Hallo Ihr. Eigentlich lade ich nur von sicheren Seiten, wie z.B. Adobe oder Chip.de. Wie auch immer, ich habe es geschafft, mir dieses mistige searchprotect und linkswift eingefangen, selbst eine Systemwiederherstellung hat es nicht gebracht und dieses -Zeugs läßt sich auch nicht deinstallieren über die Systemsteuerung. Nachdem ich hier ein bißchen geschnöft habe, lud ich mit eben den AdwCleaner runter und ließ ihn durchlaufen, der hat den wohl gekillt...allerdings ist diesesZeug ja wohl recht zäh - aber ich nur ein (meistens) recht pfiffiger User.

Wie kann ich sicher sein, daß es ganz weg ist? Und bitte nicht schimpfen, das ich nicht sofort irgendwelche Logfiles oder so eingefügt hab, ich weiß nicht, wie man die erstellt... aber ich kopiere den Bericht vom AdwCleaner ein und hoffe und vertraue auf Hilfe von Euch. Wäre natürlich toll, wenn es das schon gewesen wäre, aber davon geh ich mal nicht aus. Obwohl mein Rechner schon wieder schneller ist Der IE, den ich zwar so gut wie nie nutze, funktioniert auch wieder und bei den Suchmaschinen im Firefox ist davon auch nichts mehr zu sehen - immerhin!

Ich bedanke mich schonmal vorab seehr herzlich AdwCleaner Logfile:

# AdwCleaner v3.013 - Bericht erstellt am 27/11/2013 um 21:49:20
# Updated 24/11/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : moi - COMPI
# Gestartet von : C:\Users\moi\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : CltMngSvc

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\LinkSwift
Ordner Gelöscht : C:\Program Files (x86)\Searchprotect
Ordner Gelöscht : C:\Users\moi\AppData\Local\Searchprotect
Ordner Gelöscht : C:\Users\moi\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\moi\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\moi\AppData\Roaming\OpenCandy
Datei Gelöscht : C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\seknqfp2.ich-neues-Profil-Feuerfuchs\Extensions\firefox@linkswift.co.xpi
Datei Gelöscht : C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\searchplugins\conduit-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{323420B6-65E5-4657-8106-A27392D4D4AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{323420B6-65E5-4657-8106-A27392D4D4AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\LinkSwift
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\LinkSwift
Schlüssel Gelöscht : HKLM\Software\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LinkSwift
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16455

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v23.0 (de)

[ Datei : C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP2204FFD4-A69A-4935-A774-5B4B4FA496E3");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP2204FFD4-A69A-4935-A774-5B4B4FA496E3&SSPV=");
Zeile gelöscht : user_pref("extensions.firefox@linkswift.co.install-event-fired", true);
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "ob_103");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "a4b1e637-9cb2-78e2-2553-968c79c45671");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "25/11/2013");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "quickobrw");

[ Datei : C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\seknqfp2.ich-neues-Profil-Feuerfuchs\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP2204FFD4-A69A-4935-A774-5B4B4FA496E3&SSPV=");
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://search.conduit.com/?ctid=CT3317740&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP2204FFD4-A69A-4935-A774-5B4B4FA496E3");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Conduit Search");

[ Datei : C:\Users\wEwEwE\AppData\Roaming\Mozilla\Firefox\Profiles\dl45gj4a.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [7380 octets] - [27/11/2013 21:47:27]
AdwCleaner[S0].txt - [6829 octets] - [27/11/2013 21:49:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6889 octets] ##########
         

--- --- ---

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hi. Erstmal gaaaanz lieben Dank für die schnelle Antwort!
Das ich einen 64BitRechner hab, weiß ich schon noch

So, hier das Ergebnis, bin gespannt und hoffnungsvoll FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-11-2013 01
Ran by moi at 2013-11-28 18:18:02
Running from C:\Users\moi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe AIR (x32 Version: 3.6.0.5970)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
Atheros Bluetooth Suite (64) (Version: 7.4.0.125)
AVG 2014 (Version: 14.0.3629)
AVG 2014 (Version: 14.0.4259)
AVG 2014 (Version: 2014.0.4259)
Bejeweled 3 (x32 Version: 2.2.0.98)
Build-a-lot 2 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CyberLink PowerDVD (x32 Version: 9.0.5009.52)
D3DX10 (x32 Version: 15.4.2368.0902)
doPDF 7.3 printer
Evernote v. 4.5.2 (x32 Version: 4.5.2.5904)
FDUx86 (x32 Version: 1.0.0)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Glary Utilities Pro 2.51.0.1666 (x32 Version: 2.51.0.1666)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2618)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
KUx86 (x32 Version: 1.0.0)
Lexmark 1200 Series
Mahjongg Artifacts (x32 Version: 2.2.0.95)
maxdome Download Manager 4.1.300.78 (x32 Version: 4.1.30078)
Media Gallery (Version: 2.1.0.13300)
Media Go (x32 Version: 2.0.317)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 23.0 (x86 de) (x32 Version: 23.0)
Mozilla Maintenance Service (x32 Version: 23.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
Panda Cloud Cleaner (x32 Version: 1.0.45)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PYV_x86 (x32 Version: 1.0.0)
Qualcomm Atheros Direct Connect (x32 Version: 3.1)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6564)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.91)
Remote Keyboard (x32 Version: 1.2.0.09270)
Skype™ 5.5 (x32 Version: 5.5.117)
Spybot - Search & Destroy (x32 Version: 2.0.12)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Synaptics Pointing Device Driver (Version: 16.0.1.0)
The Hidden Object Game Show (x32 Version: 2.2.0.97)
TrackID(TM) with BRAVIA (x32 Version: 1.2.0.09270)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
VAIO - Microsoft Visual C++ 2010 SP1 Runtime 10.0.40219.325 (Version: 1.0.00.01300)
VAIO - PlayMemories Home Plug-in (Version: 2.0.00.14200)
VAIO - Remote-Tastatur (x32 Version: 1.2.0.09270)
VAIO - Remote-Tastatur mit PlayStation®3 (x32 Version: 1.2.0.09210)
VAIO - TrackID™ mit BRAVIA (x32 Version: 1.2.0.09270)
VAIO Care (Version: 7.3.0.14170)
VAIO Control Center (x32 Version: 5.2.1.15070)
VAIO Data Restore Tool (x32 Version: 1.9.0.13190)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 2.5.2.02090)
VAIO Gesture Control (x32 Version: 1.0.0.12300)
VAIO Improvement (x32 Version: 1.3.0.12280)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.11.1.15220)
VAIO Update (x32 Version: 5.7.0.13130)
VAIO Update Merge Module x64 (Version: 5.7.13130)
VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200)
VAIO-Handbuch (x32 Version: 2.3.0.12300)
VAIO-Support für Übertragungen (x32 Version: 1.7.0.02231)
VCCx64 (Version: 1.0.0)
VCCx86 (x32 Version: 1.0.0)
VHD (x32 Version: 1.0.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VMLx86 (x32 Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VSNx86 (x32 Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (x32 Version: 1.0.0)
VU5x64 (Version: 1.0.0)
VU5x86 (x32 Version: 1.0.0)
VWSTx86 (x32 Version: 1.0.0)
WildTangent Games App (x32 Version: 4.0.5.36)
WildTangent-Spiele (x32 Version: 1.0.2.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Phone (x32 Version: 0.9.3723.2)
XSManager (x32 Version: 3.2)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

