Mit einem Video-Konverter-Download, nicht wie sonst von Heise, habe ich mir Qvo6 in Firefox eingefangen. Mit Virenscannern habe ich zwar 4 Viren beseitigt, ferner SpyHunter4, aber nicht Qvo6. Nun trau ich mich nicht allein an Regedit.

Nach euren Anweisungen habe ich
Defrogger
FRST
GMER
und vorher mbar und adwcleaner laufen lassen. Hier sind die Ergebnisse:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by *******  at 2013-10-14 08:21:07
Running from C:\Users\*************\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Bridge 1.0 (x32 Version: 001.000.001)
Adobe Common File Installer (x32 Version: 1.00.001)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Help Center 1.0 (x32 Version: 1.0.1)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1)
Aloha TriPeaks (x32 Version: 2.2.0.98)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Bejeweled 3 (x32 Version: 2.2.0.98)
CameraHelperMsi (x32 Version: 13.51.815.0)
CASSY*Lab*2 (x32 Version: 2.15.4841)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Classic Shell (Version: 3.6.7)
Digitale Schulbücher (x32 Version: 1.1.0.65)
Dropbox (HKCU Version: 2.2.13)
eDocPrintPro (Version: 3.18.4)
Empress of the Deep - The Darkest Secret (x32 Version: 2.2.0.98)
erLT (x32 Version: 1.20.138.34)
FileZilla Client 3.7.3 (x32 Version: 3.7.3)
Google Update Helper (x32 Version: 1.3.23.0)
gs_x64 (Version: 9.06)
Intel AppUp(SM) center (x32 Version: 3.6.1.33268.15)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Network Connections Drivers (Version: 17.3)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2828)
Intel(R) Rapid Start Technology (x32 Version: 2.1.0.1002)
Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) WiDi (Version: 3.5.34.0)
Intel® PROSet/Wireless WiFi Software (Version: 15.05.2000.1462)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
IrfanView (remove only) (x32 Version: 4.36)
Island Tribe (x32 Version: 2.2.0.98)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
K-Lite Codec Pack 5.9.0 (Basic) (x32 Version: 5.9.0)
Logitech Webcam-Software (x32 Version: 2.80)
LWS Facebook (x32 Version: 13.50.854.0)
LWS Gallery (x32 Version: 13.51.827.0)
LWS Help_main (x32 Version: 13.51.828.0)
LWS Launcher (x32 Version: 13.51.828.0)
LWS Motion Detection (x32 Version: 13.51.815.0)
LWS Pictures And Video (x32 Version: 13.51.815.0)
LWS Twitter (x32 Version: 13.30.1346.0)
LWS Webcam Software (x32 Version: 13.51.815.0)
LWS WLM Plugin (x32 Version: 1.30.1201.0)
LWS YouTube Plugin (x32 Version: 13.31.1038.0)
Magic Academy (x32 Version: 2.2.0.98)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
McAfee Anti-Theft (Version: 1.0)
Metzler Physik digital (x32 Version: 31186)
Microsoft Office (x32 Version: 14.0.6120.5004)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.31117)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.31121)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
Nero 12 Essentials Toshiba (x32 Version: 12.0.00600)
Nero BackItUp (x32 Version: 12.0.3000)
Nero BackItUp Help (CHM) (x32 Version: 12.0.3000)
Nero Blu-ray Player (x32 Version: 12.0.17500)
Nero Blu-ray Player Help (CHM) (x32 Version: 12.0.4000)
Nero BurnRights (x32 Version: 12.0.5000)
Nero BurnRights Help (CHM) (x32 Version: 12.0.5000)
Nero ControlCenter (x32 Version: 11.0.15300)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.5000)
Nero Core Components (x32 Version: 11.0.18200)
Nero Express (x32 Version: 12.0.20000)
Nero Express Help (CHM) (x32 Version: 12.0.5000)
Nero Kwik Media (x32 Version: 1.18.18900)
Nero Kwik Media Help (CHM) (x32 Version: 12.0.4000)
Nero Kwik Themes Basic (x32 Version: 12.0.11500)
Nero Launcher (x32 Version: 12.2.6000)
Nero RescueAgent (x32 Version: 12.0.9000)
Nero RescueAgent Help (CHM) (x32 Version: 12.0.3000)
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)
Nero Update (x32 Version: 11.0.11800.31.0)
Notepad++ (x32 Version: 6.3.3)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
Peggle Nights (x32 Version: 2.2.0.98)
Phase 5 HTML-Editor (x32 Version: 5.6.2.3)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
Prerequisite installer (x32 Version: 12.0.0002)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6748)
RICOH Media Driver v2.22.17.01 (x32 Version: 2.22.17.01)
Shared C Run-time for x64 (Version: 10.0.0)
SMART Common Files (x32 Version: 11.3.267.0)
SMART German Language Pack (x32 Version: 11.2.29.0)
SMART Ink (x32 Version: 1.1.549.1)
SMART Notebook (x32 Version: 11.2.637.0)
SMART Product Drivers (x32 Version: 11.1.669.0)
SMART Response Software (x32 Version: 4.6.962.0)
Splashtop Software Updater (x32 Version: 1.5.6.14)
Splashtop Streamer (x32 Version: 2.4.5.2)
Spybot - Search & Destroy (x32 Version: 2.1.21)
SRS Premium Sound Control Panel (Version: 1.12.4600)
Synaptics Pointing Device Driver (Version: 16.2.10.5)
TOSHIBA Desktop Assist (Version: 1.00.0007.00002)
TOSHIBA eco Utility (Version: 2.0.0.6415)
TOSHIBA Function Key (Version: 1.00.6625.6402)
TOSHIBA Manuals (x32 Version: 10.10)
TOSHIBA Password Utility (Version: 3.00.0002.64003)
TOSHIBA PC Health Monitor (Version: 1.8.17.640104)
TOSHIBA Recovery Media Creator (x32 Version: 2.2.1.54043006)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.2.2.00)
TOSHIBA Service Station (Version: 2.4.6)
TOSHIBA System Driver (x32 Version: 1.00.0012)
TOSHIBA System Settings (x32 Version: 1.00.0002.32002)
Toshiba TEMPRO (x32 Version: 4.5.0)
Update Installer for WildTangent Games App (x32)
VianaNET V3.0 (x32 Version: 3.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Welcome App (Start-up experience) (x32 Version: 12.0.14000)
WildTangent Games (x32 Version: 1.0.3.0)
WildTangent Games App (Toshiba Games) (x32 Version: 4.0.9.7)
Windows 7 Codec Pack 4.0.8 (x32 Version: 4.0.8)
XSManager (x32 Version: 3.0)
Yawcam 0.4.1 (x32)

==================== Restore Points  =========================

11-10-2013 03:50:51 TuneUp Utilities 2014 wird entfernt
13-10-2013 15:18:03 Removed SpyHunter

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {07745C55-005F-4853-B559-3F675BC37CC1} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {15E1D2E2-461D-4FB4-9FD9-A949170AB80B} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {4EA04B42-47E6-41DA-B17D-55CDEB864FD5} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation)
Task: {64A95AE7-B339-486C-95C9-5F81B6F5390A} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2012-08-23] (TOSHIBA Corporation)
Task: {6F55F009-66CD-447B-8A59-6A17BD81B78F} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {78320D8F-32A3-4052-8FD5-074B55BFF282} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {79883A54-4DBC-4603-B49E-47D58272F64A} - System32\Tasks\Dealply => C:\Users\FRIEDE~1\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: {89A3EF59-80D8-4277-AAA7-84286EE6F95E} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2013-07-18] (Toshiba Europe GmbH)
Task: {9ADEBECF-8A7F-42E4-A34C-BA31615CA93B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {A3E0CF19-12D6-4067-BF16-7C783D61E6B5} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-16] (Synaptics Incorporated)
Task: {FC1FD5FC-FFF3-42DC-87E5-12C904202384} - System32\Tasks\DigitalSite => C:\Users\FRIEDE~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: {FC551CB1-3DC2-43C6-8DD5-E06BF79FE05E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Dealply.job => C:\Users\FRIEDE~1\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\DigitalSite.job => C:\Users\FRIEDE~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE

==================== Loaded Modules (whitelisted) =============

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-08-06 07:36 - 2012-08-06 07:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-07-19 04:38 - 2012-07-19 04:38 - 00020904 _____ () C:\Program Files\TOSHIBA\Hotkey\SmoothView.dll
2012-07-19 04:38 - 2012-07-19 04:38 - 00049064 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnZ.dll
2010-03-04 00:15 - 2010-03-04 00:15 - 00019256 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnF10.dll
2010-03-04 00:15 - 2010-03-04 00:15 - 00019256 _____ () C:\Program Files\TOSHIBA\Hotkey\Hotkey\FnF11.dll
2012-08-14 05:13 - 2012-08-14 05:13 - 00018344 _____ () C:\Program Files\TOSHIBA\Teco\TecoMUI.dll
2013-10-10 14:09 - 2013-07-31 21:54 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00022440 _____ () C:\windows\WinSxS\x86_smarttech.boost_system.vc100.1.44_9ca15c999435ee05_1.0.1.0_none_3b5a2197c9e04a1f\boost_system-vc100-mt-1_44.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00054184 _____ () C:\windows\WinSxS\x86_smarttech.boost_thread.vc100.1.44_9ca15c999435ee05_1.0.1.0_none_472b4edec4bf8550\boost_thread-vc100-mt-1_44.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00053680 _____ () C:\windows\WinSxS\x86_smarttech.boost_signals.vc100.1.44_9ca15c999435ee05_1.0.1.0_none_8ce60f5e6bc42419\boost_signals-vc100-mt-1_44.dll
2013-07-02 23:37 - 2013-07-02 23:37 - 02364840 _____ () C:\windows\WinSxS\x86_smarttech.xqilla.vc100.1.1_9ca15c999435ee05_1.0.1.0_none_1bed397492abdaf4\xqilla-vc100-1_0.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00066976 _____ () C:\windows\WinSxS\x86_smarttech.zlib.vc100.1.2_9ca15c999435ee05_1.0.1.0_none_a9eddec61c291613\zlib1-vc100-mt-1.2.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 02310056 _____ () C:\windows\WinSxS\x86_smarttech.redland.vc100.1.0_9ca15c999435ee05_1.0.1.0_none_abdcef110f80cf28\redland-vc100-1_0_9.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00145328 _____ () C:\windows\WinSxS\x86_smarttech.boost_filesystem.vc100.1.44_9ca15c999435ee05_1.0.1.0_none_73736a4543634e09\boost_filesystem-vc100-mt-1_44.dll
2013-07-02 23:35 - 2013-07-02 23:35 - 00051120 _____ () C:\windows\WinSxS\x86_smarttech.boost_date_time.vc100.1.44_9ca15c999435ee05_1.0.1.0_none_50d6b3902c95d15a\boost_date_time-vc100-mt-1_44.dll
2013-10-11 17:08 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-10-11 17:08 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-10-11 17:08 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-10-11 17:08 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-10-11 17:08 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-01-11 21:13 - 2012-06-25 20:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-08-07 10:03 - 2013-08-07 10:03 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-08-07 10:03 - 2013-08-07 10:03 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-08-07 10:03 - 2013-08-07 10:03 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-10-01 10:12 - 2013-10-01 10:12 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/13/2013 05:19:42 PM) (Source: MsiInstaller) (User: STOCKROSE)
Description: Produkt: SpyHunter -- Fehler 1721. Es liegt ein dieses Windows Installer-Paket betreffendes Problem vor. Ein für den Abschluss der Installation erforderliches Programm konnte nicht ausgeführt werden. Wenden Sie sich an das Supportpersonal oder den Hersteller des Pakets. Aktion: , Pfad: WiseCustomCall, Befehl: g5

