Hallo,
ich bräuchte Hilfe beim Entfernen des folgenden Virus:
Win32/Small.CA-Virus

Auf dem Laptop ist Sophos 10.0 installiert (aktuellste Version), hatte aber nichts angezeigt.
Scannen mit Sophos ergab nichts außer, das auf 61 Dateinen nicht zugegriffen werden konnte.
Malwarebytes keine funde
Logfile:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.28.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16736
silke :: BTC9KF [Administrator]

28.11.2013 12:09:42
mbam-log-2013-11-28 (12-09-42).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 487734
Laufzeit: 3 Stunde(n), 43 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

anschließend habe ich alle Laufwerksemulationen abgeschalten mit Defogger
--> kein Fehler

Systemscan mit FRST ergab folgende Logfiles:

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-11-2013 01
Ran by silke (administrator) on BTC9KF on 28-11-2013 16:53:17
Running from C:\Users\silke\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Novell, Inc.) C:\Windows\System32\iprntsrv.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
(Fujitsu Technology Solutions) C:\Program Files\Fujitsu\DeskViewBasic\DeskViewBasicService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Inventec Corp.) C:\Program Files\Fujitsu\Wireless_Utility\Wireless Selector.exe
(Inventec Corp.) C:\Program Files\Fujitsu\Wireless_Utility\Camera Hotkey.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(Sophos Limited) C:\Program Files\Sophos\AutoUpdate\ALMon.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Novell, Inc.) C:\Windows\System32\iprntctl.exe
(Novell, Inc.) C:\Windows\System32\iprntlgn.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Valve Corporation) D:\private\steam\Steam.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1545512 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [DeskViewBasic] - C:\Program Files\Fujitsu\DeskViewBasic\DeskViewBasic.exe [182784 2009-08-19] (Fujitsu Technology Solutions)
HKLM\...\Run: [Wireless_Selector] - C:\Program Files\Fujitsu\Wireless_Utility\Wireless Selector.exe [327680 2009-05-14] (Inventec Corp.)
HKLM\...\Run: [Camera Hotkey] - C:\Program Files\Fujitsu\Wireless_Utility\Camera Hotkey.exe [311296 2010-09-14] (Inventec Corp.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7514656 2009-05-22] (Realtek Semiconductor)
HKLM\...\Run: [FreePDF Assistant] - C:\Program Files\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)
HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [74752 2010-07-12] (Nullsoft, Inc.)
HKLM\...\Run: [Sophos AutoUpdate Monitor] - C:\Program Files\Sophos\AutoUpdate\ALMon.exe [900160 2012-08-08] (Sophos Limited)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM\...\Run: [iPrint Tray] - C:\Windows\System32\iprntctl.exe [67864 2013-04-22] (Novell, Inc.)
HKLM\...\Run: [iPrint Event Monitor] - C:\Windows\System32\iprntlgn.exe [71960 2013-04-22] (Novell, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [Steam] - D:\private\steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Rainlendar2] - C:\Program Files\Rainlendar2\Rainlendar2.exe [2433024 2011-08-12] ()
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\marika\...\Policies\system: [LogonHoursAction] 2
HKU\marika\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [ 2012-10-29] (Sophos Limited)
Lsa: [Notification Packages] scecli iPrntWinCredMan

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ts.fujitsu.com/index2
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ts.fujitsu.com/index2
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {41A5FCFC-D42B-4C8A-BA67-EE141AC6313D} URL = 
SearchScopes: HKCU - {41A5FCFC-D42B-4C8A-BA67-EE141AC6313D} URL = 
SearchScopes: HKCU - {CF2A90FE-8E0C-402F-8863-4C0D7648AC45} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=05A8DBA1-D7F9-48E8-8053-37E5A0D3BCBD&apn_sauid=25AA9133-E2C6-4E4E-911D-CB8DFECD3125
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Winsock: Catalog9 20 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [87616] (Sophos Limited)
Tcpip\..\Interfaces\{2DE3370A-FD4D-4D74-ACC0-798FC15F3C19}: [NameServer]132.180.17.1,132.180.17.129

FireFox:
========
FF ProfilePath: C:\Users\silke\AppData\Roaming\Mozilla\Firefox\Profiles\17oryj3d.default
FF SearchEngineOrder.1: Ask.com
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @novell.com/iPrint - C:\Windows\system32 ()
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\silke\AppData\Roaming\Mozilla\Firefox\Profiles\17oryj3d.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Citavi Picker - C:\Program Files\Mozilla Firefox\extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 DeskViewBasicService; C:\Program Files\Fujitsu\DeskViewBasic\DeskViewBasicService.exe [34816 2009-08-19] (Fujitsu Technology Solutions)
R2 iprntsrv; C:\Windows\system32\iprntsrv.exe [57344 2013-04-22] (Novell, Inc.)
R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [216640 2012-12-04] (Sophos Limited)
R2 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [139840 2012-07-26] (Sophos Limited)
R2 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [232512 2012-08-08] (Sophos Limited)
R2 Sophos Web Control Service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [357400 2012-07-26] (Sophos Limited)
R2 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2869824 2012-12-04] (Sophos Limited)
S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1459264 2012-12-04] (Sophos Limited)
S3 TestHandler; C:\Program Files\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\HaDTMan.exe [384792 2010-09-24] (Fujitsu Technology Solutions)