29-05-2013 17:39:00 Geplanter Prüfpunkt
06-06-2013 19:32:52 Geplanter Prüfpunkt
16-06-2013 16:12:26 Geplanter Prüfpunkt
26-06-2013 19:54:18 Geplanter Prüfpunkt
28-06-2013 17:50:54 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
25-11-2013 11:49:13 avast! Free Antivirus Setup
25-11-2013 11:51:19 Installed AVG 2014
25-11-2013 11:51:40 Installed AVG 2014
25-11-2013 16:14:40 OpenOffice 4.0.1 wird installiert
27-11-2013 20:17:12 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-05-19 12:03 - 00447225 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	www.123fporn.info
127.0.0.1	123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {05C83F98-EFCE-416A-9AED-017E6F873ED3} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-12-27] (Sony Corporation)
Task: {13FD2F67-AB1B-4469-93D0-70AB0A1CCE7D} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {1401266C-210D-4AC4-880F-44E27CAD9653} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-02-24] (Sony Corporation)
Task: {3127B542-0CF7-47C8-91B0-7D71856484B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {31606502-7CEE-4D6C-B306-D2E4C598442E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {568F1F1E-7CB2-4FA1-891D-E13FA08EBAD4} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {574A4593-59E5-4677-A0B4-46270439A365} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {63A0397D-A014-4173-AD76-0B62E53B3DED} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => net
Task: {69CAFED9-455E-4E35-AD61-A8A8A8F0588F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {76DF93BC-7B92-4C4E-A72B-24DAB6D67244} - System32\Tasks\{C19B180D-A7E4-4DC2-8F56-4754B85C3F5D} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {780F8EC7-21D1-46C4-B327-6890DE00313C} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {83FA3E86-4421-4030-90E7-5FD0F4F8F93E} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {83FB1BC8-D5A7-419D-9340-8862D23CBB98} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {88447257-9B4C-486F-A9D7-C7FB5E5AACF8} - System32\Tasks\Sony Corporation\VAIO Care\AutoCheckMessage => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {8F84E8C8-316A-4246-BA1D-BF27088A8A7D} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {9BB5C555-9EFA-41D2-9B30-887F023809D7} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9C5CEFD4-DF7F-440D-A8F5-D35F432DB242} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9DF36E2D-CAF4-4E65-A515-B20FF82805C9} - System32\Tasks\{484A9CF0-7734-495A-9FB0-4871A67995F7} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {A078A30B-FA27-4769-8E95-44526FFB258B} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {A3AA677C-BF6C-4E86-847B-75B541108458} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {A3F3EFE7-F8CD-40D3-BEF7-794ED53E60D5} - \{49034CB1-9776-499D-AD85-A0403F40A40A} No Task File
Task: {A7690F1C-77D7-4C72-ABA9-1211B997E98C} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music moi => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation)
Task: {AF662A53-2613-4133-83F5-7CDBCD46AEDE} - System32\Tasks\{90780806-3242-4F5C-8135-0A7DCF9D2D49} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {BD9C64BD-74DE-4DB1-99ED-00F71F9354B0} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2012-01-06] (Sony Corporation)
Task: {BE9F7B13-EFB6-4FB8-8E14-FC98C35ED582} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {C80630EB-C201-49F4-9B60-4D0D0764DD26} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {E9CCDFCE-034F-4277-8ADD-1DC17DC52E97} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2011-12-27] (Sony Corporation)
Task: {EE194259-51DD-4AAE-BC8E-499A4F3FEF3F} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-11-28] (Glarysoft Ltd)
Task: {FEFFDC2C-C4E1-4A8F-AD2C-42450975C673} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe

==================== Loaded Modules (whitelisted) =============

2012-03-14 21:54 - 2012-03-14 08:57 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00276992 _____ () C:\Program Files\Sony\VAIO Care\READ\RecoveryPartitionManagerREAD.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files (x86)\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoXML.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-12-01 15:23 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2012-07-31 16:42 - 2012-03-07 17:57 - 00021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll
2012-12-12 08:09 - 2012-12-12 08:09 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f9927372e716ec71e175fe7e5d3f14a3\IsdiInterop.ni.dll
2012-07-31 16:21 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-07-31 16:19 - 2012-03-13 17:02 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-06-28 08:50 - 2013-06-28 08:50 - 03522456 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.04)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.05)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp.  Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (OpenOffice 4.0.1 wird installiert). Zusätzliche Informationen: 0x80070005.

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 07:02:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000018e3d
ID des fehlerhaften Prozesses: 0xec0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3


System errors:
=============
Error: (11/27/2013 10:14:23 PM) (Source: DCOM) (User: compi)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}compimoiS-1-5-21-3668911969-3394569834-3003521934-1000LocalHost (unter Verwendung von LRPC)

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/27/2013 09:55:45 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎27.‎11.‎2013 um 21:53:36 unerwartet heruntergefahren.

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (11/27/2013 06:48:14 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Update LinkSwift erreicht.

Error: (11/27/2013 05:48:35 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎27.‎11.‎2013 um 00:29:05 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.04)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.05)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller)(User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp.  Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore)(User: )
Description: OpenOffice 4.0.1 wird installiert0x80070005

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/25/2013 07:02:32 PM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54ntdll.dll6.1.7601.177254ec4aa8ec00000050000000000018e3dec001ceea0882bfcef4C:\Windows\system32\DllHost.exeC:\Windows\SYSTEM32\ntdll.dllc0e2fac9-55fb-11e3-aa2d-30f9edba7c28


CodeIntegrity Errors:
===================================
  Date: 2013-11-25 13:12:47.880
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 13:12:47.850
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-10-28 16:46:29.849
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-10-28 16:45:38.474
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8092.36 MB
Available physical RAM: 5569.11 MB
Total Pagefile: 16182.91 MB
Available Pagefile: 13220.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:281.02 GB) (Free:191.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 973B63CF)
Partition 1: (Not Active) - (Size=17 GB) - (Type=27)
Partition 2: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=281 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

--- --- ---

FRST.txt fehlt

Hups! Wer nochmal liest, ist klar im Vorteil!!! *schäm*

Schrauber, irgendwie kann ich die Anweisung (#-Symbol im Eingabefenster der Webseite anklicken) nicht umsetzen...?

Hab da jetzt was gefunden, aber ich bekomme eine Meldung The additional.txt is saved in the same location FRST tool is run.

...da hab ich jetzt mal geguck, ist es dies hier, was Du noch brauchst? (Gottchen, ich komm mir grad SEHR blond vor, dabei bin ich eigentlich ziemlich schlau...)

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-11-2013 01
Ran by moi at 2013-11-29 20:50:48
Running from C:\Users\moi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe AIR (x32 Version: 3.6.0.5970)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
Atheros Bluetooth Suite (64) (Version: 7.4.0.125)
AVG 2014 (Version: 14.0.3629)
AVG 2014 (Version: 14.0.4259)
AVG 2014 (Version: 2014.0.4259)
Bejeweled 3 (x32 Version: 2.2.0.98)
Build-a-lot 2 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CyberLink PowerDVD (x32 Version: 9.0.5009.52)
D3DX10 (x32 Version: 15.4.2368.0902)
doPDF 7.3 printer
Evernote v. 4.5.2 (x32 Version: 4.5.2.5904)
FDUx86 (x32 Version: 1.0.0)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Glary Utilities Pro 2.51.0.1666 (x32 Version: 2.51.0.1666)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2618)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
KUx86 (x32 Version: 1.0.0)
Lexmark 1200 Series
Mahjongg Artifacts (x32 Version: 2.2.0.95)
maxdome Download Manager 4.1.300.78 (x32 Version: 4.1.30078)
Media Gallery (Version: 2.1.0.13300)
Media Go (x32 Version: 2.0.317)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
Panda Cloud Cleaner (x32 Version: 1.0.45)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PYV_x86 (x32 Version: 1.0.0)
Qualcomm Atheros Direct Connect (x32 Version: 3.1)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6564)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.91)
Remote Keyboard (x32 Version: 1.2.0.09270)
Skype™ 5.5 (x32 Version: 5.5.117)
Spybot - Search & Destroy (x32 Version: 2.0.12)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Synaptics Pointing Device Driver (Version: 16.0.1.0)
The Hidden Object Game Show (x32 Version: 2.2.0.97)
TrackID(TM) with BRAVIA (x32 Version: 1.2.0.09270)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
VAIO - Microsoft Visual C++ 2010 SP1 Runtime 10.0.40219.325 (Version: 1.0.00.01300)
VAIO - PlayMemories Home Plug-in (Version: 2.0.00.14200)
VAIO - Remote-Tastatur (x32 Version: 1.2.0.09270)
VAIO - Remote-Tastatur mit PlayStation®3 (x32 Version: 1.2.0.09210)
VAIO - TrackID™ mit BRAVIA (x32 Version: 1.2.0.09270)
VAIO Care (Version: 7.3.0.14170)
VAIO Control Center (x32 Version: 5.2.1.15070)
VAIO Data Restore Tool (x32 Version: 1.9.0.13190)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 2.5.2.02090)
VAIO Gesture Control (x32 Version: 1.0.0.12300)
VAIO Improvement (x32 Version: 1.3.0.12280)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.11.1.15220)
VAIO Update (x32 Version: 5.7.0.13130)
VAIO Update Merge Module x64 (Version: 5.7.13130)
VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200)
VAIO-Handbuch (x32 Version: 2.3.0.12300)
VAIO-Support für Übertragungen (x32 Version: 1.7.0.02231)
VCCx64 (Version: 1.0.0)
VCCx86 (x32 Version: 1.0.0)
VHD (x32 Version: 1.0.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VMLx86 (x32 Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VSNx86 (x32 Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (x32 Version: 1.0.0)
VU5x64 (Version: 1.0.0)
VU5x86 (x32 Version: 1.0.0)
VWSTx86 (x32 Version: 1.0.0)
WildTangent Games App (x32 Version: 4.0.5.36)
WildTangent-Spiele (x32 Version: 1.0.2.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Phone (x32 Version: 0.9.3723.2)
XSManager (x32 Version: 3.2)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)