Error: (10/11/2013 05:37:32 PM) (Source: MsiInstaller) (User: STOCKROSE)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\DealPlyLiveHelper.msi

Error: (10/11/2013 10:15:12 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (10/11/2013 05:34:14 AM) (Source: MsiInstaller) (User: STOCKROSE)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\DealPlyLiveHelper.msi

Error: (10/10/2013 05:12:25 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AcroRd32.exe, Version: 11.0.3.37, Zeitstempel: 0x518e18e3
Name des fehlerhaften Moduls: AcroRd32.dll, Version: 11.0.3.37, Zeitstempel: 0x518e18d4
Ausnahmecode: 0xc000041d
Fehleroffset: 0x0004e0e9
ID des fehlerhaften Prozesses: 0xd4
Startzeit der fehlerhaften Anwendung: 0xAcroRd32.exe0
Pfad der fehlerhaften Anwendung: AcroRd32.exe1
Pfad des fehlerhaften Moduls: AcroRd32.exe2
Berichtskennung: AcroRd32.exe3
Vollständiger Name des fehlerhaften Pakets: AcroRd32.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcroRd32.exe5

Error: (10/10/2013 05:12:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AcroRd32.exe, Version: 11.0.3.37, Zeitstempel: 0x518e18e3
Name des fehlerhaften Moduls: AcroRd32.dll, Version: 11.0.3.37, Zeitstempel: 0x518e18d4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004e0e9
ID des fehlerhaften Prozesses: 0xd4
Startzeit der fehlerhaften Anwendung: 0xAcroRd32.exe0
Pfad der fehlerhaften Anwendung: AcroRd32.exe1
Pfad des fehlerhaften Moduls: AcroRd32.exe2
Berichtskennung: AcroRd32.exe3
Vollständiger Name des fehlerhaften Pakets: AcroRd32.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcroRd32.exe5

Error: (10/10/2013 03:26:24 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (10/10/2013 02:05:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avconfig.exe, Version: 14.0.0.383, Zeitstempel: 0x52492d1a
Name des fehlerhaften Moduls: avconfig.exe, Version: 14.0.0.383, Zeitstempel: 0x52492d1a
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0003bde2
ID des fehlerhaften Prozesses: 0x1548
Startzeit der fehlerhaften Anwendung: 0xavconfig.exe0
Pfad der fehlerhaften Anwendung: avconfig.exe1
Pfad des fehlerhaften Moduls: avconfig.exe2
Berichtskennung: avconfig.exe3
Vollständiger Name des fehlerhaften Pakets: avconfig.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avconfig.exe5

Error: (10/10/2013 02:05:39 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: AVWSC.EXE, Version: 14.0.0.383, Zeitstempel: 0x52492e8c
Name des fehlerhaften Moduls: ccguard.dll, Version: 14.0.0.383, Zeitstempel: 0x52492d70
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000300ed
ID des fehlerhaften Prozesses: 0x15e4
Startzeit der fehlerhaften Anwendung: 0xAVWSC.EXE0
Pfad der fehlerhaften Anwendung: AVWSC.EXE1
Pfad des fehlerhaften Moduls: AVWSC.EXE2
Berichtskennung: AVWSC.EXE3
Vollständiger Name des fehlerhaften Pakets: AVWSC.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AVWSC.EXE5

Error: (10/10/2013 01:32:20 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avwsc.exe, Version: 14.0.0.383, Zeitstempel: 0x52492e8c
Name des fehlerhaften Moduls: ccguard.dll, Version: 14.0.0.383, Zeitstempel: 0x52492d70
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000300ed
ID des fehlerhaften Prozesses: 0x1570
Startzeit der fehlerhaften Anwendung: 0xavwsc.exe0
Pfad der fehlerhaften Anwendung: avwsc.exe1
Pfad des fehlerhaften Moduls: avwsc.exe2
Berichtskennung: avwsc.exe3
Vollständiger Name des fehlerhaften Pakets: avwsc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avwsc.exe5


System errors:
=============
Error: (10/14/2013 06:26:53 AM) (Source: BTHUSB) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (10/14/2013 06:26:51 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (10/14/2013 05:11:49 AM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 4

Error: (10/14/2013 05:02:20 AM) (Source: BTHUSB) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (10/14/2013 05:02:18 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (10/14/2013 04:00:10 AM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 4

Error: (10/14/2013 00:38:18 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.

Error: (10/14/2013 00:37:39 AM) (Source: BTHUSB) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.

Error: (10/14/2013 00:37:38 AM) (Source: Win32k) (User: )
Description: Fehler des Touchtreibers im Zusammenhang mit Logoanforderungen.

Error: (10/14/2013 00:37:38 AM) (Source: Win32k) (User: )
Description: Fehler des Touchtreibers im Zusammenhang mit Logoanforderungen.


Microsoft Office Sessions:
=========================
Error: (10/13/2013 05:19:42 PM) (Source: MsiInstaller)(User: STOCKROSE)
Description: Produkt: SpyHunter -- Fehler 1721. Es liegt ein dieses Windows Installer-Paket betreffendes Problem vor. Ein für den Abschluss der Installation erforderliches Programm konnte nicht ausgeführt werden. Wenden Sie sich an das Supportpersonal oder den Hersteller des Pakets. Aktion: , Pfad: WiseCustomCall, Befehl: g5 (NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/11/2013 05:37:32 PM) (Source: MsiInstaller)(User: STOCKROSE)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/11/2013 10:15:12 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005

Error: (10/11/2013 05:34:14 AM) (Source: MsiInstaller)(User: STOCKROSE)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\DealPlyLiveHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/10/2013 05:12:25 PM) (Source: Application Error)(User: )
Description: AcroRd32.exe11.0.3.37518e18e3AcroRd32.dll11.0.3.37518e18d4c000041d0004e0e9d401cec5ba4672da54C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exeC:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.dll5e264913-31be-11e3-be94-c8f7334aa86b

Error: (10/10/2013 05:12:23 PM) (Source: Application Error)(User: )
Description: AcroRd32.exe11.0.3.37518e18e3AcroRd32.dll11.0.3.37518e18d4c00000050004e0e9d401cec5ba4672da54C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exeC:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.dll5d12603f-31be-11e3-be94-c8f7334aa86b

Error: (10/10/2013 03:26:24 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005

Error: (10/10/2013 02:05:40 PM) (Source: Application Error)(User: )
Description: avconfig.exe14.0.0.38352492d1aavconfig.exe14.0.0.38352492d1ac00004090003bde2154801cec5b109f9393eC:\Program Files (x86)\Avira\AntiVir Desktop\avconfig.exeC:\Program Files (x86)\Avira\AntiVir Desktop\avconfig.exe47aa89e4-31a4-11e3-be93-c8f7334aa86b

Error: (10/10/2013 02:05:39 PM) (Source: Application Error)(User: )
Description: AVWSC.EXE14.0.0.38352492e8cccguard.dll14.0.0.38352492d70c0000409000300ed15e401cec5b1090868a5C:\Program Files (x86)\Avira\AntiVir Desktop\AVWSC.EXEC:\Program Files (x86)\Avira\AntiVir Desktop\ccguard.dll46e4a41b-31a4-11e3-be93-c8f7334aa86b

Error: (10/10/2013 01:32:20 PM) (Source: Application Error)(User: )
Description: avwsc.exe14.0.0.38352492e8cccguard.dll14.0.0.38352492d70c0000409000300ed157001cec5ac61cbf751C:\Program Files (x86)\Avira\AntiVir Desktop\avwsc.exeC:\Program Files (x86)\Avira\AntiVir Desktop\ccguard.dll9f905af1-319f-11e3-be93-c8f7334aa86b


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3990.14 MB
Available physical RAM: 2218.24 MB
Total Pagefile: 5590.14 MB
Available Pagefile: 3375.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: (TI31016900A) (Fixed) (Total:219.49 GB) (Free:126.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
==================== End Of Log ============================
         

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by ******* (administrator) on **** on 14-10-2013 08:19:47
Running from C:\Users\*********\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Toshiba\LANDriver\TNSSVC.exe
(4G Systems GmbH & Co. KG) C:\windows\service4g.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRServer.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
() C:\Windows\SysWOW64\C2MP\UpdateChecker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
() C:\Users\*********\Downloads\adwcleaner_3.0.0.7.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRFeature.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13197456 2012-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound 3D] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_PS3D.zip [215248 2012-07-27] ()
HKLM\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-31] ()
HKLM\...\Run: [TOSDCR] - C:\Program Files\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ApplyEsf-eDocPrintPro] - C:\Program Files\Common Files\MAYComputer\eDocPrintPro\ApplyEsf.exe [443392 2013-04-27] (May Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {df0c5ebf-f626-11e2-be84-c8f7334aa86b} - "D:\autorun.exe" 
MountPoints2: {e1c0a688-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe" 
MountPoints2: {e1c0a959-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe" 
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-02] (Intel Corporation)
HKLM-x32\...\Run: [TOSDCR] - %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe
HKLM-x32\...\Run: [mcpltui_exe] - "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui
HKLM-x32\...\Run: [ATLauncher] - "C:\Program Files\McAfee\MSC\OOBE\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SMART Board Tools] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe [9279824 2013-01-31] (SMART Technologies ULC)
HKLM-x32\...\Run: [sbsdk-server] - C:\Program Files (x86)\SMART Technologies\Education Software\sbsdk-server\NodeLauncher.exe [62800 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Board Service] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [2111824 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Ink] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTInk.exe [99152 2013-03-04] (SMART Technologies)
HKLM-x32\...\Run: [Response Desktop Menu] - C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe [1028944 2013-05-23] (SMART Technologies ULC)
HKLM-x32\...\Run: [ResponseConnectorService] - C:\Program Files (x86)\SMART Technologies\Education Software\response-connector-server\NodeLauncher.exe [40448 2013-05-23] (SMART Technologies)
HKLM-x32\...\Run: [starter4g] - C:\windows\starter4g.exe [152848 2008-08-19] (4G Systems GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Startup: C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\*********\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKLM - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKLM-x32 - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438&type=default&q={searchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_5&idate=2013-10-11&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = 
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll (SMART Technologies ULC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

