Hallo ich bin Eva und habe von Computern wenig Ahnung. Jedenfalls hat Malwarebytes den Trojaner Zer0Access im Papierkorb gefunden. Um ganz sicher zu sein, bitte ich einen der Helfer hier genau zu schauen ob alles weg ist....DANKE vorab

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Thomas (administrator) on THOMAS-PC on 06-11-2013 21:13:53
Running from C:\Users\Thomas\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(IDT, Inc.) c:\program files\idt\wdm\STacSV.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
() C:\Windows\system32\PSIService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(SafeNet, Inc) C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Wistron) C:\Program Files\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WButton.exe
(Wistron Corp.) C:\Program Files\Launch Manager\WisLMSvc.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Sentelic Corporation) C:\Program Files\FSP\FspUip.exe
(Samsung Electronics.) C:\Windows\Samsung\ComSMMgr\SSMMgr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Users\Thomas\temp\TeamViewer\Version7\TeamViewer.exe
(TeamViewer GmbH) C:\Users\Thomas\temp\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) c:\users\thomas\temp\teamviewer\version7\TeamViewer_Desktop.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [HotkeyApp] - C:\Program Files\Launch Manager\HotkeyApp.exe [192000 2009-08-19] (Wistron)
HKLM\...\Run: [LMgrVolOSD] - C:\Program Files\Launch Manager\OSD.exe [343552 2009-07-07] (Wistron Corp.)
HKLM\...\Run: [LMgrOSD] - "C:\Program Files\Launch Manager\OSDCtrl.exe"
HKLM\...\Run: [Wbutton] - C:\Program Files\Launch Manager\WButton.exe [413696 2009-08-05] (Wistron Corp.)
HKLM\...\Run: [MDS_Menu] - C:\Program Files\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM\...\Run: [PDVD9LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [50472 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495728 2009-10-24] (IDT, Inc.)
HKLM\...\Run: [fspuip] - C:\Program Files\FSP\FspUip.exe [3342336 2009-11-12] (Sentelic Corporation)
HKLM\...\Run: [Samsung Common SM] - C:\Windows\Samsung\ComSMMgr\SSMMgr.exe [360448 2004-05-17] (Samsung Electronics.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [] - [x]
HKLM\...\Run: [CorelDRAW Graphics Suite 11b] - C:\Program Files\Corel\Corel Graphics 11\Register\registration.exe /title="CorelDRAW Graphics Suite 11" /date=073113 serial=DR11WBL-2155586-LXG
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM\...\Runonce: [InnoSetupRegFile.0000000001] - "C:\Windows\is-T94KV.exe" /REG /REGSVRMODE
MountPoints2: {64046995-4afb-11e0-9d12-001f16330f1b} - F:\AutoRun.exe
MountPoints2: {ad4037ea-1b0b-11e0-99b3-001f16330f1b} - F:\AutoRun.exe
MountPoints2: {ad40383b-1b0b-11e0-99b3-001f16330f1b} - G:\AutoRun.exe
MountPoints2: {cb8153e9-c725-11df-9d97-001f16330f1b} - F:\AutoRun.exe
MountPoints2: {fe350c83-4d98-11e0-9d7a-001f16330f1b} - F:\AutoRun.exe
MountPoints2: {fe350c97-4d98-11e0-9d7a-001f16330f1b} - F:\AutoRun.exe
MountPoints2: {fe350c9b-4d98-11e0-9d7a-001f16330f1b} - F:\AutoRun.exe
Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*hxxp://www.yahoo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {354C3121-AE3A-445A-96F1-6F8CE95CA0A5} URL = hxxp://go.web.de/suchbox/smartshopping/?searchText={searchTerms}&mc=searchplugin@suche@msie.suche@preisvergleich
SearchScopes: HKCU - {3EC11F40-0F86-48AA-B505-480A04FCB890} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {47C3BE90-260D-4355-A9F5-BF6D4055D159} URL = hxxp://go.gmx.net/suchbox/amazon/?keywords={searchTerms}
SearchScopes: HKCU - {57A9AB21-4DD3-4D1C-9D9B-A6D9E5B12E71} URL = hxxp://suche.gmx.net/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
SearchScopes: HKCU - {5EE41C70-6F8F-44F5-960E-3ECA52E840B9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms}
SearchScopes: HKCU - {63E2DF1F-34D7-47EF-B609-4F010104B47B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKCU - {E1A12259-28E3-4F18-877A-DCB24EB7CF48} URL = hxxp://search.1und1.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {28B66320-9687-4B13-8757-36F901887AB5} hxxp://www.lidl-fotos.de/ips-opdata/layout/lidl02/objects/canvasx.cab
DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.lidl-fotos.de/ips-opdata/layout/lidl02/objects/jordan.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {983A9C21-8207-4B58-BBB8-0EBC3D7C5505} hxxp://www.bsgz.de/dwa8W.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default
FF SearchEngineOrder.2: amazon.de
FF SearchEngineOrder.3: 1und1 Suche
FF SearchEngineOrder.4: amazon.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\searchplugins\1und1-suche.xml
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\searchplugins\amazonde.xml
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\searchplugins\preisvergleich.xml
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\searchplugins\webde-suche.xml
FF Extension: All-Glass Firefox mod, based on Glasser - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\Extensions\allglassv2@ambroos.neowin.net
FF Extension: Update Notifier - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\Extensions\{95f24680-9e31-11da-a746-0800200c9a66}
FF Extension: GMX Firefox Addon - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\Extensions\{C473DC2B-895F-4E11-B8BF-FF28DFD62829}
FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\50rimjrn.default\Extensions\D171.tmp.zip