==================== Restore Points =========================

29-05-2013 17:39:00 Geplanter Prüfpunkt
06-06-2013 19:32:52 Geplanter Prüfpunkt
16-06-2013 16:12:26 Geplanter Prüfpunkt
26-06-2013 19:54:18 Geplanter Prüfpunkt
28-06-2013 17:50:54 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
25-11-2013 11:49:13 avast! Free Antivirus Setup
25-11-2013 11:51:19 Installed AVG 2014
25-11-2013 11:51:40 Installed AVG 2014
25-11-2013 16:14:40 OpenOffice 4.0.1 wird installiert
27-11-2013 20:17:12 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-11-28 23:01 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 00hq.com mobile
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 Gadgets And More
127.0.0.1 10sek.com
127.0.0.1 1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {05C83F98-EFCE-416A-9AED-017E6F873ED3} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-12-27] (Sony Corporation)
Task: {13FD2F67-AB1B-4469-93D0-70AB0A1CCE7D} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {1401266C-210D-4AC4-880F-44E27CAD9653} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-02-24] (Sony Corporation)
Task: {3127B542-0CF7-47C8-91B0-7D71856484B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {31606502-7CEE-4D6C-B306-D2E4C598442E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {568F1F1E-7CB2-4FA1-891D-E13FA08EBAD4} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {574A4593-59E5-4677-A0B4-46270439A365} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {63A0397D-A014-4173-AD76-0B62E53B3DED} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => net
Task: {69CAFED9-455E-4E35-AD61-A8A8A8F0588F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {76DF93BC-7B92-4C4E-A72B-24DAB6D67244} - System32\Tasks\{C19B180D-A7E4-4DC2-8F56-4754B85C3F5D} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {780F8EC7-21D1-46C4-B327-6890DE00313C} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {83FA3E86-4421-4030-90E7-5FD0F4F8F93E} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {83FB1BC8-D5A7-419D-9340-8862D23CBB98} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {88447257-9B4C-486F-A9D7-C7FB5E5AACF8} - System32\Tasks\Sony Corporation\VAIO Care\AutoCheckMessage => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {8F84E8C8-316A-4246-BA1D-BF27088A8A7D} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {9BB5C555-9EFA-41D2-9B30-887F023809D7} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9C5CEFD4-DF7F-440D-A8F5-D35F432DB242} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9DF36E2D-CAF4-4E65-A515-B20FF82805C9} - System32\Tasks\{484A9CF0-7734-495A-9FB0-4871A67995F7} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {A078A30B-FA27-4769-8E95-44526FFB258B} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {A3AA677C-BF6C-4E86-847B-75B541108458} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {A3F3EFE7-F8CD-40D3-BEF7-794ED53E60D5} - \{49034CB1-9776-499D-AD85-A0403F40A40A} No Task File
Task: {A7690F1C-77D7-4C72-ABA9-1211B997E98C} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music moi => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation)
Task: {AF662A53-2613-4133-83F5-7CDBCD46AEDE} - System32\Tasks\{90780806-3242-4F5C-8135-0A7DCF9D2D49} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {BD9C64BD-74DE-4DB1-99ED-00F71F9354B0} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2012-01-06] (Sony Corporation)
Task: {BE9F7B13-EFB6-4FB8-8E14-FC98C35ED582} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {C80630EB-C201-49F4-9B60-4D0D0764DD26} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {E9CCDFCE-034F-4277-8ADD-1DC17DC52E97} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2011-12-27] (Sony Corporation)
Task: {EE194259-51DD-4AAE-BC8E-499A4F3FEF3F} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-11-28] (Glarysoft Ltd)
Task: {FEFFDC2C-C4E1-4A8F-AD2C-42450975C673} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe

==================== Loaded Modules (whitelisted) =============

2012-03-14 21:54 - 2012-03-14 08:57 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00321024 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00179712 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00054784 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00061440 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00037376 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 02229760 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00035840 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00055296 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00137728 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00134144 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00024064 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00276992 _____ () C:\Program Files\Sony\VAIO Care\READ\RecoveryPartitionManagerREAD.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files (x86)\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoXML.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-12-01 15:23 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2012-07-31 16:42 - 2012-03-07 17:57 - 00021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll
2012-12-12 08:09 - 2012-12-12 08:09 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f9927372e716ec71e175fe7e5d3f14a3\IsdiInterop.ni.dll
2012-07-31 16:21 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-07-31 16:19 - 2012-03-13 17:02 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-28 20:37 - 2013-11-28 20:37 - 03550832 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-11-28 19:46 - 2013-11-28 19:46 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/29/2013 08:11:54 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.04)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: How to enable Windows Installer logging

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.05)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: How to enable Windows Installer logging

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp. Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (OpenOffice 4.0.1 wird installiert). Zusätzliche Informationen: 0x80070005.

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/29/2013 08:11:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ZAtheros Bt&Wlan Coex Agent erreicht.

Error: (11/27/2013 10:14:23 PM) (Source: DCOM) (User: compi)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}compimoiS-1-5-21-3668911969-3394569834-3003521934-1000LocalHost (unter Verwendung von LRPC)

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:55:45 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎27.‎11.‎2013 um 21:53:36 unerwartet heruntergefahren.

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 06:48:14 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Update LinkSwift erreicht.


Microsoft Office Sessions:
=========================
Error: (11/29/2013 08:11:54 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.04)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.05)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller)(User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp. Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore)(User: )
Description: OpenOffice 4.0.1 wird installiert0x80070005

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
Date: 2013-11-25 13:12:47.880
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-11-25 13:12:47.850
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2012-10-28 16:46:29.849
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2012-10-28 16:45:38.474
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Hab da jetzt was gefunden, aber ich bekomme eine Meldung The additional.txt is saved in the same location FRST tool is run.

...da hab ich jetzt mal geguck, ist es dies hier, was Du noch brauchst? (Gottchen, ich komm mir grad SEHR blond vor, dabei bin ich eigentlich ziemlich schlau...)