FireFox:
========
FF ProfilePath: C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default
FF user.js: detected! => C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\searchplugins\searchgol.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=TOSHIBAXTHNSNF256GMCS_X2US108QT68Y108QT68Y&ts=1381462438

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 4G USB-Plug Service; C:\windows\service4g.exe [120080 2008-08-19] (4G Systems GmbH & Co. KG)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-06-05] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 irstrtsv; C:\windows\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 McOobeSv2; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()
R2 Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [20304 2013-05-23] (SMART Technologies ULC)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 SMARTHelperService; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [582992 2013-03-07] (SMART Technologies)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
R2 TNSSVC; C:\Program Files\Toshiba\LANDriver\TNSSVC.exe [40944 2012-09-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [267720 2008-10-08] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-07-15] (Avira Operations GmbH & Co. KG)
S3 cm_ser; C:\Windows\system32\DRIVERS\cm_ser.sys [118272 2013-07-25] (C-motech Co.,Ltd.)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [452432 2012-08-10] (Intel Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-11] (GFI Software)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)
R3 SMARTMouseFilterx64; C:\Windows\System32\drivers\SMARTMouseFilterx64.sys [10240 2013-03-07] (SMART Technologies)
R3 SMARTVHidMiniVistaAmd64; C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys [9216 2013-03-07] (SMART Technologies)
R3 SMARTVTabletPCx64; C:\Windows\System32\drivers\SMARTVTabletPCx64.sys [22184 2013-03-07] (SMART Technologies ULC)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\*********\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-14 07:56 - 2013-10-14 07:56 - 100838232 _____ C:\windows\SysWOW64\᯾睕䭘V߿
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\*********\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*********\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-11 21:15 - 2013-10-13 17:19 - 00000000 ____D C:\sh4ldr
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 21:14 - 2013-10-13 17:19 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-11 18:50 - 2013-10-11 20:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 17:42 - 2013-10-11 17:42 - 00000000 ____D C:\Users\*********\Documents\PC Speed Maximizer
2013-10-11 17:40 - 2013-10-11 18:49 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 20:52 - 00000000 ____D C:\Users\*********\Desktop\mbar
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\*********\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:08 - 2013-10-13 17:45 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-11 17:08 - 2013-10-13 17:44 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:08 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\*********\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\*********\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\*********\AppData\Roaming\SecureSearch
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\*********\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:45 - 2013-10-14 05:06 - 00000000 ____D C:\AdwCleaner
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\*********\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\*********\AppData\Roaming\WB.CFG
2013-10-11 05:34 - 2013-10-11 05:47 - 00000000 ____D C:\ProgramData\eSafe
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:33 - 2013-10-14 00:36 - 00000000 ____D C:\Users\*********\AppData\Roaming\DigitalSite
2013-10-11 05:33 - 2013-10-11 18:37 - 00000328 _____ C:\windows\Tasks\DigitalSite.job
2013-10-11 05:33 - 2013-10-11 17:37 - 00002666 _____ C:\windows\System32\Tasks\DigitalSite
2013-10-11 05:33 - 2013-10-11 05:33 - 00000000 ____D C:\ProgramData\Babylon
2013-10-11 05:27 - 2013-10-11 05:46 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\*********\AppData\Roaming\TuneUp Software
2013-10-11 05:26 - 2013-10-11 05:27 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:35 - 2013-10-14 07:35 - 00000326 _____ C:\windows\Tasks\Dealply.job
2013-10-11 00:35 - 2013-10-11 00:40 - 00000000 ____D C:\Users\*********\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00002664 _____ C:\windows\System32\Tasks\Dealply
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\*********\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:16 - 2013-10-11 00:17 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:51 - 2013-10-10 23:56 - 00000000 ____D C:\Users\*********\Documents\!2013_14--Schankin-Newsletter
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\*********\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\*********\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:09 - 2013-08-22 17:51 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-10-10 14:09 - 2013-07-15 16:08 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-10-10 14:09 - 2013-07-15 10:28 - 00082136 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-10-10 14:09 - 2013-02-26 16:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\*********\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-09 07:11 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 07:11 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 07:11 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 07:11 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 07:11 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 07:11 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 07:11 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 07:11 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 07:11 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 07:11 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 07:11 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 07:10 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 07:10 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-10-09 07:10 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 07:10 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 07:10 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 07:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 07:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 07:10 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 07:10 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 07:10 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 07:10 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 07:10 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-08 10:17 - 2013-10-08 10:24 - 00000000 ____D C:\Users\*********\Documents\images
2013-10-08 09:44 - 2013-05-02 17:29 - 00278800 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\*********\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\*********\AppData\Local\Freie_Universität_Berlin
2013-10-01 10:12 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\*********\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\*********\AppData\Local\Cornelsen Schulverlage
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\*********\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\*********\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\*********\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:42 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:40 - 2013-09-23 14:41 - 74520472 _____ (Logitech, Inc.) C:\Users\*********\Downloads\lws280.exe
2013-09-23 14:06 - 2013-09-28 11:17 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-23 14:06 - 2013-09-23 14:44 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:06 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-16 21:54 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll

==================== One Month Modified Files and Folders =======

2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\*********\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-14 08:19 - 2013-06-04 20:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-14 08:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-10-14 07:56 - 2013-10-14 07:56 - 100838232 _____ C:\windows\SysWOW64\᯾睕䭘V߿
2013-10-14 07:35 - 2013-10-11 00:35 - 00000326 _____ C:\windows\Tasks\Dealply.job
2013-10-14 05:06 - 2013-10-11 16:45 - 00000000 ____D C:\AdwCleaner
2013-10-14 00:44 - 2012-08-01 18:38 - 00753134 _____ C:\windows\system32\perfh007.dat
2013-10-14 00:44 - 2012-08-01 18:38 - 00155826 _____ C:\windows\system32\perfc007.dat
2013-10-14 00:44 - 2012-07-26 09:28 - 01745416 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-14 00:37 - 2012-11-09 09:11 - 00051184 _____ C:\windows\PFRO.log
2013-10-14 00:37 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-14 00:37 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-14 00:36 - 2013-10-11 05:33 - 00000000 ____D C:\Users\*********\AppData\Roaming\DigitalSite
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\*********\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\*********\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-13 17:45 - 2013-10-11 17:08 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-13 17:44 - 2013-10-11 17:08 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-13 17:19 - 2013-10-11 21:15 - 00000000 ____D C:\sh4ldr
2013-10-13 17:19 - 2013-10-11 21:14 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-12 13:53 - 2013-06-01 12:54 - 01966346 _____ C:\windows\WindowsUpdate.log
2013-10-12 13:43 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-11 21:44 - 2013-09-06 07:14 - 00000952 _____ C:\Users\*********\Desktop\DVD-Fokus-Ph-7-9 - Verknüpfung.lnk
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 20:52 - 2013-10-11 18:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 20:52 - 2013-10-11 17:39 - 00000000 ____D C:\Users\*********\Desktop\mbar
2013-10-11 18:49 - 2013-10-11 17:40 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 18:40 - 2013-09-05 16:17 - 00000000 ____D C:\windows\System32\Tasks\NCH Software
2013-10-11 18:40 - 2013-09-05 16:16 - 00000000 ____D C:\Users\*********\AppData\Roaming\NCH Software
2013-10-11 18:37 - 2013-10-11 05:33 - 00000328 _____ C:\windows\Tasks\DigitalSite.job
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 18:23 - 2012-07-26 10:12 - 00000000 ___RD C:\windows\ImmersiveControlPanel
2013-10-11 17:42 - 2013-10-11 17:42 - 00000000 ____D C:\Users\*********\Documents\PC Speed Maximizer
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\*********\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:37 - 2013-10-11 05:33 - 00002666 _____ C:\windows\System32\Tasks\DigitalSite
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\*********\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\*********\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\*********\AppData\Roaming\SecureSearch
2013-10-11 16:57 - 2013-07-02 23:34 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\*********\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\*********\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 16:32 - 2013-08-28 16:33 - 00000000 ____D C:\Users\*********\Documents\!2013-ph-EF
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\*********\AppData\Roaming\WB.CFG
2013-10-11 06:07 - 2013-09-06 08:06 - 00000000 ___RD C:\Users\*********\Desktop\Div
2013-10-11 05:47 - 2013-10-11 05:34 - 00000000 ____D C:\ProgramData\eSafe
2013-10-11 05:46 - 2013-10-11 05:27 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:34 - 2013-10-01 10:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-11 05:34 - 2013-06-01 12:55 - 00001763 _____ C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-11 05:33 - 2013-10-11 05:33 - 00000000 ____D C:\ProgramData\Babylon
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\*********\AppData\Roaming\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:26 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:40 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00002664 _____ C:\windows\System32\Tasks\Dealply
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\*********\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\*********\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:17 - 2013-10-11 00:16 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:58 - 2013-09-02 10:46 - 00000000 ____D C:\Users\*********\Documents\!kantgym-div-13+14
2013-10-10 23:56 - 2013-10-10 23:51 - 00000000 ____D C:\Users\*********\Documents\!2013_14--Schankin-Newsletter
2013-10-10 23:56 - 2013-06-23 18:15 - 00000000 ____D C:\Users\*********\Documents\2012_13--Schankin-Newsletter
2013-10-10 23:48 - 2013-06-02 17:29 - 00000000 ____D C:\Program Files (x86)\phase5
2013-10-10 17:20 - 2013-07-06 15:51 - 00000000 ____D C:\Users\*********\Documents\SMART Notebook
2013-10-10 15:28 - 2013-06-01 13:03 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-358878931-1704632014-3567270812-1001
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\*********\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\*********\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\*********\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 06:02 - 2013-08-28 16:34 - 00000000 ____D C:\Users\*********\Documents\2013-ph-Q1
2013-10-09 17:26 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\FxsTmp
2013-10-09 12:01 - 2013-07-27 18:40 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 11:57 - 2013-06-02 14:50 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-08 22:19 - 2013-06-04 20:53 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 15:03 - 2013-07-07 16:28 - 00145920 ___SH C:\Users\*********\Desktop\Thumbs.db
2013-10-08 10:53 - 2013-06-23 18:39 - 00000000 ____D C:\Users\*********\AppData\Roaming\FileZilla
2013-10-08 10:24 - 2013-10-08 10:17 - 00000000 ____D C:\Users\*********\Documents\images
2013-10-08 10:02 - 2013-06-04 22:57 - 00000000 ____D C:\Users\*********\Documents\!Physik
2013-10-08 07:07 - 2013-07-26 09:40 - 00009728 ___SH C:\Users\*********\Thumbs.db
2013-10-07 09:48 - 2013-08-26 16:26 - 00000000 ____D C:\Users\*********\Documents\!2013-Ph-8k1
2013-10-05 10:24 - 2013-06-01 12:55 - 00000000 ____D C:\Users\*********\AppData\Local\Packages
2013-10-04 18:47 - 2013-06-01 13:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 03:38 - 2013-06-02 18:39 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-06-02 18:39 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 12:36 - 2013-06-01 13:49 - 00000000 ____D C:\Users\*********\AppData\Local\Mozilla
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\*********\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\*********\AppData\Local\Freie_Universität_Berlin
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\*********\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\*********\AppData\Local\Cornelsen Schulverlage
2013-09-30 20:28 - 2013-08-28 16:31 - 00000000 ____D C:\Users\*********\Documents\!2013-Ph-5d
2013-09-29 16:51 - 2013-09-10 18:24 - 00000000 ____D C:\Users\*********\Documents\!DVD-Ph
2013-09-28 11:17 - 2013-09-23 14:06 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-27 16:07 - 2013-06-23 16:28 - 00000000 ___RD C:\Users\*********\Dropbox
2013-09-27 16:07 - 2013-06-23 16:27 - 00000000 ____D C:\Users\*********\AppData\Roaming\Dropbox
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\*********\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-26 06:35 - 2013-06-02 15:49 - 00083456 ___SH C:\Users\*********\Documents\Thumbs.db
2013-09-26 04:55 - 2013-06-01 12:55 - 00000000 ___RD C:\Users\*********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\*********\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:44 - 2013-09-23 14:06 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\*********\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:43 - 2013-09-23 14:42 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:43 - 2013-09-23 14:06 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-23 14:43 - 2012-07-26 09:21 - 00030037 _____ C:\windows\setupact.log
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:41 - 2013-09-23 14:40 - 74520472 _____ (Logitech, Inc.) C:\Users\*********\Downloads\lws280.exe
2013-09-23 01:28 - 2013-10-09 07:11 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 07:11 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 07:11 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-16 18:23 - 2013-06-04 23:19 - 00000000 ____D C:\Users\*********\Documents\!Meins