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\pdf.dll No File
CHR Plugin: (Google Gears 0.5.33.0) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U17) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2003) - C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Skype Click to Call) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

========================== Services (Whitelisted) =================

R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
S2 gupdate1ca9ee3bbd8b941; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2010-01-27] (Google Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2009-07-27] ()
R2 SentinelProtectionServer; C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [226592 2008-07-11] (SafeNet, Inc)
R2 STacSV; c:\program files\idt\wdm\STacSV.exe [225382 2009-10-24] (IDT, Inc.)
R3 WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [113152 2009-03-04] (Wistron Corp.)
R2 x10nets; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [20480 2001-11-12] (X10)

==================== Drivers (Whitelisted) ====================

S2 DgiVecp; C:\Windows\System32\Drivers\DgiVecp.sys [40448 2003-07-29] (DeviceGuys, Inc.)
R1 ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\MBAE.sys [44632 2013-10-23] ()
U0 hphwwotv; C:\Windows\System32\drivers\ymlorj.sys [54016 2013-11-06] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MRV6X32U; C:\Windows\System32\DRIVERS\MRVW23B.sys [231040 2006-12-22] (A/WLAN-1)
S3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1488096 2009-07-30] (NXP Semiconductors Germany GmbH)
R2 VmodeNT; C:\Windows\System32\Drivers\VmodeNT.sys [2528 1998-01-21] (k&k)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13720 2009-05-13] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27160 2009-05-13] (X10 Wireless Technology, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-06 21:13 - 2013-11-06 21:13 - 01089445 _____ (Farbar) C:\Users\Thomas\Downloads\FRST.exe
2013-11-06 21:13 - 2013-11-06 21:13 - 00000000 ____D C:\FRST
2013-11-06 20:54 - 2013-11-06 20:55 - 00000000 ___SD C:\32788R22FWJFW
2013-11-06 20:54 - 2013-11-06 20:54 - 00000000 ____D C:\Windows\erdnt
2013-11-06 20:46 - 2013-11-06 20:46 - 00054016 _____ C:\Windows\system32\Drivers\ymlorj.sys
2013-11-06 20:19 - 2013-11-06 20:19 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job
2013-11-06 20:19 - 2013-11-06 20:19 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit
2013-11-06 20:19 - 2013-07-16 04:41 - 01498960 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100d.dll
2013-11-06 20:19 - 2013-07-16 04:41 - 00743248 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100d.dll
2013-11-06 20:09 - 2013-11-06 20:09 - 00712264 _____ C:\Windows\is-T94KV.exe
2013-11-06 20:09 - 2013-11-06 20:09 - 00013521 _____ C:\Windows\is-T94KV.msg
2013-11-06 20:09 - 2013-11-06 20:09 - 00000361 _____ C:\Windows\is-T94KV.lst
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\ProgramData\Sun
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\ProgramData\Oracle
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-06 20:07 - 2013-11-06 20:08 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Thomas\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-11-06 20:01 - 2013-11-06 20:01 - 00000000 ____D C:\Users\Thomas\Desktop\Autoruns
2013-11-06 20:00 - 2013-11-06 20:00 - 00550371 _____ C:\Users\Thomas\Desktop\Autoruns.zip
2013-11-06 19:41 - 2013-11-06 19:47 - 00000000 ____D C:\AdwCleaner
2013-11-06 19:25 - 2013-11-06 19:26 - 00011274 _____ C:\Users\Thomas\Desktop\hijackthis.log
2013-11-06 19:24 - 2013-11-06 19:24 - 00388608 _____ (Trend Micro Inc.) C:\Users\Thomas\Desktop\hijackthis.exe
2013-11-06 19:00 - 2013-11-06 19:10 - 00000000 ____D C:\Users\Thomas\Desktop\schule
2013-11-06 08:13 - 2013-11-06 08:15 - 00000000 ____D C:\Users\Thomas\Desktop\bvn
2013-10-14 21:15 - 2013-10-14 21:15 - 00000000 ____D C:\b8bbf5cbfef0381a2f
2013-10-14 15:07 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-14 15:07 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-14 15:07 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-14 15:07 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-14 15:07 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-14 15:07 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-14 15:07 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 14:48 - 2013-10-11 14:48 - 00000000 ____D C:\e7710c293157e1bb8961a8f08929008d
2013-10-11 09:44 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-11 09:44 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-11 09:44 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-11 09:44 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-11 09:44 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-11 09:44 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-11 09:44 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-11 09:44 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-11 09:44 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-11 09:44 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-11 09:44 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-11 09:44 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-11 09:44 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-11 09:44 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-11 09:44 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-11 09:44 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-11 09:44 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-11 09:44 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-11 09:44 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-11 09:44 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-11 09:44 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-11 09:44 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-11 09:44 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-11 09:44 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-11 09:44 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-11 09:44 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-11 09:44 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

