Hallo,

beim Besuch einer Webseite öffnete sich ein Popup, in dem mir mitgeteilt wurde, dass ich eine Straftat begangen habe und gegen Zahlung einer Geldsumme die Sache "erledigt sei". Mit der Funktion "Strg, Alt und EntF" habe ich meinen Browser geschlossen und im abgesicherten Modus problemlos gestartet. Mein Virenprogramm GDATA zeigt kein Virenalarm an. Das Notebook habe ich seitdem noch nicht heruntergefahren.

Wenn ich nun mit einem anderen Browser (chrome) online gehe, erscheint folgende Startseite hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21

Mozilla Firefox 24
Windows Vista

Wie kann ich überprüfen, ob mein Notebook infiziert ist?

Danke.

Ich muss dazu sagen, dass ich von Computerbegriffen wenig Ahnung habe.

Viele Grüße
Tennisfan1

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by Andreas Wagner (administrator) on ANDREASWAGNER on 07-10-2013 13:08:00
Running from C:\Users\Andreas Wagner\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
(Prolific Technology Inc.) C:\Windows\system32\IoctlSvc.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
() C:\Windows\system32\PSIService.exe
() C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Windows\tsnp2uvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Samsung Electronics.) C:\Program Files\Samsung Connection Manager\ModemPnPService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
() C:\Users\Andreas Wagner\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Hama GmbH & Co KG) C:\Program Files\Hama\Common\RaUI.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
(Mozilla Corporation) C:\PROGRAM FILES\MOZILLA FIREFOX\firefox.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVK.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6609440 2008-10-31] (Realtek Semiconductor)
HKLM\...\Run: [tsnp2uvc] - C:\Windows\tsnp2uvc.exe [233472 2008-08-28] ()
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1406024 2008-06-10] (Microsoft Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Blackcomb] - C:\Program Files\Samsung Connection Manager\ModemPnPService.exe [131072 2011-02-11] (Samsung Electronics.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM\...\Run: [G Data AntiVirus Tray] - C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM\...\Run: [GDFirewallTray] - C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files\g data\internetsecurity\avkkid\avkcks.exe,
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKCU\...\Run: [SCheck] - C:\Users\Andreas Wagner\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-10] ()
HKCU\...\Run: [Intermediate] - C:\Users\Andreas Wagner\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-10] ()
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Andreas Wagner\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKCU\...\Run: [CPN Notifier] - C:\Program Files\Comeon Poker 2.0\PokerNotifier.exe
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: {1067e522-24a7-11e1-85c3-001e101f82a7} - G:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {4f5c0e02-2569-11e1-82a8-001f16186dfc} - G:\AutoInstaller.exe
MountPoints2: {9c4b11ff-fb22-11e0-b2e3-001f16186dfc} - G:\pushinst.exe
MountPoints2: {c07aa363-1ccf-11e1-ac42-001f16186dfc} - G:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {c07aa377-1ccf-11e1-ac42-001e101fa831} - G:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {e4783114-23cc-11e1-afed-001e101fb4df} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\Administrator\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Administrator\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [ 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\RunOnce: [SetScreenSaver] - C:\Windows\System32\oobe\info\SetScreenSaver.lnk [ 2008-07-20] ()
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\RunOnce: [SetScreenSaver] - C:\Windows\System32\oobe\info\SetScreenSaver.lnk [ 2008-07-20] ()
AppInit_DLLs:    [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=400&systemid=406&apn_uid=0621504968224363&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=400&systemid=406&apn_uid=0621504968224363&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=400&systemid=406&apn_uid=0621504968224363&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default
FF DefaultSearchEngine: Search the web
FF SearchEngineOrder.1: Search Results
FF SelectedSearchEngine: Search the web
FF Homepage: about:home
FF Keyword.URL: hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Andreas Wagner\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Visualisateur 3D de 20-20 - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\2020Player@2020Technologies.com
FF Extension: ReminderFox - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: DownloadHelper - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: amznUWL2 - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: info - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\info@virustotal.com.xpi
FF Extension: om - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\om@offermosquito.com.xpi
FF Extension: No Name - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF Extension: No Name - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi
FF Extension: No Name - C:\Users\Andreas Wagner\AppData\Roaming\Mozilla\Firefox\Profiles\8m9u5lep.default\Extensions\{C4A4F5A0-4B89-4392-AFAC-D58010E349AF}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

