A72B4D-77C2-4642-A477-9D95EA98A568} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2012-02-07] (DealPly)
Task: {24540599-891E-4BE9-9AD7-1C0CBD36D375} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {2C410F0C-5D9B-4670-9514-2FCABEDDF949} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS)
Task: {3022F413-88A7-4223-AE76-1E96E88F0523} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {359C4982-790E-4E5C-BB7C-FB6549A1FBFE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {68931DB2-7790-4258-85DA-B90E22ECC1FB} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {75363AC8-1D67-4C58-9492-028C548921F9} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software)
Task: {77120CD2-72B9-40E2-9DC9-B6A9BE316782} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2011-11-15] (ASUS)
Task: {A90C5B06-212B-4A3F-BF2A-1B11D8E20EC1} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-11-17] (ASUSTeK Computer Inc.)
Task: {B98E0112-09AC-4B3A-9610-F7E7218C385E} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS)
Task: {D02FCF48-91BA-424B-89AD-30C91DFD2D45} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {EAD40648-B6C8-4793-A3FC-F9040B2849ED} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09] (Sun Microsystems, Inc.)
Task: {F36B4406-CE4C-4A0F-8576-AB124D0F744F} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-11-22] (ASUS)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\Strolchi\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/23/2013 11:53:24 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/23/2013 06:05:26 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/23/2013 05:53:37 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/23/2013 11:27:06 AM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/23/2013 11:25:36 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Error:  Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error: (08/22/2013 11:25:30 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/22/2013 11:13:40 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/22/2013 00:11:57 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
Error:  Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error: (08/22/2013 00:11:57 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff

Error: (08/21/2013 07:14:15 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden.
Fehlercode: 0xffffffff


System errors:
=============
Error: (08/24/2013 05:32:41 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (08/24/2013 05:32:40 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}

Error: (08/24/2013 05:21:56 PM) (Source: DCOM) (User: )
Description: 1084TuneUp.UtilitiesSvc{5EF1CF5D-87A9-434B-8786-2A08E1C30F6C}

Error: (08/24/2013 05:20:59 PM) (Source: DCOM) (User: )
Description: 1084MSIServer{000C101C-0000-0000-C000-000000000046}

Error: (08/24/2013 05:19:20 PM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (08/24/2013 05:18:55 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
ATKWMIACPIIO
avipbb
avkmgr
discache
spldr
Wanarpv6

Error: (08/24/2013 05:18:55 PM) (Source: DCOM) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (08/24/2013 05:18:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Client Virtualization Handler" ist vom Dienst "Application Virtualization Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/24/2013 05:18:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (08/24/2013 05:18:44 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎24.‎08.‎2013 um 17:17:09 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (08/23/2013 11:53:24 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/23/2013 06:05:26 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/23/2013 05:53:37 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/23/2013 11:27:06 AM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/23/2013 11:25:36 AM) (Source: CVHSVC)(User: )
Description: Error:  Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error: (08/22/2013 11:25:30 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/22/2013 11:13:40 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/22/2013 00:11:57 PM) (Source: CVHSVC)(User: )
Description: Error:  Initialization failed 0x80070424 Type: 88::UnexpectedError.

Error: (08/22/2013 00:11:57 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff

Error: (08/21/2013 07:14:15 PM) (Source: Avira Antivirus)(User: NT-AUTORITÄT)
Description: AVGDLL_Init(avgntflt)0xffffffff


CodeIntegrity Errors:
===================================
  Date: 2012-08-02 08:17:10.498
  Description: N/A

  Date: 2012-08-02 08:17:10.358
  Description: N/A


==================== Memory info =========================== 

Percentage of memory in use: 30%
Total physical RAM: 2667.72 MB
Available physical RAM: 1860.59 MB
Total Pagefile: 5333.63 MB
Available Pagefile: 4568.21 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:128.18 GB) (Free:36.04 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:144.91 GB) (Free:144.76 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: AE14F3C6)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=128 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=145 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.24.03

Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
Strolchi :: STROLCHI-PC [Administrator]

24.08.2013 17:42:24
MBAM-log-2013-08-24 (17-49-52).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 215385
Laufzeit: 6 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 30
HKCR\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} (PUP.DealPly) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} (PUP.DealPly) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} (PUP.DealPly) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} (PUP.DealPly) -> Keine Aktion durchgeführt.
HKCR\CLSID\{00cbb66b-1d3b-46d3-9577-323a336acb50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\wit4ie.WitBHO.2 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\wit4ie.WitBHO (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\tdataprotocol.CTData (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\updatebho.TimerBHO.1 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\updatebho.TimerBHO (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly (PUP.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\BASE64 (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\CHROME (PUP.Blabbers) -> Keine Aktion durchgeführt.
HKCR\PROTOCOLS\HANDLER\PROX (PUP.Blabbers) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 4
HKCR\protocols\Handler\base64|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.
HKCR\protocols\Handler\chrome|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.
HKCR\protocols\Handler\prox|CLSID (PUP.Blabbers) -> Daten: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Regedit32 (Trojan.Agent) -> Daten: C:\Windows\system32\regedit.exe -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 14
C:\Program Files (x86)\BrowserCompanion (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply) -> Keine Aktion durchgeführt.
C:\Recycle.Bin (Trojan.Spyeyes) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\DealPly (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\DealPly\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 43
C:\Program Files (x86)\DealPly\DealPlyIE.dll (PUP.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe (PUP.DealPly.A) -> Keine Aktion durchgeführt.
C:\$Recycle.Bin\S-1-5-21-3672273364-3281130451-1100427844-1001\$R5964CA.exe (RiskWare.Tool.CK) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\lapqeteazore.exe (Trojan.Phex.THAGen3) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\Downloads\PhotoScape_V3.6.3(1).exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\Downloads\PhotoScape_V3.6.3.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\BCHelper.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\logo.ico (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\sqlite3.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\updater.ini (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\DealPly.crx (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\DealPlyUpdate.log (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\DealPlyUpdateRun.exe (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\icon.ico (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPly\uninst.exe (PUP.Optional.DealPly) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply) -> Keine Aktion durchgeführt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.lnk (PUP.OPtional.Dealply) -> Keine Aktion durchgeführt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.lnk (PUP.OPtional.Dealply) -> Keine Aktion durchgeführt.
C:\Windows\System32\regedit.exe (Trojan.Agent) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly\UpdateProc\src.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Strolchi\AppData\Roaming\DealPly\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\DealPly\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Windows\System32\config\systemprofile\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.

(Ende)