==================== One Month Modified Files and Folders =======

2013-11-06 21:13 - 2013-11-06 21:13 - 01089445 _____ (Farbar) C:\Users\Thomas\Downloads\FRST.exe
2013-11-06 21:13 - 2013-11-06 21:13 - 00000000 ____D C:\FRST
2013-11-06 20:55 - 2013-11-06 20:54 - 00000000 ___SD C:\32788R22FWJFW
2013-11-06 20:54 - 2013-11-06 20:54 - 00000000 ____D C:\Windows\erdnt
2013-11-06 20:46 - 2013-11-06 20:46 - 00054016 _____ C:\Windows\system32\Drivers\ymlorj.sys
2013-11-06 20:44 - 2012-04-03 08:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-06 20:23 - 2010-01-27 01:11 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-06 20:19 - 2013-11-06 20:19 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job
2013-11-06 20:19 - 2013-11-06 20:19 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit
2013-11-06 20:09 - 2013-11-06 20:09 - 00712264 _____ C:\Windows\is-T94KV.exe
2013-11-06 20:09 - 2013-11-06 20:09 - 00013521 _____ C:\Windows\is-T94KV.msg
2013-11-06 20:09 - 2013-11-06 20:09 - 00000361 _____ C:\Windows\is-T94KV.lst
2013-11-06 20:09 - 2012-08-13 13:08 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-06 20:09 - 2012-08-13 13:08 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\ProgramData\Sun
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\ProgramData\Oracle
2013-11-06 20:08 - 2013-11-06 20:08 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-06 20:08 - 2013-11-06 20:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Thomas\Desktop\mbam-setup-1.75.0.1300.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-06 20:07 - 2013-11-06 20:07 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-11-06 20:07 - 2009-11-06 08:39 - 00000000 ____D C:\Program Files\Java
2013-11-06 20:01 - 2013-11-06 20:01 - 00000000 ____D C:\Users\Thomas\Desktop\Autoruns
2013-11-06 20:00 - 2013-11-06 20:00 - 00550371 _____ C:\Users\Thomas\Desktop\Autoruns.zip
2013-11-06 19:56 - 2009-07-14 05:34 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-06 19:56 - 2009-07-14 05:34 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-06 19:54 - 2010-01-21 09:12 - 01921481 _____ C:\Windows\WindowsUpdate.log
2013-11-06 19:50 - 2013-06-04 21:14 - 00000000 ___RD C:\Users\Thomas\Dropbox
2013-11-06 19:50 - 2013-06-04 21:11 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Dropbox
2013-11-06 19:49 - 2010-01-27 01:11 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-06 19:49 - 2010-01-21 09:15 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema
2013-11-06 19:48 - 2012-08-13 18:24 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2013-11-06 19:48 - 2009-11-06 09:02 - 00097014 _____ C:\Windows\PFRO.log
2013-11-06 19:48 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-06 19:48 - 2009-07-14 05:39 - 00030930 _____ C:\Windows\setupact.log