Chrome: 
=======
CHR HomePage: hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21
CHR RestoreOnStartup: "hxxp://search.fbdownloader.com/?channel=sfde203fbdgy21"
CHR DefaultSearchURL: (Search the web) - hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
CHR DefaultSuggestURL: (Search the web) -       "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (OfferMosquito) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.5_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\ANDREA~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2095600 2013-08-21] (G Data Software AG)
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2369616 2013-08-21] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 resetWinService; C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe [70656 2008-10-29] ()
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [247152 2009-02-25] ()
R2 pgsql-8.3; "C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe" runservice -w -N "pgsql-8.3" -D "C:\Program Files\PostgreSQL\8.3\data\"

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-12-22] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin)
S3 C2XXCOM; C:\Windows\System32\DRIVERS\C2XXCOMV3.sys [38784 2010-08-09] (Samsung Electronics)
S3 C2xxUSB; C:\Windows\System32\DRIVERS\C2xxUSBV3.sys [36352 2010-11-04] (Samsung Electronics)
S3 C2xxUsbStorage; C:\Windows\System32\DRIVERS\C2xSTRV3.sys [6656 2010-06-10] (Samsung Electronics)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-10] (Microsoft Corporation)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2007-01-26] (AVM GmbH)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [45912 2013-09-25] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [96600 2013-09-25] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [52056 2013-09-25] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54104 2013-09-25] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [30040 2013-09-25] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [51032 2013-09-25] (G Data Software AG)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [40720 2009-06-17] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10384 2009-06-17] (Logitech, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-12-22] ()
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [552448 2007-08-15] (Ralink Technology Corp.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1799808 2008-12-29] ()
S3 WINIO; C:\Windows\system32\WinIo.sys [0 2009-09-03] ()
S3 Fadpu16E; \??\C:\Users\ADMINI~1\AppData\Local\Temp\Fadpu16E.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 uxddrv; \??\G:\uxddrv86.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-07 13:00 - 2013-10-07 13:00 - 00000000 ____D C:\FRST
2013-10-07 12:53 - 2013-10-07 12:51 - 01087213 _____ (Farbar) C:\Users\Andreas Wagner\Downloads\FRST.exe
2013-10-05 09:19 - 2013-10-05 09:19 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Local\Iceni
2013-10-05 09:18 - 2013-10-05 09:18 - 00000916 _____ C:\Users\Public\Desktop\Infix PDF Editor.lnk
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Local\Aspell
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\ProgramData\Iceni
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\ProgramData\Aspell
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\Program Files\Iceni
2013-10-05 09:14 - 2013-10-05 09:15 - 57736192 _____ (Iceni Technology Ltd                                        ) C:\Users\Andreas Wagner\Downloads\InfixSetup.exe
2013-10-05 09:05 - 2013-10-05 09:06 - 00000000 ____D C:\Users\Andreas Wagner\Downloads\Adobe Acrobat XI Pro
2013-10-05 08:52 - 2013-10-05 08:52 - 00000957 _____ C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2013-10-05 08:52 - 2013-10-05 08:52 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-10-05 08:52 - 2013-10-05 08:52 - 00000000 ____D C:\Program Files\Adobe Download Assistant
2013-10-05 08:51 - 2013-10-05 08:51 - 02469824 _____ C:\Users\Andreas Wagner\Downloads\AdobeDownloadAssistant.exe
2013-10-05 08:48 - 2013-10-05 08:49 - 00000000 ____D C:\Program Files\Common Files\Soda PDF 5
2013-10-05 08:47 - 2013-10-05 08:48 - 07103112 _____ (LULU Software) C:\Users\Andreas Wagner\Downloads\Soda_PDF_5_Installer.exe
2013-10-02 14:16 - 2013-10-02 14:16 - 02328864 _____ C:\Users\Andreas Wagner\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\Documents\Amazon MP3
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Amazon
2013-09-30 21:44 - 2013-09-30 21:46 - 00000000 ____D C:\Program Files\MOZILLA FIREFOX
2013-09-25 00:14 - 2013-09-25 00:15 - 00000366 _____ C:\Users\Andreas Wagner\Documents\cc_20130925_001453.reg
2013-09-16 16:26 - 2013-09-16 16:30 - 00001787 _____ C:\Users\Public\Desktop\Stan James.lnk
2013-09-16 16:25 - 2013-09-16 16:25 - 00722968 _____ () C:\Users\Andreas Wagner\Downloads\stanjames.exe
2013-09-16 14:11 - 2013-09-16 14:15 - 00000000 ____D C:\Bovada
2013-09-16 14:11 - 2013-09-16 14:11 - 00000391 _____ C:\Users\Public\Desktop\BovadaPoker.lnk
2013-09-16 14:09 - 2013-09-16 14:09 - 00685816 _____ (                                                            ) C:\Users\Andreas Wagner\Downloads\BovadaPokerClient.exe
2013-09-13 11:11 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 11:11 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 11:11 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 11:11 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 11:11 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-09-13 11:11 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 11:11 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-09-13 11:11 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 11:11 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 11:11 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-09-13 11:11 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-09-13 11:11 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 11:11 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 11:11 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 11:11 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-09-13 11:11 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-13 09:31 - 2013-08-08 03:45 - 02049536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-13 09:31 - 2013-07-16 06:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-09-11 08:26 - 2013-09-11 08:26 - 00001362 _____ C:\Users\Andreas Wagner\Documents\cc_20130911_082605.reg