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-11-2013 01
Ran by moi at 2013-11-29 20:50:48
Running from C:\Users\moi\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe AIR (x32 Version: 3.6.0.5970)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
Aloha TriPeaks (x32 Version: 2.2.0.98)
Atheros Bluetooth Suite (64) (Version: 7.4.0.125)
AVG 2014 (Version: 14.0.3629)
AVG 2014 (Version: 14.0.4259)
AVG 2014 (Version: 2014.0.4259)
Bejeweled 3 (x32 Version: 2.2.0.98)
Build-a-lot 2 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CyberLink PowerDVD (x32 Version: 9.0.5009.52)
D3DX10 (x32 Version: 15.4.2368.0902)
doPDF 7.3 printer
Evernote v. 4.5.2 (x32 Version: 4.5.2.5904)
FDUx86 (x32 Version: 1.0.0)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Glary Utilities Pro 2.51.0.1666 (x32 Version: 2.51.0.1666)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2618)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 21 (x32 Version: 7.0.210)
Java Auto Updater (x32 Version: 2.1.9.5)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
KUx86 (x32 Version: 1.0.0)
Lexmark 1200 Series
Mahjongg Artifacts (x32 Version: 2.2.0.95)
maxdome Download Manager 4.1.300.78 (x32 Version: 4.1.30078)
Media Gallery (Version: 2.1.0.13300)
Media Go (x32 Version: 2.0.317)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
Panda Cloud Cleaner (x32 Version: 1.0.45)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PYV_x86 (x32 Version: 1.0.0)
Qualcomm Atheros Direct Connect (x32 Version: 3.1)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 3.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6564)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.91)
Remote Keyboard (x32 Version: 1.2.0.09270)
Skype™ 5.5 (x32 Version: 5.5.117)
Spybot - Search & Destroy (x32 Version: 2.0.12)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Synaptics Pointing Device Driver (Version: 16.0.1.0)
The Hidden Object Game Show (x32 Version: 2.2.0.97)
TrackID(TM) with BRAVIA (x32 Version: 1.2.0.09270)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
VAIO - Microsoft Visual C++ 2010 SP1 Runtime 10.0.40219.325 (Version: 1.0.00.01300)
VAIO - PlayMemories Home Plug-in (Version: 2.0.00.14200)
VAIO - Remote-Tastatur (x32 Version: 1.2.0.09270)
VAIO - Remote-Tastatur mit PlayStation®3 (x32 Version: 1.2.0.09210)
VAIO - TrackID™ mit BRAVIA (x32 Version: 1.2.0.09270)
VAIO Care (Version: 7.3.0.14170)
VAIO Control Center (x32 Version: 5.2.1.15070)
VAIO Data Restore Tool (x32 Version: 1.9.0.13190)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Gate (x32 Version: 2.4.1.09230)
VAIO Gate Default (x32 Version: 2.5.2.02090)
VAIO Gesture Control (x32 Version: 1.0.0.12300)
VAIO Improvement (x32 Version: 1.3.0.12280)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.11.1.15220)
VAIO Update (x32 Version: 5.7.0.13130)
VAIO Update Merge Module x64 (Version: 5.7.13130)
VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200)
VAIO-Handbuch (x32 Version: 2.3.0.12300)
VAIO-Support für Übertragungen (x32 Version: 1.7.0.02231)
VCCx64 (Version: 1.0.0)
VCCx86 (x32 Version: 1.0.0)
VHD (x32 Version: 1.0.0)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VMLx86 (x32 Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VSNx86 (x32 Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (x32 Version: 1.0.0)
VU5x64 (Version: 1.0.0)
VU5x86 (x32 Version: 1.0.0)
VWSTx86 (x32 Version: 1.0.0)
WildTangent Games App (x32 Version: 4.0.5.36)
WildTangent-Spiele (x32 Version: 1.0.2.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Phone (x32 Version: 0.9.3723.2)
XSManager (x32 Version: 3.2)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)

==================== Restore Points =========================

29-05-2013 17:39:00 Geplanter Prüfpunkt
06-06-2013 19:32:52 Geplanter Prüfpunkt
16-06-2013 16:12:26 Geplanter Prüfpunkt
26-06-2013 19:54:18 Geplanter Prüfpunkt
28-06-2013 17:50:54 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
25-11-2013 11:49:13 avast! Free Antivirus Setup
25-11-2013 11:51:19 Installed AVG 2014
25-11-2013 11:51:40 Installed AVG 2014
25-11-2013 16:14:40 OpenOffice 4.0.1 wird installiert
27-11-2013 20:17:12 Wiederherstellungsvorgang

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-11-28 23:01 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 00hq.com mobile
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 ²©²Êͨ,²©²ÊÍø,½ð±¦²©188,²©²ÊͨÆÀ¼¶,°Ù¼ÒÀÖ,°ÂÃî°Ù¼ÒÀÖ
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 Gadgets And More
127.0.0.1 10sek.com
127.0.0.1 1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {05C83F98-EFCE-416A-9AED-017E6F873ED3} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-12-27] (Sony Corporation)
Task: {13FD2F67-AB1B-4469-93D0-70AB0A1CCE7D} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {1401266C-210D-4AC4-880F-44E27CAD9653} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-02-24] (Sony Corporation)
Task: {3127B542-0CF7-47C8-91B0-7D71856484B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {31606502-7CEE-4D6C-B306-D2E4C598442E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {568F1F1E-7CB2-4FA1-891D-E13FA08EBAD4} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {574A4593-59E5-4677-A0B4-46270439A365} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {63A0397D-A014-4173-AD76-0B62E53B3DED} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => net
Task: {69CAFED9-455E-4E35-AD61-A8A8A8F0588F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {76DF93BC-7B92-4C4E-A72B-24DAB6D67244} - System32\Tasks\{C19B180D-A7E4-4DC2-8F56-4754B85C3F5D} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {780F8EC7-21D1-46C4-B327-6890DE00313C} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {83FA3E86-4421-4030-90E7-5FD0F4F8F93E} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {83FB1BC8-D5A7-419D-9340-8862D23CBB98} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {88447257-9B4C-486F-A9D7-C7FB5E5AACF8} - System32\Tasks\Sony Corporation\VAIO Care\AutoCheckMessage => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {8F84E8C8-316A-4246-BA1D-BF27088A8A7D} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {9BB5C555-9EFA-41D2-9B30-887F023809D7} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9C5CEFD4-DF7F-440D-A8F5-D35F432DB242} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: {9DF36E2D-CAF4-4E65-A515-B20FF82805C9} - System32\Tasks\{484A9CF0-7734-495A-9FB0-4871A67995F7} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {A078A30B-FA27-4769-8E95-44526FFB258B} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {A3AA677C-BF6C-4E86-847B-75B541108458} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {A3F3EFE7-F8CD-40D3-BEF7-794ED53E60D5} - \{49034CB1-9776-499D-AD85-A0403F40A40A} No Task File
Task: {A7690F1C-77D7-4C72-ABA9-1211B997E98C} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music moi => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-10-03] (Sony Corporation)
Task: {AF662A53-2613-4133-83F5-7CDBCD46AEDE} - System32\Tasks\{90780806-3242-4F5C-8135-0A7DCF9D2D49} => C:\Program Files (x86)\XSManager\XSManager.exe [2012-04-25] (WebToGo Mobiles Internet GmbH)
Task: {BD9C64BD-74DE-4DB1-99ED-00F71F9354B0} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2012-01-06] (Sony Corporation)
Task: {BE9F7B13-EFB6-4FB8-8E14-FC98C35ED582} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {C80630EB-C201-49F4-9B60-4D0D0764DD26} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {E9CCDFCE-034F-4277-8ADD-1DC17DC52E97} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2011-12-27] (Sony Corporation)
Task: {EE194259-51DD-4AAE-BC8E-499A4F3FEF3F} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-11-28] (Glarysoft Ltd)
Task: {FEFFDC2C-C4E1-4A8F-AD2C-42450975C673} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-01-31] (Sony Corporation)
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe

==================== Loaded Modules (whitelisted) =============

2012-03-14 21:54 - 2012-03-14 08:57 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00321024 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00179712 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00054784 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00061440 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00037376 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 02229760 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00035840 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00055296 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00137728 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00134144 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00024064 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll
2011-11-30 17:49 - 2011-11-30 17:49 - 00276992 _____ () C:\Program Files\Sony\VAIO Care\READ\RecoveryPartitionManagerREAD.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () C:\Program Files (x86)\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () C:\Program Files (x86)\maxdome\DCBin\PocoXML.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-12-01 15:23 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2012-12-01 15:23 - 2012-11-13 14:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-12-01 15:23 - 2012-11-13 14:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2012-07-31 16:42 - 2012-03-07 17:57 - 00021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll
2012-12-12 08:09 - 2012-12-12 08:09 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f9927372e716ec71e175fe7e5d3f14a3\IsdiInterop.ni.dll
2012-07-31 16:21 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-07-31 16:19 - 2012-03-13 17:02 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-28 20:37 - 2013-11-28 20:37 - 03550832 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-11-28 19:46 - 2013-11-28 19:46 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/29/2013 08:11:54 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.04)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: How to enable Windows Installer logging

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch - Update "Adobe Reader XI (11.0.05)" konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: How to enable Windows Installer logging

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller) (User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp. Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (OpenOffice 4.0.1 wird installiert). Zusätzliche Informationen: 0x80070005.

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/29/2013 08:11:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ZAtheros Bt&Wlan Coex Agent erreicht.

Error: (11/27/2013 10:14:23 PM) (Source: DCOM) (User: compi)
Description: ComputerstandardLokalAktivierung{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}compimoiS-1-5-21-3668911969-3394569834-3003521934-1000LocalHost (unter Verwendung von LRPC)

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:55:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:55:45 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎27.‎11.‎2013 um 21:53:36 unerwartet heruntergefahren.

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Util LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 09:50:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/27/2013 06:48:14 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update LinkSwift" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (11/27/2013 05:49:15 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Update LinkSwift erreicht.