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\*********\AppData\Local\Temp\Quarantine.exe
C:\Users\*********\AppData\Local\Temp\SHSetup.exe
C:\Users\*********\AppData\Local\Temp\uninst.exe
C:\Users\*********\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 06:15

==================== End Of Log ============================
         

--- --- ---
--- --- ---
--- --- ---
--- --- ---


GMER Logfile:

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-14 09:12:29
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\0000003c TOSHIBA_THNSNF256GMCS rev.FSTAN103 238,47GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\*********\AppData\Local\Temp\pflyrpog.sys


---- Kernel code sections - GMER 2.1 ----

.text   C:\windows\System32\win32k.sys!W32pServiceTable                                                                fffff96000070a00 7 bytes [40, CA, 81, 01, 00, 4C, F2]
.text   C:\windows\System32\win32k.sys!W32pServiceTable + 8                                                            fffff96000070a08 7 bytes [01, EA, BF, FF, 00, C7, DA]

---- User code sections - GMER 2.1 ----

.text   C:\windows\System32\spoolsv.exe[1584] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306             000007ff8889177a 4 bytes [89, 88, FF, 07]
.text   C:\windows\System32\spoolsv.exe[1584] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314             000007ff88891782 4 bytes [89, 88, FF, 07]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1904] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306  000007ff8889177a 4 bytes [89, 88, FF, 07]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1904] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314  000007ff88891782 4 bytes [89, 88, FF, 07]
.text   C:\windows\Explorer.EXE[3688] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                               000007ff83ea1532 4 bytes [EA, 83, FF, 07]
.text   C:\windows\Explorer.EXE[3688] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                               000007ff83ea153a 4 bytes [EA, 83, FF, 07]
.text   C:\windows\Explorer.EXE[3688] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                             000007ff83ea165a 4 bytes [EA, 83, FF, 07]
.text   C:\windows\splwow64.exe[6296] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                     000007ff8889177a 4 bytes [89, 88, FF, 07]
.text   C:\windows\splwow64.exe[6296] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                     000007ff88891782 4 bytes [89, 88, FF, 07]

---- Threads - GMER 2.1 ----

Thread  C:\windows\system32\csrss.exe [620:644]                                                                        fffff960006435e8

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                          unknown MBR code

---- EOF - GMER 2.1 ----
         

--- --- ---

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.10.13.04

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16721
********* :: ************** [Administrator]

Schutz: Aktiviert

13.10.2013 21:53:06
MBAM-log-2013-10-14 (00-32-54).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 586720
Laufzeit: 1 Stunde(n), 47 Minute(n), 10 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 11
HKCU\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\qvo6Software (PUP.Optional.qvo6.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 2O1R1G2Z1F1G1M -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 24
C:\Users\*********\AppData\Roaming\DigitalSite\UpdateProc (PUP.Optional.DigitalSite.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\OpenCandy\7122BBCCE9294608BE7482F64958EAC8 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\OpenCandy\E55275BC0A5848F7A3E9DE1155DBD989 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\ct2801937 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\CT3282494 (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\CT3282494\xpi (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\CT3282494\xpi\defaults (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\CT3282494\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\mt_ffx\searchgol (PUP.Optional.SearchGolTB.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\mt_ffx\searchgol\searchgol (PUP.Optional.SearchGolTB.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\mt_ffx\searchgol\searchgol\1.8.16.19 (PUP.Optional.SearchGolTB.A) -> Keine Aktion durchgeführt.
C:\ProgramData\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
C:\ProgramData\BonanzaDealsLive\Update (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
C:\ProgramData\BonanzaDealsLive\Update\Log (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\BonanzaDealsLive (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\BonanzaDealsLive\CrashReports (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 26
C:\Users\*********\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\BExternal.dll (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\ccp.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\MySgolTB.exe.VIRUS (PUP.Optional.SearchGolTB.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\F7AFA419-BAB0-7891-B1A1-97FA0F54B662\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\is1590112554\42202263_stp\wajam_validate.exe (PUP.Optional.Wajam) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\is1590112554\42292267_stp\wajam_validate.exe (PUP.Optional.Wajam) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\is1590112554\42292290_stp\SearchGol.exe (PUP.Optional.PCFixSpeed.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Local\Temp\is1590112554\42292528_stp\bd.exe (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\OpenCandy\7122BBCCE9294608BE7482F64958EAC8\dp.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\Documents\!2013-ph-EF\viananet-dazu-super+Codecs\windows.7.codec.pack.v4.0.8.setup.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\*********\Downloads\ZipExtractorSetup(1).exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt.
C:\Users\*********\Downloads\ZipExtractorSetup.exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\DigitalSite\UpdateProc\config.dat (PUP.Optional.DigitalSite.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\DigitalSite\UpdateProc\prod.dat (PUP.Optional.DigitalSite.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\DigitalSite\UpdateProc\STTL.DAT (PUP.Optional.DigitalSite.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\DigitalSite\UpdateProc\TTL.DAT (PUP.Optional.DigitalSite.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\qvo6.xml (PUP.Optional.qvo6.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\*********\AppData\Roaming\OpenCandy\E55275BC0A5848F7A3E9DE1155DBD989\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log (PUP.Optional.BonanzaDeals.A) -> Keine Aktion durchgeführt.

(Ende)
         

Für Hilfe bin ich sehr dankbar
Gita-top

HI,

Funde von MBAM löschen lassen.


Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo schrauber,

MBAM gelöscht

# AdwCleaner v3.007 - Bericht erstellt am 14/10/2013 um 15:07:14
# Updated 09/10/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : ******** - **********
# Gestartet von : C:\Users\********\Downloads\adwcleaner_3.0.0.7.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : SSUService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\eSafe
Ordner Gelöscht : C:\ProgramData\Splashtop
[!] Ordner Gelöscht : C:\Program Files (x86)\Splashtop
Ordner Gelöscht : C:\Users\********\AppData\Local\Splashtop
Ordner Gelöscht : C:\Users\FRIEDE~1\AppData\Local\Temp\eIntaller
Ordner Gelöscht : C:\Users\********\AppData\Roaming\digitalsite
Ordner Gelöscht : C:\Users\********\Documents\PC Speed Maximizer
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\searchplugins\Conduit.xml
Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\searchplugins\searchgol.xml
Datei Gelöscht : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default\user.js
Datei Gelöscht : C:\windows\Tasks\Dealply.job
Datei Gelöscht : C:\windows\System32\Tasks\Dealply
Datei Gelöscht : C:\windows\Tasks\digitalsite.job
Datei Gelöscht : C:\windows\System32\Tasks\digitalsite

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\********\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\********\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\5f2d8dce63be846
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Conduit