==================== One Month Modified Files and Folders =======

2013-10-07 13:00 - 2013-10-07 13:00 - 00000000 ____D C:\FRST
2013-10-07 12:51 - 2013-10-07 12:53 - 01087213 _____ (Farbar) C:\Users\Andreas Wagner\Downloads\FRST.exe
2013-10-07 12:44 - 2012-10-07 10:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-07 12:42 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-07 12:42 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-07 12:17 - 2010-05-30 11:19 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Skype
2013-10-07 12:11 - 2009-06-27 20:31 - 01154845 _____ C:\Windows\WindowsUpdate.log
2013-10-07 09:37 - 2011-01-10 20:37 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Microgaming
2013-10-07 09:16 - 2009-03-02 15:15 - 00131216 _____ C:\ProgramData\nvModes.001
2013-10-07 09:15 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-06 22:22 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-06 17:48 - 2009-03-02 15:15 - 00131216 _____ C:\ProgramData\nvModes.dat
2013-10-06 00:02 - 2013-03-18 15:48 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\HoldemManager
2013-10-06 00:01 - 2013-03-18 17:24 - 00016170 _____ C:\speederr.txt
2013-10-05 11:13 - 2013-02-25 22:53 - 00000000 ____D C:\Program Files\Full Tilt Poker.Eu
2013-10-05 09:19 - 2013-10-05 09:19 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Local\Iceni
2013-10-05 09:18 - 2013-10-05 09:18 - 00000916 _____ C:\Users\Public\Desktop\Infix PDF Editor.lnk
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Local\Aspell
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\ProgramData\Iceni
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\ProgramData\Aspell
2013-10-05 09:18 - 2013-10-05 09:18 - 00000000 ____D C:\Program Files\Iceni
2013-10-05 09:15 - 2013-10-05 09:14 - 57736192 _____ (Iceni Technology Ltd                                        ) C:\Users\Andreas Wagner\Downloads\InfixSetup.exe
2013-10-05 09:06 - 2013-10-05 09:05 - 00000000 ____D C:\Users\Andreas Wagner\Downloads\Adobe Acrobat XI Pro
2013-10-05 08:52 - 2013-10-05 08:52 - 00000957 _____ C:\Users\Public\Desktop\Adobe Download Assistant.lnk
2013-10-05 08:52 - 2013-10-05 08:52 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-10-05 08:52 - 2013-10-05 08:52 - 00000000 ____D C:\Program Files\Adobe Download Assistant
2013-10-05 08:51 - 2013-10-05 08:51 - 02469824 _____ C:\Users\Andreas Wagner\Downloads\AdobeDownloadAssistant.exe
2013-10-05 08:49 - 2013-10-05 08:48 - 00000000 ____D C:\Program Files\Common Files\Soda PDF 5
2013-10-05 08:48 - 2013-10-05 08:47 - 07103112 _____ (LULU Software) C:\Users\Andreas Wagner\Downloads\Soda_PDF_5_Installer.exe
2013-10-02 14:16 - 2013-10-02 14:16 - 02328864 _____ C:\Users\Andreas Wagner\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\Documents\Amazon MP3
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-10-02 14:16 - 2013-10-02 14:16 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Amazon
2013-10-02 09:30 - 2010-09-20 08:07 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\vlc
2013-10-01 18:04 - 2012-08-16 11:22 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-09-30 23:41 - 2013-02-25 22:56 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Local\FullTiltPoker.eu
2013-09-30 21:46 - 2013-09-30 21:44 - 00000000 ____D C:\Program Files\MOZILLA FIREFOX
2013-09-29 15:44 - 2013-01-16 22:41 - 00001427 _____ C:\Users\Andreas Wagner\Desktop\bwin Poker.lnk