2013-11-06 19:47 - 2013-11-06 19:41 - 00000000 ____D C:\AdwCleaner
2013-11-06 19:26 - 2013-11-06 19:25 - 00011274 _____ C:\Users\Thomas\Desktop\hijackthis.log
2013-11-06 19:24 - 2013-11-06 19:24 - 00388608 _____ (Trend Micro Inc.) C:\Users\Thomas\Desktop\hijackthis.exe
2013-11-06 19:18 - 2012-08-13 18:24 - 00000000 ____D C:\Users\Thomas\Documents\Anti-Malware
2013-11-06 19:10 - 2013-11-06 19:00 - 00000000 ____D C:\Users\Thomas\Desktop\schule
2013-11-06 19:08 - 2013-05-24 10:21 - 00000000 ____D C:\Users\Thomas\Desktop\Hochzoll
2013-11-06 19:02 - 2012-11-11 18:30 - 00000000 ____D C:\Users\Thomas\Desktop\Wohnung 2013
2013-11-06 19:02 - 2012-08-13 22:12 - 00000000 ____D C:\Users\Thomas\Desktop\allgemein
2013-11-06 19:01 - 2012-02-19 21:27 - 00000000 ____D C:\Users\Thomas\Desktop\hochzeit
2013-11-06 08:15 - 2013-11-06 08:13 - 00000000 ____D C:\Users\Thomas\Desktop\bvn
2013-11-06 08:10 - 2009-11-06 04:43 - 01527740 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-05 09:11 - 2013-06-04 21:14 - 00001025 _____ C:\Users\Thomas\Desktop\Dropbox.lnk
2013-11-05 09:11 - 2013-06-04 21:12 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-29 08:54 - 2009-07-14 05:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-24 15:20 - 2010-01-27 01:00 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype
2013-10-20 12:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-20 12:30 - 2010-01-27 01:00 - 00002133 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-20 11:46 - 2009-07-14 05:33 - 00514520 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-17 19:45 - 2010-01-25 17:59 - 00157272 _____ C:\Users\Thomas\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-17 18:08 - 2009-11-06 08:27 - 00000000 ____D C:\Program Files\Corel
2013-10-17 18:08 - 2009-11-06 07:16 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-10-16 15:52 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-10-14 21:15 - 2013-10-14 21:15 - 00000000 ____D C:\b8bbf5cbfef0381a2f
2013-10-14 15:34 - 2009-11-06 09:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-14 15:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-10-14 15:16 - 2009-07-14 03:04 - 00000528 _____ C:\Windows\win.ini
2013-10-14 15:13 - 2013-08-16 16:41 - 00000000 ____D C:\Windows\system32\MRT
2013-10-14 15:09 - 2009-11-06 09:23 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-11 14:48 - 2013-10-11 14:48 - 00000000 ____D C:\e7710c293157e1bb8961a8f08929008d
2013-10-09 16:44 - 2012-08-13 18:44 - 17813896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2013-10-09 16:44 - 2012-04-03 08:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-09 16:44 - 2011-10-04 16:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-07 19:00 - 2013-09-02 16:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\EurekaLog