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 8 x64
Ran by ******** on 14.10.2013 at 15:24:04,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] splashtopremoteservice
Failed to delete: [Service] splashtopremoteservice



~~~ Registry Values

Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\search protection
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\search protection



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-358878931-1704632014-3567270812-1001\Software\SweetIM



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.10.2013 at 15:28:34,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by ******** (administrator) on ********** on 14-10-2013 15:37:10
Running from C:\Users\********\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Toshiba\LANDriver\TNSSVC.exe
(4G Systems GmbH & Co. KG) C:\windows\service4g.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13197456 2012-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound 3D] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_PS3D.zip [215248 2012-07-27] ()
HKLM\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-31] ()
HKLM\...\Run: [TOSDCR] - C:\Program Files\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ApplyEsf-eDocPrintPro] - C:\Program Files\Common Files\MAYComputer\eDocPrintPro\ApplyEsf.exe [443392 2013-04-27] (May Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {df0c5ebf-f626-11e2-be84-c8f7334aa86b} - "D:\autorun.exe"
MountPoints2: {e1c0a688-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe"
MountPoints2: {e1c0a959-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe"
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-02] (Intel Corporation)
HKLM-x32\...\Run: [TOSDCR] - %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe
HKLM-x32\...\Run: [mcpltui_exe] - "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui
HKLM-x32\...\Run: [ATLauncher] - "C:\Program Files\McAfee\MSC\OOBE\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SMART Board Tools] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe [9279824 2013-01-31] (SMART Technologies ULC)
HKLM-x32\...\Run: [sbsdk-server] - C:\Program Files (x86)\SMART Technologies\Education Software\sbsdk-server\NodeLauncher.exe [62800 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Board Service] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [2111824 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Ink] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTInk.exe [99152 2013-03-04] (SMART Technologies)
HKLM-x32\...\Run: [Response Desktop Menu] - C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe [1028944 2013-05-23] (SMART Technologies ULC)
HKLM-x32\...\Run: [ResponseConnectorService] - C:\Program Files (x86)\SMART Technologies\Education Software\response-connector-server\NodeLauncher.exe [40448 2013-05-23] (SMART Technologies)
HKLM-x32\...\Run: [starter4g] - C:\windows\starter4g.exe [152848 2008-08-19] (4G Systems GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\********\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL =
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll (SMART Technologies ULC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 4G USB-Plug Service; C:\windows\service4g.exe [120080 2008-08-19] (4G Systems GmbH & Co. KG)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-06-05] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 irstrtsv; C:\windows\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 McOobeSv2; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()
R2 Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [20304 2013-05-23] (SMART Technologies ULC)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 SMARTHelperService; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [582992 2013-03-07] (SMART Technologies)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
R2 TNSSVC; C:\Program Files\Toshiba\LANDriver\TNSSVC.exe [40944 2012-09-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [267720 2008-10-08] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [x]
S2 SplashtopRemoteService; "C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-07-15] (Avira Operations GmbH & Co. KG)
S3 cm_ser; C:\Windows\system32\DRIVERS\cm_ser.sys [118272 2013-07-25] (C-motech Co.,Ltd.)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [452432 2012-08-10] (Intel Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-11] (GFI Software)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)
R3 SMARTMouseFilterx64; C:\Windows\System32\drivers\SMARTMouseFilterx64.sys [10240 2013-03-07] (SMART Technologies)
R3 SMARTVHidMiniVistaAmd64; C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys [9216 2013-03-07] (SMART Technologies)
R3 SMARTVTabletPCx64; C:\Windows\System32\drivers\SMARTVTabletPCx64.sys [22184 2013-03-07] (SMART Technologies ULC)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-14 15:28 - 2013-10-14 15:28 - 00001172 _____ C:\Users\********\Desktop\JRT.txt
2013-10-14 15:24 - 2013-10-14 15:24 - 00000000 ____D C:\windows\ERUNT
2013-10-14 15:14 - 2013-10-14 15:14 - 00000000 ____D C:\Users\********\Documents\ProcAlyzer Dumps
2013-10-14 15:12 - 2013-10-14 15:12 - 01032220 _____ (Thisisu) C:\Users\********\Downloads\JRT_6.04.exe
2013-10-14 15:10 - 2013-10-14 15:10 - 00006706 _____ C:\Users\********\Desktop\AdwCleaner[S0].txt
2013-10-14 09:12 - 2013-10-14 09:23 - 00002545 _____ C:\Users\********\Desktop\gmer-log-1.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000482 _____ C:\Users\********\Downloads\defogger_disable.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000000 _____ C:\Users\********\defogger_reenable
2013-10-14 08:33 - 2013-10-14 08:33 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe
2013-10-14 08:26 - 2013-10-14 09:21 - 00008148 _____ C:\Users\********\Desktop\AdwCleaner[R1].txt
2013-10-14 08:25 - 2013-10-14 09:22 - 00052373 _____ C:\Users\********\Desktop\FRST.txt
2013-10-14 08:25 - 2013-10-14 09:19 - 00024513 _____ C:\Users\********\Desktop\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:22 - 00024510 _____ C:\Users\********\Downloads\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:21 - 00377856 _____ C:\Users\********\Downloads\gmer_2.1.19163.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\********\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-11 21:15 - 2013-10-13 17:19 - 00000000 ____D C:\sh4ldr
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 21:14 - 2013-10-13 17:19 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-11 18:50 - 2013-10-11 20:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 17:40 - 2013-10-11 18:49 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 20:52 - 00000000 ____D C:\Users\********\Desktop\mbar
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\********\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:08 - 2013-10-14 15:14 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-11 17:08 - 2013-10-13 17:45 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:08 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\********\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\********\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\********\AppData\Roaming\SecureSearch
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\********\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:45 - 2013-10-14 15:07 - 00000000 ____D C:\AdwCleaner
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\********\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\********\AppData\Roaming\WB.CFG
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:27 - 2013-10-11 05:46 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\********\AppData\Roaming\TuneUp Software
2013-10-11 05:26 - 2013-10-11 05:27 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:35 - 2013-10-11 00:40 - 00000000 ____D C:\Users\********\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\********\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:16 - 2013-10-11 00:17 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:51 - 2013-10-10 23:56 - 00000000 ____D C:\Users\********\Documents\!2013_14--Schankin-Newsletter
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\********\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\********\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:09 - 2013-08-22 17:51 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-10-10 14:09 - 2013-07-15 16:08 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-10-10 14:09 - 2013-07-15 10:28 - 00082136 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-10-10 14:09 - 2013-02-26 16:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\********\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-09 07:11 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 07:11 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 07:11 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 07:11 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 07:11 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 07:11 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 07:11 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 07:11 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 07:11 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 07:11 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 07:11 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 07:10 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 07:10 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-10-09 07:10 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 07:10 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 07:10 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 07:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 07:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 07:10 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 07:10 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 07:10 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 07:10 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 07:10 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-08 10:17 - 2013-10-08 10:24 - 00000000 ____D C:\Users\********\Documents\images
2013-10-08 09:44 - 2013-05-02 17:29 - 00278800 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\********\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\********\AppData\Local\Freie_Universität_Berlin
2013-10-01 10:12 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\********\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\********\AppData\Local\Cornelsen Schulverlage
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\********\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\********\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\********\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:42 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:40 - 2013-09-23 14:41 - 74520472 _____ (Logitech, Inc.) C:\Users\********\Downloads\lws280.exe
2013-09-23 14:06 - 2013-09-28 11:17 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-23 14:06 - 2013-09-23 14:44 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:06 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-16 21:54 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll

==================== One Month Modified Files and Folders =======

2013-10-14 15:29 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-10-14 15:28 - 2013-10-14 15:28 - 00001172 _____ C:\Users\********\Desktop\JRT.txt
2013-10-14 15:24 - 2013-10-14 15:24 - 00000000 ____D C:\windows\ERUNT
2013-10-14 15:19 - 2013-06-04 20:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-14 15:16 - 2013-10-11 17:08 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-14 15:15 - 2012-08-01 18:38 - 00753134 _____ C:\windows\system32\perfh007.dat
2013-10-14 15:15 - 2012-08-01 18:38 - 00155826 _____ C:\windows\system32\perfc007.dat
2013-10-14 15:15 - 2012-07-26 09:28 - 01745416 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-14 15:14 - 2013-10-14 15:14 - 00000000 ____D C:\Users\********\Documents\ProcAlyzer Dumps
2013-10-14 15:14 - 2013-06-01 13:03 - 00003596 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-358878931-1704632014-3567270812-1001
2013-10-14 15:12 - 2013-10-14 15:12 - 01032220 _____ (Thisisu) C:\Users\********\Downloads\JRT_6.04.exe