Microsoft Office Sessions:
=========================
Error: (11/29/2013 08:11:54 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (11/27/2013 09:56:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:51:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.04)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:09 PM) (Source: MsiInstaller)(User: compi)
Description: Adobe Reader XI (11.0.05) - DeutschAdobe Reader XI (11.0.05)1603(NULL)(NULL)(NULL)

Error: (11/27/2013 09:38:04 PM) (Source: MsiInstaller)(User: compi)
Description: Produkt: Adobe Reader XI (11.0.05) - Deutsch -- Fehler 1328. Fehler bei der Anwendung des Patch auf Datei C:\Config.Msi\PT6E38.tmp. Die Datei wurde wahrscheinlich bereits auf andere Weise aktualisiert und kann von diesem Patch nicht mehr verändert werden. Wenden Sie sich mit Fragen an Ihren Patch-Hersteller. Systemfehler: -1072807676(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (11/27/2013 09:23:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 09:22:40 PM) (Source: System Restore)(User: )
Description: OpenOffice 4.0.1 wird installiert0x80070005

Error: (11/27/2013 09:14:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2013 05:51:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
Date: 2013-11-25 13:12:47.880
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2013-11-25 13:12:47.850
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mrxsmb.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Date: 2012-10-28 16:46:29.849
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Date: 2012-10-28 16:45:38.474
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

Sorry für die Verspätung, liege flach mit Grippe.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Du hast jetzt schon wieder die Additonal.txt gepostet, ich brauch die FRST.txt die beim Scan auch erstellt wurde.

Uiuiui...ich Depp, jetzt ist es aber die Richtige, sorry...
Grippe ist kaka, diese verdingste Search Protect auch. Heil schön



FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2013
Ran by moi (administrator) on COMPI on 01-12-2013 15:47:29
Running from C:\Users\moi\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
( ) C:\Windows\System32\lxczcoms.exe
(Entriq, Inc.) C:\Program Files (x86)\maxdome\DCBin\DCService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\XSManager\WTGService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmon.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1020576 2012-02-23] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-03-13] (Synaptics Incorporated)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26624 2010-11-21] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
MountPoints2: D - D:\autorun.exe
MountPoints2: {2963e65d-f9e7-11e1-a2b5-30f9edba7c28} - D:\AutoRun.exe
MountPoints2: {f40ac8e7-f9e5-11e1-9d0f-30f9edba7c28} - D:\QsSetup.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()
BootExecute: autocheck autochk * sdnclean64.exePCloudBroom64.exe \systemroot\system32\BroomData.bit

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {C97F5673-207A-4F73-AC75-77778834E3C2} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {8dcb7100-df86-4384-8842-8fa844297b3f} -  No File
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.214

FireFox:
========
FF ProfilePath: C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067
FF SearchEngineOrder.1: Google
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: 2c0ce700-f746-11e1-a21f-0800200c9a66 - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\2c0ce700-f746-11e1-a21f-0800200c9a66@jetpack.xpi
FF Extension: elemhidehelper - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: firefox - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\firefox@ghostery.com.xpi
FF Extension: info - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\info@skymeissner.com.xpi
FF Extension: testpilot - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: defaults - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{95ab36d4-fb6f-47b0-8b8d-e5f3bd547953}.xpi
FF Extension: Adblock Plus - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 lxcz_device; C:\Windows\SysWow64\lxczcoms.exe [537520 2007-04-19] ( )
R2 Prosieben; C:\Program Files (x86)\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [327392 2012-04-25] ()
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros)
S2 Update LinkSwift; "C:\Program Files (x86)\LinkSwift\updateLinkSwift.exe" [x]
S2 Util LinkSwift; "C:\Program Files (x86)\LinkSwift\bin\utilLinkSwift.exe" [x]

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-30] (AVAST Software)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-02-23] (Atheros)
S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [126080 2012-09-08] (QUALCOMM Incorporated)
S3 gtstusbser_64; C:\Windows\System32\DRIVERS\gtstusbser_64.sys [118016 2008-11-18] (Option N.V.)
S3 Huawei; system32\DRIVERS\ewdcsc.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-01 15:46 - 2013-12-01 15:46 - 01959184 _____ (Farbar) C:\Users\moi\Downloads\FRST64.exe
2013-11-30 13:42 - 2013-11-30 13:42 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2013-11-30 13:30 - 2013-11-30 13:30 - 00000056 _____ C:\Windows\setupact.log
2013-11-29 20:25 - 2013-11-29 20:26 - 00000230 _____ C:\Users\moi\Downloads\Search.txt
2013-11-28 23:01 - 2013-11-28 22:56 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts.20131128-230145.backup
2013-11-28 20:37 - 2013-11-28 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-28 19:46 - 2013-11-28 19:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-28 19:46 - 2013-11-28 19:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-28 18:18 - 2013-11-29 20:52 - 00033568 _____ C:\Users\moi\Downloads\Addition.txt
2013-11-28 18:17 - 2013-12-01 15:47 - 00019104 _____ C:\Users\moi\Downloads\FRST.txt
2013-11-28 18:17 - 2013-11-28 18:17 - 00000000 ____D C:\FRST
2013-11-27 21:47 - 2013-11-27 21:49 - 00000000 ____D C:\AdwCleaner
2013-11-27 21:41 - 2013-11-27 21:41 - 01091882 _____ C:\Users\moi\Downloads\adwcleaner.exe
2013-11-25 17:34 - 2013-11-25 18:12 - 00015970 _____ C:\Users\moi\Desktop\NAVTEQ GERMANY GMBH.odt
2013-11-25 17:19 - 2013-11-25 17:19 - 00000000 ____D C:\Users\moi\AppData\Roaming\OpenOffice
2013-11-25 17:16 - 2013-11-25 17:16 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-25 17:15 - 2013-11-25 17:16 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-25 17:13 - 2013-11-25 17:13 - 00000000 ____D C:\Users\moi\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-25 14:27 - 2013-11-25 14:27 - 00000000 ____D C:\Users\moi\AppData\Local\FreeOCR
2013-11-25 14:20 - 2013-11-27 21:23 - 00000000 ____D C:\FreeOCR
2013-11-25 14:20 - 2007-03-10 09:11 - 02680320 _____ (HiComponents) C:\Windows\SysWOW64\ImageEnXLibrary.ocx
2013-11-25 13:15 - 2013-11-25 13:15 - 00278880 _____ C:\Windows\Minidump\112513-42681-01.dmp
2013-11-25 13:12 - 2013-11-25 13:13 - 00278880 _____ C:\Windows\Minidump\112513-44304-01.dmp
2013-11-25 12:54 - 2013-11-25 12:54 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-25 12:54 - 2013-11-25 12:54 - 00000000 ____D C:\Users\moi\AppData\Roaming\AVG2014
2013-11-25 12:53 - 2013-11-25 12:53 - 00000941 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-25 12:52 - 2013-11-25 12:54 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-25 12:52 - 2013-11-25 12:52 - 00000000 ___HD C:\$AVG
2013-11-25 12:51 - 2013-11-25 12:51 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-25 12:50 - 2013-12-01 15:26 - 00000000 ____D C:\ProgramData\MFAData
2013-11-25 12:50 - 2013-11-25 14:10 - 00000000 ____D C:\Users\moi\AppData\Local\Avg2014
2013-11-25 12:50 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\MFAData
2013-11-05 21:55 - 2013-11-05 21:55 - 00150808 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2013-11-04 21:52 - 2013-11-04 21:52 - 00240920 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys

==================== One Month Modified Files and Folders =======

2013-12-01 15:47 - 2013-11-28 18:17 - 00019104 _____ C:\Users\moi\Downloads\FRST.txt
2013-12-01 15:46 - 2013-12-01 15:46 - 01959184 _____ (Farbar) C:\Users\moi\Downloads\FRST64.exe
2013-12-01 15:26 - 2013-11-25 12:50 - 00000000 ____D C:\ProgramData\MFAData
2013-12-01 15:21 - 2012-07-31 16:06 - 01844939 _____ C:\Windows\WindowsUpdate.log
2013-12-01 15:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2013-11-30 13:42 - 2013-11-30 13:42 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2013-11-30 13:38 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-30 13:38 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-30 13:37 - 2012-07-31 17:01 - 00697322 _____ C:\Windows\system32\perfh007.dat
2013-11-30 13:37 - 2012-07-31 17:01 - 00148328 _____ C:\Windows\system32\perfc007.dat
2013-11-30 13:37 - 2009-07-14 06:13 - 01614036 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-30 13:32 - 2012-08-09 07:31 - 00000000 ____D C:\Users\moi\Documents\Bluetooth Folder
2013-11-30 13:30 - 2013-11-30 13:30 - 00000056 _____ C:\Windows\setupact.log
2013-11-30 13:30 - 2013-06-08 14:24 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-11-30 13:30 - 2012-12-15 16:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-30 13:30 - 2012-12-02 15:03 - 00000322 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-11-30 13:30 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-30 12:04 - 2012-09-01 20:47 - 00000000 ___RD C:\Users\moi\Desktop\PiXdownload
2013-11-29 20:52 - 2013-11-28 18:18 - 00033568 _____ C:\Users\moi\Downloads\Addition.txt
2013-11-29 20:26 - 2013-11-29 20:25 - 00000230 _____ C:\Users\moi\Downloads\Search.txt
2013-11-29 20:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-28 23:07 - 2012-08-09 10:11 - 00000000 ____D C:\Users\moi\AppData\Local\Mozilla
2013-11-28 22:56 - 2013-11-28 23:01 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts.20131128-230145.backup
2013-11-28 20:37 - 2013-11-28 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-28 19:46 - 2013-11-28 19:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-28 19:46 - 2013-11-28 19:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-28 19:46 - 2012-08-09 09:32 - 00000000 ____D C:\Users\moi\AppData\Local\Adobe
2013-11-28 18:17 - 2013-11-28 18:17 - 00000000 ____D C:\FRST
2013-11-27 21:49 - 2013-11-27 21:47 - 00000000 ____D C:\AdwCleaner
2013-11-27 21:41 - 2013-11-27 21:41 - 01091882 _____ C:\Users\moi\Downloads\adwcleaner.exe
2013-11-27 21:23 - 2013-11-25 14:20 - 00000000 ____D C:\FreeOCR
2013-11-27 21:20 - 2012-12-02 15:03 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-11-27 21:20 - 2012-08-09 07:27 - 00000000 ____D C:\Users\moi
2013-11-27 21:20 - 2012-07-31 16:49 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-27 21:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-27 17:50 - 2009-07-14 05:45 - 00321736 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-25 19:02 - 2012-08-20 15:37 - 00000000 ____D C:\Users\moi\AppData\Local\CrashDumps
2013-11-25 18:18 - 2012-10-30 09:54 - 00000000 ____D C:\Users\moi\Desktop\Scan&PDF
2013-11-25 18:17 - 2012-08-09 07:27 - 00072560 _____ C:\Users\moi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 18:12 - 2013-11-25 17:34 - 00015970 _____ C:\Users\moi\Desktop\NAVTEQ GERMANY GMBH.odt
2013-11-25 17:19 - 2013-11-25 17:19 - 00000000 ____D C:\Users\moi\AppData\Roaming\OpenOffice
2013-11-25 17:16 - 2013-11-25 17:16 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-25 17:16 - 2013-11-25 17:15 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-25 17:13 - 2013-11-25 17:13 - 00000000 ____D C:\Users\moi\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-25 14:27 - 2013-11-25 14:27 - 00000000 ____D C:\Users\moi\AppData\Local\FreeOCR
2013-11-25 14:10 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\Avg2014
2013-11-25 13:15 - 2013-11-25 13:15 - 00278880 _____ C:\Windows\Minidump\112513-42681-01.dmp
2013-11-25 13:15 - 2012-08-10 19:18 - 518576383 _____ C:\Windows\MEMORY.DMP
2013-11-25 13:15 - 2012-08-10 19:18 - 00000000 ____D C:\Windows\Minidump
2013-11-25 13:13 - 2013-11-25 13:12 - 00278880 _____ C:\Windows\Minidump\112513-44304-01.dmp
2013-11-25 13:12 - 2012-09-01 08:00 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-25 13:12 - 2010-11-21 04:47 - 00021944 _____ C:\Windows\PFRO.log
2013-11-25 12:54 - 2013-11-25 12:54 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-25 12:54 - 2013-11-25 12:54 - 00000000 ____D C:\Users\moi\AppData\Roaming\AVG2014
2013-11-25 12:54 - 2013-11-25 12:52 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-25 12:53 - 2013-11-25 12:53 - 00000941 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-25 12:53 - 2013-02-08 20:02 - 00000000 ____D C:\Users\moi\AppData\Roaming\TuneUp Software
2013-11-25 12:52 - 2013-11-25 12:52 - 00000000 ___HD C:\$AVG
2013-11-25 12:51 - 2013-11-25 12:51 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-25 12:50 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\MFAData
2013-11-05 21:55 - 2013-11-05 21:55 - 00150808 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2013-11-04 21:52 - 2013-11-04 21:52 - 00240920 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4944.dll


Some content of TEMP:
====================
C:\Users\moi\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\moi\AppData\Local\Temp\ResetDevice.exe
C:\Users\moi\AppData\Local\Temp\rtdrvmon.exe
C:\Users\moi\AppData\Local\Temp\tmAss_up.exe
C:\Users\wEwEwE\AppData\Local\Temp\rtdrvmon.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 11:29

==================== End Of Log ============================
         

--- --- ---

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Was eine Scannerei...ich wüßte ja nur zu gerne, wie ich an diesen Mist gekommen bin
So, erstmal dies hier:

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.02.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
moi :: COMPI [Administrator]

Schutz: Aktiviert

02.12.2013 21:29:16
mbam-log-2013-12-02 (21-29-16).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 375221
Laufzeit: 56 Minute(n), 18 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKLM\SYSTEM\CurrentControlSet\Services\Update LinkSwift (PUP.Optional.LinkSwift.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 12
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LinkSwift\LinkSwiftBHO.dll.vir (PUP.Optional.LinkSwift.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\CltMngSvc.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\SPTool.dll.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\uninstall.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\cltmng.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPTool64.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC32.dll.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC32Loader.dll.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC64.dll.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC64Loader.dll.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\UI\bin\cltmngui.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\moi\AppData\Roaming\OpenCandy\E29A3B0189084B19B7593730469C60BE\INTERNALWRAPPER.exe.vir (PUP.Optional.Searchprotect) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

gefolgt vom zweiten Streich

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by moi on 02.12.2013 at 22:29:00,85
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] update linkswift 
Successfully deleted: [Service] update linkswift 