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-427536901-2548411121-799733326-1000\$4bdfd8437f0a2ed13540a3abd334940a

Some content of TEMP:
====================
C:\Users\Thomas\AppData\Local\Temp\0.5935437617844382.exe
C:\Users\Thomas\AppData\Local\Temp\7.2.20.2-EasyShrx.Dll
C:\Users\Thomas\AppData\Local\Temp\97dfc9617a57d132.exe
C:\Users\Thomas\AppData\Local\Temp\contentDATs.exe
C:\Users\Thomas\AppData\Local\Temp\DataCard_Setup.exe
C:\Users\Thomas\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Thomas\AppData\Local\Temp\FlashPlayerUpdate01.exe
C:\Users\Thomas\AppData\Local\Temp\GoogleChromeInstaller.exe
C:\Users\Thomas\AppData\Local\Temp\install_flashplayer11x32au_ltr5x32d_awh_aih.exe
C:\Users\Thomas\AppData\Local\Temp\install_flashplayer11x32au_mssa_aih.exe
C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
C:\Users\Thomas\AppData\Local\Temp\ResetDevice.exe
C:\Users\Thomas\AppData\Local\Temp\SearchWithGoogleUpdate.exe
C:\Users\Thomas\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Thomas\AppData\Local\Temp\SHSetup.exe
C:\Users\Thomas\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Thomas\AppData\Local\Temp\unwise.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-31 23:01