2013-10-14 15:10 - 2013-10-14 15:10 - 00006706 _____ C:\Users\********\Desktop\AdwCleaner[S0].txt
2013-10-14 15:08 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-14 15:07 - 2013-10-11 16:45 - 00000000 ____D C:\AdwCleaner
2013-10-14 15:07 - 2013-06-01 12:55 - 00001016 _____ C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-14 13:52 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\NDF
2013-10-14 13:12 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-14 09:23 - 2013-10-14 09:12 - 00002545 _____ C:\Users\********\Desktop\gmer-log-1.log
2013-10-14 09:22 - 2013-10-14 08:25 - 00052373 _____ C:\Users\********\Desktop\FRST.txt
2013-10-14 09:21 - 2013-10-14 08:26 - 00008148 _____ C:\Users\********\Desktop\AdwCleaner[R1].txt
2013-10-14 09:19 - 2013-10-14 08:25 - 00024513 _____ C:\Users\********\Desktop\Addition.txt
2013-10-14 09:12 - 2013-07-07 16:28 - 00145920 ___SH C:\Users\********\Desktop\Thumbs.db
2013-10-14 08:34 - 2013-10-14 08:34 - 00000482 _____ C:\Users\********\Downloads\defogger_disable.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000000 _____ C:\Users\********\defogger_reenable
2013-10-14 08:34 - 2013-06-01 12:54 - 00000000 ____D C:\Users\********
2013-10-14 08:33 - 2013-10-14 08:33 - 00050477 _____ C:\Users\********\Downloads\Defogger.exe
2013-10-14 08:22 - 2013-10-14 08:21 - 00024510 _____ C:\Users\********\Downloads\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:21 - 00377856 _____ C:\Users\********\Downloads\gmer_2.1.19163.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\********\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-14 00:37 - 2012-11-09 09:11 - 00051184 _____ C:\windows\PFRO.log
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\********\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\********\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-13 17:45 - 2013-10-11 17:08 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-13 17:19 - 2013-10-11 21:15 - 00000000 ____D C:\sh4ldr
2013-10-13 17:19 - 2013-10-11 21:14 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-12 13:53 - 2013-06-01 12:54 - 01966346 _____ C:\windows\WindowsUpdate.log
2013-10-12 13:43 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-11 21:44 - 2013-09-06 07:14 - 00000952 _____ C:\Users\********\Desktop\DVD-Fokus-Ph-7-9 - Verknüpfung.lnk
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 20:52 - 2013-10-11 18:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 20:52 - 2013-10-11 17:39 - 00000000 ____D C:\Users\********\Desktop\mbar
2013-10-11 18:49 - 2013-10-11 17:40 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 18:40 - 2013-09-05 16:17 - 00000000 ____D C:\windows\System32\Tasks\NCH Software
2013-10-11 18:40 - 2013-09-05 16:16 - 00000000 ____D C:\Users\********\AppData\Roaming\NCH Software
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 18:23 - 2012-07-26 10:12 - 00000000 ___RD C:\windows\ImmersiveControlPanel
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\********\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\********\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\********\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\********\AppData\Roaming\SecureSearch
2013-10-11 16:57 - 2013-07-02 23:34 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\********\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\********\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 16:32 - 2013-08-28 16:33 - 00000000 ____D C:\Users\********\Documents\!2013-ph-EF
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\********\AppData\Roaming\WB.CFG
2013-10-11 06:07 - 2013-09-06 08:06 - 00000000 ___RD C:\Users\********\Desktop\Div
2013-10-11 05:46 - 2013-10-11 05:27 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:34 - 2013-10-01 10:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\********\AppData\Roaming\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:26 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:40 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\********\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\********\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:17 - 2013-10-11 00:16 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:58 - 2013-09-02 10:46 - 00000000 ____D C:\Users\********\Documents\!kantgym-div-13+14
2013-10-10 23:56 - 2013-10-10 23:51 - 00000000 ____D C:\Users\********\Documents\!2013_14--Schankin-Newsletter
2013-10-10 23:56 - 2013-06-23 18:15 - 00000000 ____D C:\Users\********\Documents\2012_13--Schankin-Newsletter
2013-10-10 23:48 - 2013-06-02 17:29 - 00000000 ____D C:\Program Files (x86)\phase5
2013-10-10 17:20 - 2013-07-06 15:51 - 00000000 ____D C:\Users\********\Documents\SMART Notebook
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\********\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\********\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\********\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 06:02 - 2013-08-28 16:34 - 00000000 ____D C:\Users\********\Documents\2013-ph-Q1
2013-10-09 17:26 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\FxsTmp
2013-10-09 12:01 - 2013-07-27 18:40 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 11:57 - 2013-06-02 14:50 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-08 22:19 - 2013-06-04 20:53 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 10:53 - 2013-06-23 18:39 - 00000000 ____D C:\Users\********\AppData\Roaming\FileZilla
2013-10-08 10:24 - 2013-10-08 10:17 - 00000000 ____D C:\Users\********\Documents\images
2013-10-08 10:02 - 2013-06-04 22:57 - 00000000 ____D C:\Users\********\Documents\!Physik
2013-10-08 07:07 - 2013-07-26 09:40 - 00009728 ___SH C:\Users\********\Thumbs.db
2013-10-07 09:48 - 2013-08-26 16:26 - 00000000 ____D C:\Users\********\Documents\!2013-Ph-8k1
2013-10-05 10:24 - 2013-06-01 12:55 - 00000000 ____D C:\Users\********\AppData\Local\Packages
2013-10-04 18:47 - 2013-06-01 13:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 03:38 - 2013-06-02 18:39 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-06-02 18:39 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 12:36 - 2013-06-01 13:49 - 00000000 ____D C:\Users\********\AppData\Local\Mozilla
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\********\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\********\AppData\Local\Freie_Universität_Berlin
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\********\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\********\AppData\Local\Cornelsen Schulverlage
2013-09-30 20:28 - 2013-08-28 16:31 - 00000000 ____D C:\Users\********\Documents\!2013-Ph-5d
2013-09-29 16:51 - 2013-09-10 18:24 - 00000000 ____D C:\Users\********\Documents\!DVD-Ph
2013-09-28 11:17 - 2013-09-23 14:06 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-27 16:07 - 2013-06-23 16:28 - 00000000 ___RD C:\Users\********\Dropbox
2013-09-27 16:07 - 2013-06-23 16:27 - 00000000 ____D C:\Users\********\AppData\Roaming\Dropbox
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\********\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-26 06:35 - 2013-06-02 15:49 - 00083456 ___SH C:\Users\********\Documents\Thumbs.db
2013-09-26 04:55 - 2013-06-01 12:55 - 00000000 ___RD C:\Users\********\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\********\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:44 - 2013-09-23 14:06 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\********\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:43 - 2013-09-23 14:42 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:43 - 2013-09-23 14:06 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-23 14:43 - 2012-07-26 09:21 - 00030037 _____ C:\windows\setupact.log
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:41 - 2013-09-23 14:40 - 74520472 _____ (Logitech, Inc.) C:\Users\********\Downloads\lws280.exe
2013-09-23 01:28 - 2013-10-09 07:11 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 07:11 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 07:11 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-16 18:23 - 2013-06-04 23:19 - 00000000 ____D C:\Users\********\Documents\!Meins

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\********\AppData\Local\Temp\Quarantine.exe
C:\Users\********\AppData\Local\Temp\SHSetup.exe
C:\Users\********\AppData\Local\Temp\uninst.exe
C:\Users\********\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 06:15

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Optimistisches Danke

Gita-top

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo,

Eset läuft schon 12 Stunden und hat auf meiner SSD erst 46% von ca. 100GB geschafft. Dauert das immer so lange? Auf der externen Festplatte ist deutlich mehr drauf. Morgen früh schau ich wieder nach.

Grüße von Gita-top

der dauert schon.

Hallo schrauber,

nach 52,5 Stunden war ESET fertig:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=12604ff455d4f04ba251707329c69d77
# engine=15482
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-14 08:00:41
# local_time=2013-10-14 10:00:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=1799 16775165 100 94 29065 247204131 21850 0
# compatibility_mode=5893 16776574 100 94 400799 9064316 0 0
# scanned=1607
# found=0
# cleaned=0
# scan_time=92
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=12604ff455d4f04ba251707329c69d77
# engine=15485
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-10-17 11:49:43
# local_time=2013-10-17 01:49:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=1799 16775165 100 94 189092 247433873 181852 0
# compatibility_mode=5893 16776574 100 94 630541 9294058 0 0
# scanned=1732884
# found=1
# cleaned=0
# scan_time=16111
sh=2D3B35E2CA53BCF7AC8D82CF2601D98097ED83BB ft=0 fh=0000000000000000 vn="probably a variant of Da_Boys virus" ac=I fn="D:\2013-06-03-von-D\Dokumente-Archiv\WD-aelteres-mac+kantnetz+\Mac-Mac\matheass.img"
         

 Results of screen317's Security Check version 0.99.74  
   x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
Avira Desktop      
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Flash Player 	11.9.900.117  
 Adobe Reader XI  
 Mozilla Firefox (24.0) 
 Mozilla Thunderbird (17.0.8) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Spybot Teatimer.exe is disabled! 
 Avira Antivir avguard.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Friederike (administrator) on STOCKROSE on 17-10-2013 14:17:30
Running from C:\Users\Friederike\Downloads
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Toshiba\LANDriver\TNSSVC.exe
(4G Systems GmbH & Co. KG) C:\windows\service4g.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SMART Technologies ULC) C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe
(SMART Technologies) C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
() C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
() C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
() C:\Windows\SysWOW64\C2MP\UpdateChecker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(4G Systems GmbH & Co. KG) C:\Windows\starter4g.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13197456 2012-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound 3D] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_PS3D.zip [215248 2012-07-27] ()
HKLM\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-05] ()
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2609064 2012-08-31] ()
HKLM\...\Run: [TOSDCR] - C:\Program Files\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [ApplyEsf-eDocPrintPro] - C:\Program Files\Common Files\MAYComputer\eDocPrintPro\ApplyEsf.exe [443392 2013-04-27] (May Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {df0c5ebf-f626-11e2-be84-c8f7334aa86b} - "D:\autorun.exe" 
MountPoints2: {e1c0a688-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe" 
MountPoints2: {e1c0a959-f2da-11e2-be83-c8f7334aa86b} - "D:\autorun.exe" 
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-08-02] (Intel Corporation)
HKLM-x32\...\Run: [TOSDCR] - %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe
HKLM-x32\...\Run: [mcpltui_exe] - "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui
HKLM-x32\...\Run: [ATLauncher] - "C:\Program Files\McAfee\MSC\OOBE\ATLauncher.exe" /createshortcuts:1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SMART Board Tools] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardTools.exe [9279824 2013-01-31] (SMART Technologies ULC)