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\moi\appdata\local\{0CACB7DC-4B67-4FA4-8B9D-BD248DF09F3C}
Successfully deleted: [Empty Folder] C:\Users\moi\appdata\local\{26AB2D38-D313-475F-8948-C5D3CE3A1105}
Successfully deleted: [Empty Folder] C:\Users\moi\appdata\local\{BE65BBC5-2C89-4058-A528-C25F9DB0ED46}



~~~ FireFox

Emptied folder: C:\Users\moi\AppData\Roaming\mozilla\firefox\profiles\pmutkjzz.default-1355603724067\minidumps [72 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.12.2013 at 22:39:18,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Irgendwie will der AdwCleaner grad nicht, ich liefere das aktuelle frst log nach.

also, der ADWCleaner findet irgendwie nüscht und erstelle auch kein neues Logfile... ich hab den extra nochmal runtergeladen. Ich weiß jetzt leider nicht, ob das so okay ist oder ob ich das nochmal probieren soll, aber muß jetzt ganz dringend in die Falle, bitte sag mir, daß das eine gute Nachricht ist

Passt schon.


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Bevor ich damit anfange - gilt das auch für mein Handy?
(Hab ein Lumia 820 Schlaufon und frag mich immer, wie es da mit der Surf-Sicherheit aussieht...)

Nee

Jungejunge, der Eset dauert ja - da kommt heut nix mehr bei rum, bevor ich in die Heia muß...

hehe

Leckofanni!! SECHS STUNDEN!! Und das erst beim 3. Versuch, die ersten 2 Mal hat mein Rechner sich - entgegen der Regieanweisungen - nach 3 Stunden schlafen gelegt...
So, logfile ESET, dann kommt der nächste Schritt - zwischendurch schonmal einen lieben Dank, nochmal und immer wieder

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16135
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-04 05:49:22
# local_time=2013-12-04 06:49:22 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 264150 137809212 0 0
# scanned=275843
# found=0
# cleaned=0
# scan_time=8248
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16135
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-04 08:44:35
# local_time=2013-12-04 09:44:35 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 274663 137819725 0 0
# scanned=277494
# found=0
# cleaned=0
# scan_time=9805
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16138
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-05 05:20:33
# local_time=2013-12-05 06:20:33 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 305621 137850683 0 0
# scanned=81062
# found=0
# cleaned=0
# scan_time=30863
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16141
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-05 10:00:48
# local_time=2013-12-05 11:00:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 318836 137867498 0 0
# scanned=54242
# found=0
# cleaned=0
# scan_time=13942
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16144
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-05 02:39:31
# local_time=2013-12-05 03:39:31 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 339159 137884221 0 0
# scanned=573197
# found=0
# cleaned=0
# scan_time=16653
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=cadce0f9d2509f4782109e72cb29380c
# engine=16147
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-05 08:42:45
# local_time=2013-12-05 09:42:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 357353 137906015 0 0
# scanned=691668
# found=0
# cleaned=0
# scan_time=21648
         

next one

 Results of screen317's Security Check version 0.99.76  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus Free Edition 2014   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Panda Cloud Cleaner   
 Java 7 Update 21  
 Java version out of Date! 
 Adobe Flash Player 11.9.900.152  
 Adobe Reader XI  
 Mozilla Firefox (26.0) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Spybot Teatimer.exe is disabled! 
 AVG avgwdsvc.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

So. Und da ist auch der aktuelle FRST... bin mal gespannt - hast Du noch Reste von dem &%$Search Protect gesehen? ...ich hatte mal angefangen, mich mit den ganzen Innereien von 1 und 0 auseinanderzusetzen, aber dann hat die Firma, in der ich damals mit den ganzen Programmierern arbeitete, Pleite gemacht und mir das ganz alleine beizubringen, war mir zu heftig...


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-12-2013
Ran by moi (administrator) on COMPI on 05-12-2013 22:05:22
Running from C:\Users\moi\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
( ) C:\Windows\System32\lxczcoms.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Entriq, Inc.) C:\Program Files (x86)\maxdome\DCBin\DCService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
() C:\Program Files (x86)\XSManager\WTGService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1020576 2012-02-23] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-03-13] (Synaptics Incorporated)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
MountPoints2: D - D:\autorun.exe
MountPoints2: {2963e65d-f9e7-11e1-a2b5-30f9edba7c28} - D:\AutoRun.exe
MountPoints2: {f40ac8e7-f9e5-11e1-9d0f-30f9edba7c28} - D:\QsSetup.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [ ] ()
BootExecute: autocheck autochk * sdnclean64.exePCloudBroom64.exe \systemroot\system32\BroomData.bit

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {C97F5673-207A-4F73-AC75-77778834E3C2} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {8dcb7100-df86-4384-8842-8fa844297b3f} -  No File
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.214

FireFox:
========
FF ProfilePath: C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067
FF SearchEngineOrder.1: Google
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: 2c0ce700-f746-11e1-a21f-0800200c9a66 - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\2c0ce700-f746-11e1-a21f-0800200c9a66@jetpack.xpi
FF Extension: elemhidehelper - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: firefox - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\firefox@ghostery.com.xpi
FF Extension: info - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\info@skymeissner.com.xpi
FF Extension: testpilot - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: defaults - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{95ab36d4-fb6f-47b0-8b8d-e5f3bd547953}.xpi
FF Extension: Adblock Plus - C:\Users\moi\AppData\Roaming\Mozilla\Firefox\Profiles\pmutkjzz.default-1355603724067\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 lxcz_device; C:\Windows\SysWow64\lxczcoms.exe [537520 2007-04-19] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Prosieben; C:\Program Files (x86)\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [327392 2012-04-25] ()
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros)
S2 Util LinkSwift; "C:\Program Files (x86)\LinkSwift\bin\utilLinkSwift.exe" [x]

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-30] (AVAST Software)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-02-23] (Atheros)
S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [126080 2012-09-08] (QUALCOMM Incorporated)
S3 gtstusbser_64; C:\Windows\System32\DRIVERS\gtstusbser_64.sys [118016 2008-11-18] (Option N.V.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Huawei; system32\DRIVERS\ewdcsc.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-05 22:02 - 2013-12-05 22:03 - 01925140 _____ (Farbar) C:\Users\moi\Downloads\FRST64.exe
2013-12-05 21:51 - 2013-12-05 21:51 - 00891184 _____ C:\Users\moi\Downloads\SecurityCheck.exe
2013-12-04 18:46 - 2013-12-04 18:49 - 121560958 _____ C:\Users\moi\Downloads\Mike_und_Molly_13.12.03_22-15_pro7_25_TVOON_DE.mpg.mp4
2013-12-04 17:01 - 2013-12-04 17:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-04 16:28 - 2013-12-04 16:28 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-04 16:27 - 2013-12-04 16:27 - 02347384 _____ (ESET) C:\Users\moi\Downloads\esetsmartinstaller_enu.exe
2013-12-02 22:50 - 2013-12-02 22:50 - 00001314 _____ C:\Users\moi\JRT.txt
2013-12-02 22:43 - 2013-12-02 22:43 - 01110034 _____ C:\Users\moi\Downloads\adwcleaner.exe
2013-12-02 22:39 - 2013-12-02 22:39 - 00001314 _____ C:\Users\moi\Desktop\JRT.txt
2013-12-02 22:28 - 2013-12-02 22:28 - 00000000 ____D C:\Windows\ERUNT
2013-12-02 22:27 - 2013-12-02 22:27 - 01034531 _____ (Thisisu) C:\Users\moi\Downloads\JRT.exe
2013-12-02 21:27 - 2013-12-02 21:28 - 00278880 _____ C:\Windows\Minidump\120213-37003-01.dmp
2013-12-02 21:24 - 2013-12-02 21:24 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 21:24 - 2013-12-02 21:24 - 00000000 ____D C:\Users\moi\AppData\Roaming\Malwarebytes
2013-12-02 21:23 - 2013-12-02 21:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-02 21:23 - 2013-12-02 21:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 21:23 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-02 21:22 - 2013-12-02 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\moi\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-30 13:42 - 2013-11-30 13:42 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2013-11-30 13:30 - 2013-12-02 22:56 - 00000168 _____ C:\Windows\setupact.log
2013-11-29 20:25 - 2013-11-29 20:26 - 00000230 _____ C:\Users\moi\Downloads\Search.txt
2013-11-28 23:01 - 2013-11-28 22:56 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts.20131128-230145.backup