2013-09-28 21:29 - 2013-01-05 13:16 - 00016048 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-09-27 15:20 - 2012-10-01 10:14 - 02429882 _____ C:\Users\Andreas Wagner\Documents\Poker Konten11.xlsx
2013-09-26 21:44 - 2011-02-01 10:25 - 00001475 _____ C:\Users\Andreas Wagner\Desktop\partypoker.lnk
2013-09-26 21:33 - 2013-02-20 12:12 - 00001355 _____ C:\Users\Andreas Wagner\Desktop\WPT Poker.lnk
2013-09-25 16:05 - 2012-08-14 20:56 - 04991540 _____ C:\blitzerr.txt
2013-09-25 08:34 - 2013-03-27 14:13 - 00030040 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-09-25 00:30 - 2013-03-27 13:46 - 00001884 _____ C:\Users\Public\Desktop\G Data InternetSecurity 2014.lnk
2013-09-25 00:30 - 2013-03-27 13:44 - 00051032 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-09-25 00:30 - 2009-06-30 10:58 - 00052056 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2013-09-25 00:29 - 2013-03-27 13:45 - 00054104 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys
2013-09-25 00:29 - 2013-03-27 13:44 - 00096600 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-09-25 00:29 - 2013-03-27 13:44 - 00045912 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2013-09-25 00:15 - 2013-09-25 00:14 - 00000366 _____ C:\Users\Andreas Wagner\Documents\cc_20130925_001453.reg
2013-09-20 11:44 - 2012-07-16 21:51 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-09-20 11:44 - 2011-10-07 08:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-09-19 09:51 - 2012-12-17 10:35 - 00000000 ____D C:\BlackChipPoker
2013-09-19 09:51 - 2010-09-22 22:32 - 00000000 ____D C:\Users\Andreas Wagner\dwhelper
2013-09-18 08:44 - 2010-05-30 11:18 - 00000000 ___RD C:\Program Files\Skype
2013-09-18 08:44 - 2010-05-30 11:17 - 00000000 ____D C:\ProgramData\Skype
2013-09-16 16:30 - 2013-09-16 16:26 - 00001787 _____ C:\Users\Public\Desktop\Stan James.lnk
2013-09-16 16:25 - 2013-09-16 16:25 - 00722968 _____ () C:\Users\Andreas Wagner\Downloads\stanjames.exe
2013-09-16 14:15 - 2013-09-16 14:11 - 00000000 ____D C:\Bovada
2013-09-16 14:11 - 2013-09-16 14:11 - 00000391 _____ C:\Users\Public\Desktop\BovadaPoker.lnk
2013-09-16 14:09 - 2013-09-16 14:09 - 00685816 _____ (                                                            ) C:\Users\Andreas Wagner\Downloads\BovadaPokerClient.exe
2013-09-16 12:55 - 2009-07-19 15:30 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\ZoomBrowser EX
2013-09-16 10:31 - 2009-07-19 15:21 - 00000000 ____D C:\ProgramData\ZoomBrowser
2013-09-14 12:41 - 2009-02-26 21:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-13 11:43 - 2006-11-02 14:47 - 00343856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 11:01 - 2013-07-15 07:45 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 10:54 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-13 00:24 - 2010-04-03 22:20 - 00000000 ____D C:\Program Files\OnGame Hand Grabber
2013-09-13 00:23 - 2010-08-26 12:41 - 00000000 ____D C:\Europoker
2013-09-13 00:20 - 2011-08-19 11:18 - 00000000 ____D C:\Iperpokerclub
2013-09-13 00:18 - 2011-09-18 19:35 - 00000000 ____D C:\HollywoodPoker
2013-09-13 00:11 - 2013-05-09 23:28 - 00000000 ____D C:\Users\Andreas Wagner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paddy Power Poker
2013-09-13 00:11 - 2009-06-27 22:13 - 00000000 ____D C:\Poker
2013-09-13 00:07 - 2013-04-20 15:02 - 00000000 ____D C:\Program Files\TableNinjaPP
2013-09-11 08:26 - 2013-09-11 08:26 - 00001362 _____ C:\Users\Andreas Wagner\Documents\cc_20130911_082605.reg
2013-09-10 15:36 - 2011-11-24 23:01 - 00000000 ____D C:\Users\Andreas Wagner\Documents\LuckyAcePoker