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Thomas at 2013-11-06 21:17:21
Running from C:\Users\Thomas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.1)
4500_Help (Version: 1.00.0000)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader 9.1.3 - Deutsch (Version: 9.1.3)
ALDI Süd Foto Manager Free (Version: 6.0.1.491)
ALDI Süd Foto Service (Version: 4.5.9.140)
Aldi Süd Fotoservice
ALDI Süd Online Druck Service (Version: 4.5.1.0)
AVM FRITZ!Box Dokumentation
AVM FRITZ!Box Druckeranschluss
Bilder-CD Fachkunde Metall, 56. Auflage - Einzellizenz
Bilder-CD für Fachkunde Metall, 55. Auflage - Einzellizenz
Bing Bar (Version: 7.0.791.0)
bpd_scan (Version: 3.00.0000)
BPDSoftware (Version: 50.0.165.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 130.0.331.000)
Cisco EAP-FAST Module (Version: 2.2.14)
Cisco LEAP Module (Version: 1.0.19)
Cisco PEAP Module (Version: 1.1.6)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
Corel MediaOne (Version: 2.100.0000)
CorelDRAW Essential Edition 3
CorelDRAW Essential Edition 3 (Version: 3.0)
CyberLink LabelPrint (Version: 2.5.2130)
CyberLink MediaShow (Version: 4.1.3121)
CyberLink PhotoNow (Version: 1.1.6904)
CyberLink Power2Go (Version: 6.1.3213)
CyberLink PowerDirector (Version: 8.0.2231)
CyberLink PowerDVD 9 (Version: 9.0.2010)
CyberLink PowerDVD Copy (Version: 1.0.6720)
CyberLink PowerProducer (Version: 5.0.2.2130)
CyberLink YouCam (Version: 3.0.2219)
DE (Version: 3.0)
dm Digi Foto (Version: 2.3.0.93)
dm-Fotowelt (Version: 5.0.4)
Dropbox (HKCU Version: 2.4.6)
e-Wörterbücher
Festo FluidSim 3.6
Finger Sensing Pad Driver (Version: 8.5.4.0)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Firefox 3.6 GMX Edition
Firefox 3.6 GMX Edition (Version: 1.6)
GMX Update
GMX Update (Version: 1.0)
Google Chrome (Version: 30.0.1599.101)
Google Earth (Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.21.165)
HP Officejet J4500 Series (Version: 13.0)
IDT Audio (Version: 1.0.6208.0)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2202)
Intel(R) TV Wizard
Intel® Matrix Storage Manager
Internet-TV für Windows Media Center (Version: 4.2.2.0)
J4500 (Version: 50.0.165.000)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Java(TM) 6 Update 17 (Version: 6.0.170)
JMicron Flash Media Controller Driver (Version: 1.0.32.1)
Junk Mail filter update (Version: 14.0.8089.726)
Launch Manager V1.5.0.5 (Version: 1.5.0.5)
Malwarebytes Anti-Exploit version 0.09.4.2000 (Version: 0.09.4.2000)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MEDION Fotos auf CD & DVD SE Sued (Version: 8.0.3.4)
Medion Home Cinema (Version: 6.0.0000)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Opera 12.16 (Version: 12.16.1860)
PaperPublisher - Metallbau Grundwissen
PDFCreator (Version: 0.9.9)
pdfforge Toolbar v7.2 (Version: 7.2)
PlayReady PC Runtime x86 (Version: 1.3.0)
ProductContext (Version: 50.0.165.000)
QuickTime (Version: 7.1.3.100)
REALTEK Wireless LAN Driver (Version: 1.00.0130)
Samsung CLP-510 Series
Scan (Version: 13.0.0.0)
Sentinel Protection Installer 7.5.0 (Version: 7.5.0)
Skype Click to Call (Version: 5.6.8442)
Skype™ 6.3 (Version: 6.3.107)
Solid Edge V17 (Version: 17.00.0065)
Steuern sparen 2012 (Version: 19.00.7304)
Steuern sparen 2013 (Version: 20.00.8137)
Surf & E-Mail-Stick (Version: 11.301.08.00.35)
SYMplus Drehen deu
SYMplus Fräsen deu
Tabellenbuch Metall digital 6.0 (Version: 6.00.0000)
Toolbox (Version: 130.0.648.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update Manager (Version: 4.60)
WebReg (Version: 130.0.132.017)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
X10 Hardware(TM)
Yahoo! Toolbar
ZDFmediathek Version 2.1.5

==================== Restore Points  =========================

27-09-2013 18:37:25 Windows Update
29-09-2013 17:00:27 Windows-Sicherung
02-10-2013 13:32:28 Windows Update
07-10-2013 16:28:40 Windows-Sicherung
08-10-2013 14:20:39 Windows Update
11-10-2013 13:47:52 Windows Update
14-10-2013 14:04:10 Windows Update
14-10-2013 14:10:28 Windows-Sicherung
14-10-2013 20:14:13 Windows Update
17-10-2013 17:00:31 Konfiguriert Corel Graphics Suite 11
17-10-2013 17:06:43 Konfiguriert Corel Graphics Suite 11
17-10-2013 19:56:40 Windows Update
20-10-2013 18:15:40 Windows-Sicherung
22-10-2013 17:53:32 Windows Update
28-10-2013 08:12:08 Windows Update
28-10-2013 08:16:44 Windows-Sicherung
02-11-2013 17:51:34 Windows Update
04-11-2013 15:56:07 Windows-Sicherung
06-11-2013 19:06:43 Installed Java 7 Update 45