2013-11-28 19:46 - 2013-11-28 19:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-28 19:46 - 2013-11-28 19:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-28 18:18 - 2013-11-29 20:52 - 00033568 _____ C:\Users\moi\Downloads\Addition.txt
2013-11-28 18:17 - 2013-12-05 22:06 - 00019482 _____ C:\Users\moi\Downloads\FRST.txt
2013-11-28 18:17 - 2013-11-28 18:17 - 00000000 ____D C:\FRST
2013-11-27 21:47 - 2013-12-05 15:41 - 00000000 ____D C:\AdwCleaner
2013-11-25 17:34 - 2013-11-25 18:12 - 00015970 _____ C:\Users\moi\Desktop\NAVTEQ GERMANY GMBH.odt
2013-11-25 17:19 - 2013-11-25 17:19 - 00000000 ____D C:\Users\moi\AppData\Roaming\OpenOffice
2013-11-25 17:16 - 2013-11-25 17:16 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-25 17:15 - 2013-11-25 17:16 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-25 17:13 - 2013-11-25 17:13 - 00000000 ____D C:\Users\moi\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-25 14:27 - 2013-11-25 14:27 - 00000000 ____D C:\Users\moi\AppData\Local\FreeOCR
2013-11-25 14:20 - 2013-11-27 21:23 - 00000000 ____D C:\FreeOCR
2013-11-25 14:20 - 2007-03-10 09:11 - 02680320 _____ (HiComponents) C:\Windows\SysWOW64\ImageEnXLibrary.ocx
2013-11-25 13:15 - 2013-11-25 13:15 - 00278880 _____ C:\Windows\Minidump\112513-42681-01.dmp
2013-11-25 13:12 - 2013-11-25 13:13 - 00278880 _____ C:\Windows\Minidump\112513-44304-01.dmp
2013-11-25 12:54 - 2013-11-25 12:54 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-25 12:54 - 2013-11-25 12:54 - 00000000 ____D C:\Users\moi\AppData\Roaming\AVG2014
2013-11-25 12:53 - 2013-11-25 12:53 - 00000941 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-25 12:52 - 2013-11-25 12:54 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-25 12:52 - 2013-11-25 12:52 - 00000000 ___HD C:\$AVG
2013-11-25 12:51 - 2013-11-25 12:51 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-25 12:50 - 2013-12-05 21:49 - 00000000 ____D C:\ProgramData\MFAData
2013-11-25 12:50 - 2013-11-25 14:10 - 00000000 ____D C:\Users\moi\AppData\Local\Avg2014
2013-11-25 12:50 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\MFAData
2013-11-05 21:55 - 2013-11-05 21:55 - 00150808 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys

==================== One Month Modified Files and Folders =======

2013-12-05 22:06 - 2013-11-28 18:17 - 00019482 _____ C:\Users\moi\Downloads\FRST.txt
2013-12-05 22:03 - 2013-12-05 22:02 - 01925140 _____ (Farbar) C:\Users\moi\Downloads\FRST64.exe
2013-12-05 21:54 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2013-12-05 21:51 - 2013-12-05 21:51 - 00891184 _____ C:\Users\moi\Downloads\SecurityCheck.exe
2013-12-05 21:49 - 2013-11-25 12:50 - 00000000 ____D C:\ProgramData\MFAData
2013-12-05 19:31 - 2012-07-31 16:06 - 01862541 _____ C:\Windows\WindowsUpdate.log
2013-12-05 15:41 - 2013-11-27 21:47 - 00000000 ____D C:\AdwCleaner
2013-12-05 06:24 - 2012-12-15 16:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-04 18:49 - 2013-12-04 18:46 - 121560958 _____ C:\Users\moi\Downloads\Mike_und_Molly_13.12.03_22-15_pro7_25_TVOON_DE.mpg.mp4
2013-12-04 17:01 - 2013-12-04 17:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-04 16:28 - 2013-12-04 16:28 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-04 16:28 - 2012-07-31 17:01 - 00697322 _____ C:\Windows\system32\perfh007.dat
2013-12-04 16:28 - 2012-07-31 17:01 - 00148328 _____ C:\Windows\system32\perfc007.dat
2013-12-04 16:28 - 2009-07-14 06:13 - 01614036 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-04 16:27 - 2013-12-04 16:27 - 02347384 _____ (ESET) C:\Users\moi\Downloads\esetsmartinstaller_enu.exe
2013-12-04 16:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-02 23:04 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-02 23:04 - 2009-07-14 05:45 - 00020992 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-02 22:56 - 2013-11-30 13:30 - 00000168 _____ C:\Windows\setupact.log
2013-12-02 22:56 - 2013-06-08 14:24 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-12-02 22:56 - 2012-12-02 15:03 - 00000322 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-12-02 22:56 - 2010-11-21 04:47 - 00025974 _____ C:\Windows\PFRO.log
2013-12-02 22:56 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-02 22:50 - 2013-12-02 22:50 - 00001314 _____ C:\Users\moi\JRT.txt
2013-12-02 22:50 - 2012-08-09 07:27 - 00000000 ____D C:\Users\moi
2013-12-02 22:43 - 2013-12-02 22:43 - 01110034 _____ C:\Users\moi\Downloads\adwcleaner.exe
2013-12-02 22:39 - 2013-12-02 22:39 - 00001314 _____ C:\Users\moi\Desktop\JRT.txt
2013-12-02 22:28 - 2013-12-02 22:28 - 00000000 ____D C:\Windows\ERUNT
2013-12-02 22:27 - 2013-12-02 22:27 - 01034531 _____ (Thisisu) C:\Users\moi\Downloads\JRT.exe
2013-12-02 21:28 - 2013-12-02 21:27 - 00278880 _____ C:\Windows\Minidump\120213-37003-01.dmp
2013-12-02 21:27 - 2012-08-10 19:18 - 708829439 _____ C:\Windows\MEMORY.DMP
2013-12-02 21:27 - 2012-08-10 19:18 - 00000000 ____D C:\Windows\Minidump
2013-12-02 21:24 - 2013-12-02 21:24 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-02 21:24 - 2013-12-02 21:24 - 00000000 ____D C:\Users\moi\AppData\Roaming\Malwarebytes
2013-12-02 21:24 - 2013-12-02 21:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-02 21:23 - 2013-12-02 21:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-02 21:22 - 2013-12-02 21:22 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\moi\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-30 13:42 - 2013-11-30 13:42 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2013-11-30 13:32 - 2012-08-09 07:31 - 00000000 ____D C:\Users\moi\Documents\Bluetooth Folder
2013-11-30 12:04 - 2012-09-01 20:47 - 00000000 ___RD C:\Users\moi\Desktop\PiXdownload
2013-11-29 20:52 - 2013-11-28 18:18 - 00033568 _____ C:\Users\moi\Downloads\Addition.txt
2013-11-29 20:26 - 2013-11-29 20:25 - 00000230 _____ C:\Users\moi\Downloads\Search.txt
2013-11-28 23:07 - 2012-08-09 10:11 - 00000000 ____D C:\Users\moi\AppData\Local\Mozilla
2013-11-28 22:56 - 2013-11-28 23:01 - 00450639 ____R C:\Windows\system32\Drivers\etc\hosts.20131128-230145.backup
2013-11-28 19:46 - 2013-11-28 19:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-28 19:46 - 2013-11-28 19:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-28 19:46 - 2012-08-09 09:32 - 00000000 ____D C:\Users\moi\AppData\Local\Adobe
2013-11-28 18:17 - 2013-11-28 18:17 - 00000000 ____D C:\FRST
2013-11-27 21:23 - 2013-11-25 14:20 - 00000000 ____D C:\FreeOCR
2013-11-27 21:20 - 2012-12-02 15:03 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-11-27 21:20 - 2012-07-31 16:49 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-27 21:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-27 17:50 - 2009-07-14 05:45 - 00321736 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-25 19:02 - 2012-08-20 15:37 - 00000000 ____D C:\Users\moi\AppData\Local\CrashDumps
2013-11-25 18:18 - 2012-10-30 09:54 - 00000000 ____D C:\Users\moi\Desktop\Scan&PDF
2013-11-25 18:17 - 2012-08-09 07:27 - 00072560 _____ C:\Users\moi\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 18:12 - 2013-11-25 17:34 - 00015970 _____ C:\Users\moi\Desktop\NAVTEQ GERMANY GMBH.odt
2013-11-25 17:19 - 2013-11-25 17:19 - 00000000 ____D C:\Users\moi\AppData\Roaming\OpenOffice
2013-11-25 17:16 - 2013-11-25 17:16 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-25 17:16 - 2013-11-25 17:15 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-25 17:13 - 2013-11-25 17:13 - 00000000 ____D C:\Users\moi\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-25 14:27 - 2013-11-25 14:27 - 00000000 ____D C:\Users\moi\AppData\Local\FreeOCR
2013-11-25 14:10 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\Avg2014
2013-11-25 13:15 - 2013-11-25 13:15 - 00278880 _____ C:\Windows\Minidump\112513-42681-01.dmp
2013-11-25 13:13 - 2013-11-25 13:12 - 00278880 _____ C:\Windows\Minidump\112513-44304-01.dmp
2013-11-25 13:12 - 2012-09-01 08:00 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-25 12:54 - 2013-11-25 12:54 - 00003230 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-11-25 12:54 - 2013-11-25 12:54 - 00000000 ____D C:\Users\moi\AppData\Roaming\AVG2014
2013-11-25 12:54 - 2013-11-25 12:52 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-25 12:53 - 2013-11-25 12:53 - 00000941 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-25 12:53 - 2013-02-08 20:02 - 00000000 ____D C:\Users\moi\AppData\Roaming\TuneUp Software
2013-11-25 12:52 - 2013-11-25 12:52 - 00000000 ___HD C:\$AVG
2013-11-25 12:51 - 2013-11-25 12:51 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-25 12:50 - 2013-11-25 12:50 - 00000000 ____D C:\Users\moi\AppData\Local\MFAData
2013-11-05 21:55 - 2013-11-05 21:55 - 00150808 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.4944.dll


Some content of TEMP:
====================
C:\Users\moi\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\moi\AppData\Local\Temp\ResetDevice.exe
C:\Users\moi\AppData\Local\Temp\rtdrvmon.exe
C:\Users\moi\AppData\Local\Temp\tmAss_up.exe
C:\Users\wEwEwE\AppData\Local\Temp\rtdrvmon.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-30 11:29

==================== End Of Log ============================
         

--- --- ---

--- --- ---