HKLM-x32\...\Run: [sbsdk-server] - C:\Program Files (x86)\SMART Technologies\Education Software\sbsdk-server\NodeLauncher.exe [62800 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Board Service] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [2111824 2013-03-07] (SMART Technologies)
HKLM-x32\...\Run: [SMART Ink] - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTInk.exe [99152 2013-03-04] (SMART Technologies)
HKLM-x32\...\Run: [Response Desktop Menu] - C:\Program Files (x86)\SMART Technologies\Education Software\DesktopMenu.exe [1028944 2013-05-23] (SMART Technologies ULC)
HKLM-x32\...\Run: [ResponseConnectorService] - C:\Program Files (x86)\SMART Technologies\Education Software\response-connector-server\NodeLauncher.exe [40448 2013-05-23] (SMART Technologies)
HKLM-x32\...\Run: [starter4g] - C:\windows\starter4g.exe [152848 2008-08-19] (4G Systems GmbH & Co. KG)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-07-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Startup: C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Friederike\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk
ShortcutTarget: Logitech . Produktregistrierung.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKLM-x32 - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MATMJS
SearchScopes: HKCU - {69A5A5C0-B30E-4460-9DF0-3EB0CFF4405C} URL = 
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: SMART Notebook Download Utility - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll (SMART Technologies ULC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Friederike\AppData\Roaming\Mozilla\Firefox\Profiles\np2sctyh.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 4G USB-Plug Service; C:\windows\service4g.exe [120080 2008-08-19] (4G Systems GmbH & Co. KG)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-06-05] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-17] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-08-09] (Avira Operations GmbH & Co. KG)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 irstrtsv; C:\windows\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 McOobeSv2; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [219832 2012-06-18] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()
R2 Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [20304 2013-05-23] (SMART Technologies ULC)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-08-31] (Realtek Semiconductor)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 SMARTHelperService; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [582992 2013-03-07] (SMART Technologies)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)
R2 TNSSVC; C:\Program Files\Toshiba\LANDriver\TNSSVC.exe [40944 2012-09-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [267720 2008-10-08] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [x]
S2 SplashtopRemoteService; "C:\Program Files (x86)\Splashtop\Splashtop Remote\SERVER\SRService.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-08-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-02-26] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-07-15] (Avira Operations GmbH & Co. KG)
S3 cm_ser; C:\Windows\system32\DRIVERS\cm_ser.sys [118272 2013-07-25] (C-motech Co.,Ltd.)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c63x64.sys [452432 2012-08-10] (Intel Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-11] (GFI Software)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)
R3 SMARTMouseFilterx64; C:\Windows\System32\drivers\SMARTMouseFilterx64.sys [10240 2013-03-07] (SMART Technologies)
R3 SMARTVHidMiniVistaAmd64; C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys [9216 2013-03-07] (SMART Technologies)
R3 SMARTVTabletPCx64; C:\Windows\System32\drivers\SMARTVTabletPCx64.sys [22184 2013-03-07] (SMART Technologies ULC)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows (R) Win 7 DDK provider)
S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-17 14:12 - 2013-10-17 14:11 - 00891167 _____ C:\Users\Friederike\Desktop\SecurityCheck(1).exe
2013-10-17 13:58 - 2013-10-17 13:58 - 00000121 _____ C:\Users\Friederike\Desktop\2013-10-17-von-eset.txt
2013-10-17 03:18 - 2013-10-17 03:18 - 101413064 _____ C:\windows\SysWOW64\咏욪Lñ
2013-10-15 00:25 - 2013-10-15 00:25 - 101072268 _____ C:\windows\SysWOW64\憝Lű
2013-10-14 15:28 - 2013-10-14 15:28 - 00001172 _____ C:\Users\Friederike\Desktop\JRT.txt
2013-10-14 15:24 - 2013-10-14 15:24 - 00000000 ____D C:\windows\ERUNT
2013-10-14 15:14 - 2013-10-14 15:14 - 00000000 ____D C:\Users\Friederike\Documents\ProcAlyzer Dumps
2013-10-14 15:12 - 2013-10-14 15:12 - 01032220 _____ (Thisisu) C:\Users\Friederike\Downloads\JRT_6.04.exe
2013-10-14 15:10 - 2013-10-14 15:10 - 00006706 _____ C:\Users\Friederike\Desktop\AdwCleaner[S0].txt
2013-10-14 09:12 - 2013-10-14 09:23 - 00002545 _____ C:\Users\Friederike\Desktop\gmer-log-1.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000482 _____ C:\Users\Friederike\Downloads\defogger_disable.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000000 _____ C:\Users\Friederike\defogger_reenable
2013-10-14 08:33 - 2013-10-14 08:33 - 00050477 _____ C:\Users\Friederike\Downloads\Defogger.exe
2013-10-14 08:26 - 2013-10-14 09:21 - 00008148 _____ C:\Users\Friederike\Desktop\AdwCleaner[R1].txt
2013-10-14 08:25 - 2013-10-14 09:22 - 00052373 _____ C:\Users\Friederike\Desktop\2013-10-14--FRST.txt
2013-10-14 08:25 - 2013-10-14 09:19 - 00024513 _____ C:\Users\Friederike\Desktop\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:22 - 00024510 _____ C:\Users\Friederike\Downloads\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:21 - 00377856 _____ C:\Users\Friederike\Downloads\gmer_2.1.19163.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\Friederike\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Friederike\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-11 21:15 - 2013-10-13 17:19 - 00000000 ____D C:\sh4ldr
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 21:14 - 2013-10-13 17:19 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-11 18:50 - 2013-10-11 20:52 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 17:40 - 2013-10-11 18:49 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 20:52 - 00000000 ____D C:\Users\Friederike\Desktop\mbar
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Friederike\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:08 - 2013-10-14 15:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-11 17:08 - 2013-10-13 17:45 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:08 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Friederike\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\SecureSearch
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\Friederike\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:45 - 2013-10-14 15:07 - 00000000 ____D C:\AdwCleaner
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\Friederike\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\Friederike\AppData\Roaming\WB.CFG
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:27 - 2013-10-11 05:46 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\TuneUp Software
2013-10-11 05:26 - 2013-10-11 05:27 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:35 - 2013-10-11 00:40 - 00000000 ____D C:\Users\Friederike\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\Friederike\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:16 - 2013-10-11 00:17 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:51 - 2013-10-10 23:56 - 00000000 ____D C:\Users\Friederike\Documents\!2013_14--Schankin-Newsletter
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\Friederike\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:09 - 2013-08-22 17:51 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-10-10 14:09 - 2013-07-15 16:08 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-10-10 14:09 - 2013-07-15 10:28 - 00082136 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-10-10 14:09 - 2013-02-26 16:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\Friederike\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-09 07:11 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 07:11 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 07:11 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 07:11 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 07:11 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 07:11 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 07:11 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 07:11 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 07:11 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 07:11 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 07:11 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 07:11 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 07:11 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 07:11 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 07:11 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 07:11 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 07:11 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 07:10 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 07:10 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:10 - 2013-07-06 00:02 - 00121984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-10-09 07:10 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 07:10 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 07:10 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 07:10 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 07:10 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 07:10 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 07:10 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 07:10 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 07:10 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:10 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 07:10 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 07:10 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 07:10 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 07:10 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-08 10:17 - 2013-10-08 10:24 - 00000000 ____D C:\Users\Friederike\Documents\images
2013-10-08 09:44 - 2013-05-02 17:29 - 00278800 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\Friederike\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\Friederike\AppData\Local\Freie_Universität_Berlin
2013-10-01 10:12 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\Friederike\AppData\Local\Cornelsen Schulverlage
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\Friederike\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\Friederike\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:42 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:40 - 2013-09-23 14:41 - 74520472 _____ (Logitech, Inc.) C:\Users\Friederike\Downloads\lws280.exe
2013-09-23 14:06 - 2013-09-28 11:17 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-23 14:06 - 2013-09-23 14:44 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:06 - 2013-09-23 14:43 - 00000000 ____D C:\Program Files\Common Files\logishrd

==================== One Month Modified Files and Folders =======

2013-10-17 14:11 - 2013-10-17 14:12 - 00891167 _____ C:\Users\Friederike\Desktop\SecurityCheck(1).exe
2013-10-17 14:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-10-17 13:58 - 2013-10-17 13:58 - 00000121 _____ C:\Users\Friederike\Desktop\2013-10-17-von-eset.txt
2013-10-17 13:19 - 2013-06-04 20:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-17 03:18 - 2013-10-17 03:18 - 101413064 _____ C:\windows\SysWOW64\咏욪Lñ
2013-10-15 09:24 - 2012-08-01 18:38 - 00753134 _____ C:\windows\system32\perfh007.dat
2013-10-15 09:24 - 2012-08-01 18:38 - 00155826 _____ C:\windows\system32\perfc007.dat
2013-10-15 09:24 - 2012-07-26 09:28 - 01745416 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-15 09:17 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-15 00:25 - 2013-10-15 00:25 - 101072268 _____ C:\windows\SysWOW64\憝Lű
2013-10-14 15:54 - 2013-06-01 13:03 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-358878931-1704632014-3567270812-1001