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1F678A50-28D3-4D66-927A-4EA0CE973C6E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-27] (Google Inc.)
Task: {21306206-AABA-438C-88B0-F2CEFE53E352} - System32\Tasks\Malwarebytes Anti-Exploit => C:\Program Files\Malwarebytes Anti-Exploit\mbae-loader.exe [2013-10-23] (Malwarebytes Corporation)
Task: {32FBEC4E-6315-4858-BD60-4FA64DFAD213} - System32\Tasks\{FD231224-27C4-4B91-B481-9A2FC8D5C032} => Firefox.exe 
Task: {38B90CDD-BF50-4547-A85A-47B743099EA1} - System32\Tasks\{E31B14F1-3263-4C25-A30C-EF566DEB428B} => C:\Program Files\Skype\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {3B567BC2-D800-41DE-AE4B-18577CAC22CF} - System32\Tasks\{10CAFB8F-7C46-4883-AD96-7595E4A20AB6} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.1.0.179.211/de/privacy?source=lightinstaller
Task: {711AC3A7-EE02-4660-8C31-6BCA2A322EC6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-27] (Google Inc.)
Task: {E0B8169F-B3D4-4475-86A2-CC29A36FB25F} - System32\Tasks\{2AD204C0-CC3D-4DFE-9051-6B0D5E0B9155} => Firefox.exe 
Task: {E3D613ED-2D19-4A41-BC2F-926C16599049} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Malwarebytes Anti-Exploit.job => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

==================== Loaded Modules (whitelisted) =============

2003-07-11 02:09 - 2003-07-11 02:09 - 00048192 _____ () C:\Program Files\Common Files\Microsoft Shared\Web Folders\1031\nsextint.dll
2009-06-03 20:59 - 2009-06-03 20:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-06-03 20:59 - 2009-06-03 20:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2009-11-12 15:30 - 2009-11-12 13:50 - 00053248 _____ () C:\Program Files\FSP\KbdHook.dll
2009-11-12 15:30 - 2009-11-12 13:50 - 00073728 _____ () C:\Program Files\FSP\FspLib.dll
2013-10-09 16:44 - 2013-10-09 16:44 - 16233864 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:A8ADE5D8
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/06/2013 07:31:51 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/05/2013 01:51:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/05/2013 01:51:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (11/04/2013 05:05:10 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)"

Error: (11/02/2013 07:29:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (11/02/2013 07:29:18 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (10/31/2013 11:02:17 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (10/31/2013 11:01:54 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (10/30/2013 10:43:53 AM) (Source: Application Hang) (User: )
Description: Programm AcroRd32.exe, Version 9.1.0.163 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1754

Startzeit: 01ced5546df0393e

Endzeit: 15

Anwendungspfad: C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe

Berichts-ID: bfcee9b5-4147-11e3-b281-001f16330f1b

Error: (10/28/2013 09:26:03 AM) (Source: Windows Backup) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)"


System errors:
=============
Error: (10/16/2013 01:39:30 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎16.‎10.‎2013 um 13:35:58 unerwartet heruntergefahren.

Error: (10/15/2013 04:23:01 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎14.‎10.‎2013 um 22:19:46 unerwartet heruntergefahren.

Error: (10/14/2013 02:59:53 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎11.‎10.‎2013 um 15:50:37 unerwartet heruntergefahren.

Error: (09/16/2013 09:26:53 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (09/11/2013 08:04:28 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (08/16/2013 08:41:47 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎16.‎08.‎2013 um 09:39:16 unerwartet heruntergefahren.

Error: (08/07/2013 06:20:16 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎07.‎08.‎2013 um 19:11:22 unerwartet heruntergefahren.

Error: (08/07/2013 07:49:09 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎07.‎08.‎2013 um 08:40:07 unerwartet heruntergefahren.

Error: (07/07/2013 02:23:58 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎07.‎07.‎2013 um 15:22:01 unerwartet heruntergefahren.

Error: (07/02/2013 08:05:53 AM) (Source: cdrom) (User: )
Description: Fehlerhafter Block bei Gerät \Device\CdRom0.