Some content of TEMP:
====================
C:\Users\Andreas Wagner\AppData\Local\Temp\7_zip32.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-07 09:22

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 03-10-2013
Ran by Andreas Wagner at 2013-10-07 13:12:15
Running from C:\Users\Andreas Wagner\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: G Data InternetSecurity 2014 (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity 2014 (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

24hPoker (Version: 16.6.2.11243)
24hPoker (Version: 54.0.31226-30520-7)
7-Zip 9.20
888poker
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe AIR (Version: 3.7.0.1860)
Adobe Download Assistant (Version: 1.2.6)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (Version: 11.8.800.168)
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4)
Adobe Shockwave Player 11.6 (Version: 11.6.7.637)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Apple Application Support (Version: 2.3.4)
Apple Software Update (Version: 2.1.3.127)
Badaboom 1.1.1.194 (Version: 1.1.1.194)
Betfred Poker
BetMost Poker
BlackChipPoker (Version: 16.6)
BovadaPoker (Version:  )
bwin Poker 1.0.0 (Version: 1.0.0)
Cake Poker 2.0 (Version: 2.0.1.6506)
Canon Camera Window DC_DV 6 for ZoomBrowser EX (Version: 6.4.0.9)
Canon Camera Window MC 6 for ZoomBrowser EX (Version: 6.3.0.8)
Canon G.726 WMP-Decoder (Version: 1.1.0.4)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (Version: 1.3.1.5)
Canon Internet Library for ZoomBrowser EX (Version: 1.5.1.4)
Canon MovieEdit Task for ZoomBrowser EX (Version: 2.4.0.14)
Canon RAW Image Task for ZoomBrowser EX (Version: 2.6.0.13)
Canon RemoteCapture Task for ZoomBrowser EX (Version: 1.7.0.8)
Canon Utilities PhotoStitch (Version: 3.1.19.43)
Canon Utilities ZoomBrowser EX (Version: 5.8.0.74)
CCleaner (Version: 3.25)
CDDRV_Installer (Version: 4.60)
Choice Guard (Version: 1.2.87.0)
Comeon Poker 2.0 (Version: 2.0.1.6587)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
Coral Poker
Corel MediaOne (Version: 2.00.0000)
CorelDRAW Essential Edition 3
CorelDRAW Essential Edition 3 (Version: 3.0)
CyberLink MediaShow (Version: 4.1.2325)
CyberLink PhotoNow (Version: 1.1.5615)
CyberLink PowerDirector (Version: 7.0.2625)
CyberLink PowerDVD 8 (Version: 8.0.2606a)
CyberLink PowerProducer (Version: 5.0.1.1412)
CyberLink YouCam (Version: 2.0.2521)
DE (Version: 3.0)
DU Meter (Version: 3.50 Build R2822)
erLT (Version: 1.20.0137)
fotokasten comfort
Full Tilt Poker (Version: 4.46.3.WIN.FullTilt.COM)
Full Tilt Poker.Eu (Version: 4.55.4.WIN.FullTilt.EU)
FUSSBALL MANAGER 06
G Data InternetSecurity 2014 (Version: 24.0.3.2)
Gala Casino Poker
Google Chrome (Version: 29.0.1547.76)
Google Update Helper (Version: 1.3.21.153)
Hama Wireless LAN Adapter (Version: 1.00.0000)
Heypoker 1.0.0 (Version: 1.0.0)
Holdem Manager
Holdem Manager (Version: 1.07)