2013-10-14 15:43 - 2013-06-02 17:29 - 00000000 ____D C:\Program Files (x86)\phase5
2013-10-14 15:28 - 2013-10-14 15:28 - 00001172 _____ C:\Users\Friederike\Desktop\JRT.txt
2013-10-14 15:24 - 2013-10-14 15:24 - 00000000 ____D C:\windows\ERUNT
2013-10-14 15:16 - 2013-10-11 17:08 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-14 15:14 - 2013-10-14 15:14 - 00000000 ____D C:\Users\Friederike\Documents\ProcAlyzer Dumps
2013-10-14 15:12 - 2013-10-14 15:12 - 01032220 _____ (Thisisu) C:\Users\Friederike\Downloads\JRT_6.04.exe
2013-10-14 15:10 - 2013-10-14 15:10 - 00006706 _____ C:\Users\Friederike\Desktop\AdwCleaner[S0].txt
2013-10-14 15:07 - 2013-10-11 16:45 - 00000000 ____D C:\AdwCleaner
2013-10-14 15:07 - 2013-06-01 12:55 - 00001016 _____ C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-14 13:52 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\NDF
2013-10-14 13:12 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-14 09:23 - 2013-10-14 09:12 - 00002545 _____ C:\Users\Friederike\Desktop\gmer-log-1.log
2013-10-14 09:22 - 2013-10-14 08:25 - 00052373 _____ C:\Users\Friederike\Desktop\2013-10-14--FRST.txt
2013-10-14 09:21 - 2013-10-14 08:26 - 00008148 _____ C:\Users\Friederike\Desktop\AdwCleaner[R1].txt
2013-10-14 09:19 - 2013-10-14 08:25 - 00024513 _____ C:\Users\Friederike\Desktop\Addition.txt
2013-10-14 09:12 - 2013-07-07 16:28 - 00145920 ___SH C:\Users\Friederike\Desktop\Thumbs.db
2013-10-14 08:34 - 2013-10-14 08:34 - 00000482 _____ C:\Users\Friederike\Downloads\defogger_disable.log
2013-10-14 08:34 - 2013-10-14 08:34 - 00000000 _____ C:\Users\Friederike\defogger_reenable
2013-10-14 08:34 - 2013-06-01 12:54 - 00000000 ____D C:\Users\Friederike
2013-10-14 08:33 - 2013-10-14 08:33 - 00050477 _____ C:\Users\Friederike\Downloads\Defogger.exe
2013-10-14 08:22 - 2013-10-14 08:21 - 00024510 _____ C:\Users\Friederike\Downloads\Addition.txt
2013-10-14 08:21 - 2013-10-14 08:21 - 00377856 _____ C:\Users\Friederike\Downloads\gmer_2.1.19163.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 01954124 _____ (Farbar) C:\Users\Friederike\Downloads\FRST64.exe
2013-10-14 08:19 - 2013-10-14 08:19 - 00000000 ____D C:\FRST
2013-10-14 00:37 - 2012-11-09 09:11 - 00051184 _____ C:\windows\PFRO.log
2013-10-13 18:59 - 2013-10-13 18:59 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Malwarebytes
2013-10-13 18:59 - 2013-10-13 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-13 18:58 - 2013-10-13 18:58 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Friederike\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-13 17:45 - 2013-10-11 17:08 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-10-13 17:19 - 2013-10-11 21:15 - 00000000 ____D C:\sh4ldr
2013-10-13 17:19 - 2013-10-11 21:14 - 00000000 ____D C:\windows\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2013-10-12 13:53 - 2013-06-01 12:54 - 01966346 _____ C:\windows\WindowsUpdate.log
2013-10-12 13:43 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-11 21:44 - 2013-09-06 07:14 - 00000952 _____ C:\Users\Friederike\Desktop\DVD-Fokus-Ph-7-9 - Verknüpfung.lnk
2013-10-11 21:15 - 2013-10-11 21:15 - 00003348 _____ C:\windows\System32\Tasks\SpyHunter4Startup
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-11 21:15 - 2013-10-11 21:15 - 00000000 _____ C:\autoexec.bat
2013-10-11 20:52 - 2013-10-11 18:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-10-11 20:52 - 2013-10-11 17:39 - 00000000 ____D C:\Users\Friederike\Desktop\mbar
2013-10-11 18:49 - 2013-10-11 17:40 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-10-11 18:40 - 2013-09-05 16:17 - 00000000 ____D C:\windows\System32\Tasks\NCH Software
2013-10-11 18:40 - 2013-09-05 16:16 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\NCH Software
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\searchplugins
2013-10-11 18:23 - 2013-10-11 18:23 - 00000000 ____D C:\windows\SysWOW64\Extensions
2013-10-11 18:23 - 2012-07-26 10:12 - 00000000 ___RD C:\windows\ImmersiveControlPanel
2013-10-11 17:40 - 2013-10-11 17:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-11 17:39 - 2013-10-11 17:39 - 12576792 _____ (Malwarebytes Corp.) C:\Users\Friederike\Downloads\mbar-1.07.0.1007.exe
2013-10-11 17:08 - 2013-10-11 17:08 - 00001390 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-10-11 17:08 - 2013-10-11 17:08 - 00000000 ____D C:\windows\System32\Tasks\Safer-Networking
2013-10-11 17:07 - 2013-10-11 17:07 - 37672592 _____ (Safer-Networking Ltd.                                       ) C:\Users\Friederike\Downloads\spybotsd-2.1.21-SR2.exe
2013-10-11 16:59 - 2013-10-11 16:59 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\LavasoftStatistics
2013-10-11 16:57 - 2013-10-11 16:57 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\SecureSearch
2013-10-11 16:57 - 2013-07-02 23:34 - 00000000 ____D C:\ProgramData\Downloaded Installations
2013-10-11 16:56 - 2013-10-11 16:56 - 05616264 _____ (Lavasoft Limited) C:\Users\Friederike\Downloads\adaware_installer.exe
2013-10-11 16:56 - 2013-10-11 16:56 - 00014456 _____ (GFI Software) C:\windows\system32\Drivers\gfibto.sys
2013-10-11 16:44 - 2013-10-11 16:44 - 01048960 _____ C:\Users\Friederike\Downloads\adwcleaner_3.0.0.7.exe
2013-10-11 16:32 - 2013-08-28 16:33 - 00000000 ____D C:\Users\Friederike\Documents\!2013-ph-EF
2013-10-11 06:33 - 2013-10-11 06:33 - 00000098 _____ C:\Users\Friederike\AppData\Roaming\WB.CFG
2013-10-11 06:07 - 2013-09-06 08:06 - 00000000 ___RD C:\Users\Friederike\Desktop\Div
2013-10-11 05:46 - 2013-10-11 05:27 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-10-11 05:34 - 2013-10-11 05:34 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-10-11 05:34 - 2013-10-01 10:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 05:27 - 2013-10-11 05:27 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\TuneUp Software
2013-10-11 05:27 - 2013-10-11 05:26 - 00000000 ____D C:\windows\SysWOW64\C2MP
2013-10-11 00:40 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\Documents\Any Video Converter
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\Documents\Any Video Converter Professional
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\AnvSoft
2013-10-11 00:35 - 2013-10-11 00:35 - 00000000 ____D C:\Users\Friederike\AppData\Local\Google
2013-10-11 00:34 - 2013-10-11 00:34 - 35631456 _____ (Any-Video-Converter.com                                     ) C:\Users\Friederike\Downloads\avc-free.exe
2013-10-11 00:18 - 2013-10-11 00:18 - 00001192 _____ C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veedub64.lnk
2013-10-11 00:17 - 2013-10-11 00:16 - 00000000 ____D C:\Program Files (x86)\VirtualDub
2013-10-10 23:58 - 2013-09-02 10:46 - 00000000 ____D C:\Users\Friederike\Documents\!kantgym-div-13+14
2013-10-10 23:56 - 2013-10-10 23:51 - 00000000 ____D C:\Users\Friederike\Documents\!2013_14--Schankin-Newsletter
2013-10-10 23:56 - 2013-06-23 18:15 - 00000000 ____D C:\Users\Friederike\Documents\2012_13--Schankin-Newsletter
2013-10-10 17:20 - 2013-07-06 15:51 - 00000000 ____D C:\Users\Friederike\Documents\SMART Notebook
2013-10-10 14:20 - 2013-10-10 14:20 - 00000000 ____D C:\Users\Friederike\AppData\Local\SMART_Technologies
2013-10-10 14:15 - 2013-10-10 14:15 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00002077 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\ProgramData\Avira
2013-10-10 14:09 - 2013-10-10 14:09 - 00000000 ____D C:\Program Files (x86)\Avira
2013-10-10 14:08 - 2013-10-10 14:08 - 115068344 _____ C:\Users\Friederike\Downloads\avira_free_antivirus_de.exe
2013-10-10 14:06 - 2013-10-10 14:06 - 00318224 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 06:02 - 2013-08-28 16:34 - 00000000 ____D C:\Users\Friederike\Documents\2013-ph-Q1
2013-10-09 17:26 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\FxsTmp
2013-10-09 12:01 - 2013-07-27 18:40 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 11:57 - 2013-06-02 14:50 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-08 22:19 - 2013-06-04 20:53 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 10:53 - 2013-06-23 18:39 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\FileZilla
2013-10-08 10:24 - 2013-10-08 10:17 - 00000000 ____D C:\Users\Friederike\Documents\images
2013-10-08 10:02 - 2013-06-04 22:57 - 00000000 ____D C:\Users\Friederike\Documents\!Physik
2013-10-08 07:07 - 2013-07-26 09:40 - 00009728 ___SH C:\Users\Friederike\Thumbs.db
2013-10-07 09:48 - 2013-08-26 16:26 - 00000000 ____D C:\Users\Friederike\Documents\!2013-Ph-8k1
2013-10-05 10:24 - 2013-06-01 12:55 - 00000000 ____D C:\Users\Friederike\AppData\Local\Packages
2013-10-04 18:47 - 2013-06-01 13:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 03:38 - 2013-06-02 18:39 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-06-02 18:39 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 12:36 - 2013-06-01 13:49 - 00000000 ____D C:\Users\Friederike\AppData\Local\Mozilla
2013-10-01 11:47 - 2013-10-01 11:47 - 00000000 ____D C:\Users\Friederike\Documents\Schroedel
2013-10-01 10:38 - 2013-10-01 10:38 - 00000000 ____D C:\Users\Friederike\AppData\Local\Freie_Universität_Berlin
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Cornelsen Schulverlage
2013-09-30 20:29 - 2013-09-30 20:29 - 00000000 ____D C:\Users\Friederike\AppData\Local\Cornelsen Schulverlage
2013-09-30 20:28 - 2013-08-28 16:31 - 00000000 ____D C:\Users\Friederike\Documents\!2013-Ph-5d
2013-09-29 16:51 - 2013-09-10 18:24 - 00000000 ____D C:\Users\Friederike\Documents\!DVD-Ph
2013-09-28 11:17 - 2013-09-23 14:06 - 00008831 _____ C:\windows\system32\lvcoinst.log
2013-09-27 16:07 - 2013-06-23 16:28 - 00000000 ___RD C:\Users\Friederike\Dropbox
2013-09-27 16:07 - 2013-06-23 16:27 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Dropbox
2013-09-26 06:35 - 2013-09-26 06:35 - 00001056 _____ C:\Users\Friederike\Desktop\!DVD-Ph - Verknüpfung.lnk
2013-09-26 06:35 - 2013-06-02 15:49 - 00083456 ___SH C:\Users\Friederike\Documents\Thumbs.db
2013-09-26 04:55 - 2013-06-01 12:55 - 00000000 ___RD C:\Users\Friederike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-23 14:46 - 2013-09-23 14:46 - 00000000 ____D C:\Users\Friederike\AppData\Local\Logitech® Webcam-Software
2013-09-23 14:44 - 2013-09-23 14:06 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2013-09-23 14:43 - 2013-09-23 14:43 - 00004288 _____ C:\windows\LDPINST.LOG
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\Users\Friederike\AppData\Roaming\Leadertech
2013-09-23 14:43 - 2013-09-23 14:43 - 00000000 ____D C:\ProgramData\LogiShrd
2013-09-23 14:43 - 2013-09-23 14:42 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-23 14:43 - 2013-09-23 14:06 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-23 14:43 - 2012-07-26 09:21 - 00030037 _____ C:\windows\setupact.log
2013-09-23 14:42 - 2013-09-23 14:42 - 00001635 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2013-09-23 14:41 - 2013-09-23 14:40 - 74520472 _____ (Logitech, Inc.) C:\Users\Friederike\Downloads\lws280.exe
2013-09-23 01:28 - 2013-10-09 07:11 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 07:11 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 07:11 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 07:11 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 07:11 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 07:11 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

Some content of TEMP:
====================
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll
C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll
C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll
C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll
C:\Users\Friederike\AppData\Local\Temp\npp.6.5.Installer.exe
C:\Users\Friederike\AppData\Local\Temp\Quarantine.exe
C:\Users\Friederike\AppData\Local\Temp\SHSetup.exe
C:\Users\Friederike\AppData\Local\Temp\uninst.exe
C:\Users\Friederike\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 06:15

==================== End Of Log ============================
         

--- --- ---


Ganz vielen Dank für die Hilfe

Gita-top

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo schrauber,

nochmal ganz herzlichen Dank für die Hilfe. Mein Rechner scheint wieder sauber zu sein und ich werde vorsichtiger sein. Meinen Dank unterstreicht eine Spende an das Board.

Viele Grüße

Gita-top

Gern Geschehen