Microsoft Office Sessions:
=========================
Error: (11/06/2013 07:31:51 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings64.exe

Error: (11/05/2013 01:51:25 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings64.exe

Error: (11/05/2013 01:51:02 PM) (Source: SideBySide)(User: )
Description: C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (11/04/2013 05:05:10 PM) (Source: Windows Backup)(User: )
Description: Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)

Error: (11/02/2013 07:29:40 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings64.exe

Error: (11/02/2013 07:29:18 PM) (Source: SideBySide)(User: )
Description: C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (10/31/2013 11:02:17 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings64.exe

Error: (10/31/2013 11:01:54 PM) (Source: SideBySide)(User: )
Description: C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (10/30/2013 10:43:53 AM) (Source: Application Hang)(User: )
Description: AcroRd32.exe9.1.0.163175401ced5546df0393e15C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exebfcee9b5-4147-11e3-b281-001f16330f1b

Error: (10/28/2013 09:26:03 AM) (Source: Windows Backup)(User: )
Description: Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)


==================== Memory info =========================== 

Percentage of memory in use: 47%
Total physical RAM: 3004.87 MB
Available physical RAM: 1574.27 MB
Total Pagefile: 6008.03 MB
Available Pagefile: 4497.18 MB
Total Virtual: 2047.88 MB
Available Virtual: 1887.08 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:424.66 GB) (Free:201.88 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:0.14 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 15C3DB6A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=425 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

Hallo und

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-427536901-2548411121-799733326-1000\$4bdfd8437f0a2ed13540a3abd334940a

Lesestoff:
Rootkit-Warnung
Dein Computer wurde mit einem besonderen Schädling infiziert, der sich vor herkömmlichen Virenscannern und dem Betriebssystem selbst verstecken kann. Zusätzlich hat so ein Schädling meist auch Backdoor-Funktionalität, reißt also ganz bewußt Löcher durch alle Schutzmaßnahmen, damit er weiteren Schadcode nachladen oder die Daten, die er so sammelt, an die "bösen Jungs" weiterleiten kann. Was heißt das jetzt für dich?

• Entscheide bitte ganz bewußt, ob du mit der Bereinigung fortfahren möchtest. Ein einmal derartig kompromittiertes System kann man niemals mit 100%iger Sicherheit wieder absichern. Auch wenn wir gute Chancen haben, deinen Computer zu bereinigen, kann es dennoch möglich sein, dass uns am Ende nur die Neuinstallation bleibt.
  
  
• Wenn du mit diesem Computer beispielsweise Onlinebanking machst, dann solltest du zumindest dein Passwort von deiner Bank ändern lassen, wenn du ein ansonsten sicheres Verfahren wie beispielsweise "chip-TAN-comfort" nutzt. Hast du noch alte TAN-Bögen auf Papierbasis? Dann ist es höchste Zeit dich bei deiner Bank zu melden und notfalls das Konto temporär sperren zu lassen. Der Sperrnotruf 116 116 von www.sperr-notruf.de kann Tag und Nacht dafür benutzt werden.
  
  
• Hast du ansonsten sensible Daten auf deinem Computer, dann solltest du auch darüber nachdenken, wie du damit umgehst, da sie sich praktisch "jeder" ansehen konnte.

Teile mir also mit, wie du dich entschieden hast.

Hallo cosinus, herzlichen Dank für deine Antwort. Werd den Computer baldmöglichst neu installieren lassen....

So schwierig ist das nicht, dass bekommst du auch selbst hin
Denk erstmal an die Datensicherung, anschließend Artikel zur Neuinstallation von Windows lesen

Lesestoff:
Sichern von Daten eines infizierten Systems

Mit einem Live-System sind keine Schädlinge des infizierten Windows-Systems aktiv, damit ist dann auch eine negative Beeinflussung des Backups durch Schädlinge ausgeschlossen.

Du brauchst natürlich auch ein Sicherungsmedium, am besten dürfte eine externe Platte sein. Sofern du nicht allzuviel sichern musst, kann auch ein USB-Stick ausreichen.

Anleitung: Parted Magic