Holdem Manager 2
HoldemResources Calculator (Version: release)
Infix PDF Editor Version 6.1.8.0 (Version: 6.1.8.0)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 30 (Version: 6.0.300)
join.me (HKCU Version: 1.9.0.133)
Junk Mail filter update (Version: 14.0.8050.1202)
KeePass Password Safe 1.23 (Version: 1.23)
KhalInstallWrapper (Version: 2.00.0000)
Ladbrokes Poker (Version: 16.3.2.9976)
Logitech SetPoint (Version: 4.80)
LuckyAcePoker.com
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft IntelliPoint 6.3 (Version: 6.30.191.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) (Version: 9.4.5000.00)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 8 Essentials (Version: 8.3.124)
neroxml (Version: 1.0.0)
NVIDIA Drivers (Version: 1.3)
partypoker
pgAdmin III 1.10 (Version: 1.10)
PKR
Poker 770
Poker Heaven
PokerHeaven by Ongame 1.0.0 (Version: 1.0.0)
PokerStars
PokerStars.fr
PokerStrategy.com Equilab (Version: 1.2.8.0)
PokerTracker 4 (remove only)
PostgreSQL 8.3 (Version: 8.3)
QuickTime (Version: 7.74.80.86)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5730)
Realtek USB 2.0 Card Reader (Version: 6.0.6000.20111)
RedKings Poker 1.0.0 (Version: 1.0.0)
Redmark Vereinsverwaltung easy (Version: 8.0)
Samsung Connection Manager (Version: 112)
Skype™ 6.7 (Version: 6.7.102)
SmartFTP Client (Version: 4.1.1321.0)
Stan James (Version: 16.6.2.11243)
StarMoney (Version: 1.0)
swMSM (Version: 12.0.0.1)
Titan Poker
TN2 (Version: 2.1.38)
UB
Unibet (Version: 16.6.2.11243)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.5000.00)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Update Manager (Version: 4.60)
USB Video Device (Version: 5.8.51000.200_WHQL)
VCRedistSetup (Version: 1.0.0)
VLC media player 2.0.7 (Version: 2.0.7)
Windows Live Anmelde-Assistent (Version: 5.000.818.6)
Windows Live Call (Version: 14.0.8050.1202)
Windows Live Communications Platform (Version: 14.0.8050.1202)
Windows Live Essentials (Version: 14.0.8050.1202)
Windows Live Fotogalerie (Version: 14.0.8051.1204)
Windows Live Mail (Version: 14.0.8050.1202)
Windows Live Messenger (Version: 14.0.8050.1202)
Windows Live Sync (Version: 14.0.8050.1202)
Windows Live Writer (Version: 14.0.8050.1202)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Winner Poker
WinRAR
WPT Poker

==================== Restore Points  =========================

12-09-2013 22:04:48 Removed Flopzilla
12-09-2013 22:07:00 Removed TableNinjaPP
13-09-2013 08:51:20 Windows Update
13-09-2013 09:54:16 Windows Update
13-09-2013 10:14:29 Windows Update
13-09-2013 12:18:25 Windows Update
14-09-2013 10:28:29 Windows Update
16-09-2013 19:35:10 Geplanter Prüfpunkt
17-09-2013 17:38:42 Geplanter Prüfpunkt
20-09-2013 09:49:23 Windows Update
22-09-2013 21:45:51 Geplanter Prüfpunkt
23-09-2013 10:31:15 Geplanter Prüfpunkt
24-09-2013 12:13:16 Windows Update
01-10-2013 16:44:24 Windows Update

==================== Hosts content: ==========================

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0A6798D4-9AA2-4276-9EC5-9E326A7D95DC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {1C51E2C6-42A7-4F44-B61B-A59329087C8F} - System32\Tasks\{C5DA12E5-BDA2-4A49-9374-B15DC81F84F6} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111.217/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {1E05D7F5-5D2B-4E57-B247-11FE620505BA} - System32\Tasks\{F49FD84B-8610-4C34-99CF-1D17EC9B25FC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.111.217/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4B6A5E64-650F-46A9-B963-17F7B2E9D8A3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-11-24] (Piriform Ltd)
Task: {565DA20E-2649-4709-BAEF-AAD3F2D74376} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-19] (Google Inc.)
Task: {5E362009-664B-4BBC-87D5-77B07297D0BC} - System32\Tasks\{ECDCB764-0038-4EE4-8CC3-E7DE5604C198} => C:\Program Files\Skype\Phone\Skype.exe [2013-07-25] (Skype Technologies S.A.)
Task: {A3EB9CB5-4D36-492D-85AF-4015136DB9D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A8E398C2-8F99-457D-8A1B-C0430325A176} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-19] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EA2C60FF-7B09-4697-BB92-BE9F118F8C4D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2008-06-10] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-04-30 15:57 - 2010-03-15 11:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2010-11-25 21:59 - 2009-07-20 13:27 - 00017936 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll
2013-09-30 21:46 - 2013-09-30 21:46 - 03279768 _____ () C:\PROGRAM FILES\MOZILLA FIREFOX\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Program Files\Cake Poker 2.0:MID
AlternateDataStreams: C:\Program Files\Comeon Poker 2.0:MID

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/07/2013 11:05:29 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\5> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:29 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\5> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:27 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\4> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:27 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\4> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:24 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\3> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:24 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\3> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:20 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\2> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:20 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\2> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:18 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\1> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (10/07/2013 11:05:18 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS WAGNER\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\8M9U5LEP.DEFAULT\CACHE\1> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (10/07/2013 09:17:00 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (10/06/2013 05:50:50 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{21A42317-615A-44E7-9C55-EA9E3D1644-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/06/2013 05:48:47 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:47 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193

Error: (10/06/2013 05:48:46 PM) (Source: Service Control Manager) (User: )
Description: WINIO%%193


Microsoft Office Sessions:
=========================
Error: (07/11/2013 03:55:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 63 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/10/2013 09:25:07 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 38 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/10/2013 09:24:14 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 35 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/24/2013 10:38:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 38 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/24/2013 09:22:55 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 17 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/24/2013 09:22:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 14 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/24/2013 09:21:59 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 40 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/24/2013 09:20:00 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 31 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/21/2013 00:21:19 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 79 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/21/2013 10:22:54 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 41 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2013-10-07 13:11:34.901
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:11:34.559
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:11:34.153
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:11:33.788
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:10:42.282
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:10:41.915
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:10:41.565
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-10-07 13:10:41.167
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-25 00:30:13.727
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-09-25 00:30:13.348
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\HookCentre.sys.tmp" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 59%
Total physical RAM: 3065.95 MB
Available physical RAM: 1235.97 MB
Total Pagefile: 6334.18 MB
Available Pagefile: 3356.96 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.38 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:440.37 GB) (Free:75.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:25.38 GB) (Free:10.76 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 806E6361)
Partition 1: (Active) - (Size=440 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=25 GB) - (Type=0C)

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,

trotz Deaktivierung von GDATA hat sich das Programm gemeldet und die Datei Av-test.txt als Virus deklariert und bringt mir jetzt Virenalarm bei Engine B (EICAR_TEST_FILE). Der Zugriff auf die infizierte Datei wurde gesperrt. Ich kann dies nicht entsprerren.

Das Programm Combofix: Administrator: auto Scan
Suche nach infizierten Dateien...
Die Suche dauert normalerweise....

reagiert - wahrscheinlich aufgrund des Virenprogramms - nicht mehr.

Was soll ich machen?

CF beenden wenn es immer noch hängt, GDATA deinstallieren, dann CF nochmal versuchen.