==================== Drivers (Whitelisted) ====================

R3 FSCSLII; C:\Windows\System32\DRIVERS\FSCSLII.sys [16384 2009-05-18] (Fujitsu)
R1 nipplpt2; C:\Windows\system32\drivers\nipplpt.sys [41016 2013-04-22] ()
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [123680 2012-07-26] (Sophos Limited)
S3 sdcfilter; C:\Windows\System32\DRIVERS\sdcfilter.sys [33696 2012-07-26] (Sophos Limited)
R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [31736 2011-05-17] (Sophos Plc)
S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-03-01] (Sophos Plc)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-10-04] (Duplex Secure Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-28 16:53 - 2013-11-28 16:54 - 00011693 _____ C:\Users\silke\Desktop\FRST.txt
2013-11-28 16:53 - 2013-11-28 16:53 - 00000000 ____D C:\FRST
2013-11-28 16:35 - 2013-11-28 16:36 - 00000303 _____ C:\Users\silke\Desktop\forum.txt
2013-11-28 15:08 - 2013-11-28 15:09 - 01091827 _____ (Farbar) C:\Users\silke\Desktop\FRST.exe
2013-11-28 14:57 - 2013-11-28 14:58 - 00000702 _____ C:\Users\silke\Desktop\defogger_disable.log
2013-11-28 14:57 - 2013-11-28 14:58 - 00000176 _____ C:\Users\silke\defogger_reenable
2013-11-28 14:56 - 2013-11-28 14:57 - 00050477 _____ C:\Users\silke\Desktop\Defogger.exe
2013-11-27 15:09 - 2013-11-27 15:09 - 05788694 _____ C:\Users\silke\Desktop\Graph paper.bmp
2013-11-20 09:19 - 2013-11-20 09:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-19 18:58 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-19 18:58 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-19 18:58 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-19 18:58 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-19 18:58 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-19 18:58 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 09:13 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 09:13 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 09:13 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 09:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 09:13 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 09:13 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 09:13 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 09:13 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 09:13 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 09:13 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 09:13 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 09:13 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 09:13 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 09:13 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 09:13 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 09:13 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 09:13 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 09:13 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-11-28 16:54 - 2013-11-28 16:53 - 00011693 _____ C:\Users\silke\Desktop\FRST.txt
2013-11-28 16:53 - 2013-11-28 16:53 - 00000000 ____D C:\FRST
2013-11-28 16:49 - 2012-01-11 14:08 - 00000000 ____D C:\Users\silke\.rainlendar2
2013-11-28 16:49 - 2010-09-15 14:55 - 00000000 ____D C:\Users\silke\AppData\Roaming\Skype
2013-11-28 16:45 - 2009-07-14 05:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-28 16:45 - 2009-07-14 05:34 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-28 16:41 - 2010-09-14 18:05 - 01787817 _____ C:\Windows\WindowsUpdate.log
2013-11-28 16:38 - 2012-12-21 12:39 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-11-28 16:38 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-28 16:37 - 2012-05-05 11:04 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-28 16:37 - 2010-09-20 08:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-28 16:37 - 2010-09-14 18:02 - 00020114 _____ C:\Windows\PFRO.log
2013-11-28 16:37 - 2009-07-14 05:39 - 00086450 _____ C:\Windows\setupact.log
2013-11-28 16:36 - 2013-11-28 16:35 - 00000303 _____ C:\Users\silke\Desktop\forum.txt
2013-11-28 16:35 - 2010-11-08 14:38 - 00000000 ____D C:\Users\silke\Documents\Citavi
2013-11-28 16:31 - 2012-04-10 07:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-28 15:09 - 2013-11-28 15:08 - 01091827 _____ (Farbar) C:\Users\silke\Desktop\FRST.exe
2013-11-28 14:58 - 2013-11-28 14:57 - 00000702 _____ C:\Users\silke\Desktop\defogger_disable.log
2013-11-28 14:58 - 2013-11-28 14:57 - 00000176 _____ C:\Users\silke\defogger_reenable
2013-11-28 14:57 - 2013-11-28 14:56 - 00050477 _____ C:\Users\silke\Desktop\Defogger.exe
2013-11-28 14:57 - 2010-09-14 10:21 - 00000000 ____D C:\Users\silke
2013-11-28 12:07 - 2012-09-25 12:13 - 00001069 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-28 12:07 - 2011-08-25 10:01 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-28 10:17 - 2009-08-21 07:35 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-28 10:16 - 2010-09-15 14:55 - 00000000 ___RD C:\Program Files\Skype
2013-11-28 10:16 - 2010-09-15 14:55 - 00000000 ____D C:\ProgramData\Skype
2013-11-28 10:15 - 2013-10-15 09:42 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-11-28 10:15 - 2011-01-04 11:03 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-11-28 10:09 - 2013-04-11 14:04 - 00000000 ____D C:\NDPS
2013-11-27 20:27 - 2010-10-11 16:07 - 00005100 _____ C:\fpRedmon.log
2013-11-27 20:27 - 2010-10-11 16:07 - 00000000 ____D C:\Users\silke\AppData\Local\FreePDF_XP
2013-11-27 20:21 - 2013-09-18 14:03 - 06788608 _____ C:\Users\silke\Desktop\kruemel20130918.xls
2013-11-27 15:09 - 2013-11-27 15:09 - 05788694 _____ C:\Users\silke\Desktop\Graph paper.bmp
2013-11-26 23:18 - 2012-11-15 12:27 - 00000000 ____D C:\Users\silke\AppData\Local\gtk-2.0
2013-11-22 11:15 - 2013-08-13 14:43 - 00000000 _____ C:\Windows\system32\vireng.log
2013-11-20 10:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-11-20 09:52 - 2010-09-14 10:21 - 00000000 ____D C:\Users\silke\AppData\Local\Adobe
2013-11-20 09:36 - 2012-04-10 07:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-20 09:36 - 2011-05-19 08:23 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-20 09:19 - 2013-11-20 09:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-20 08:57 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-19 19:03 - 2009-08-21 07:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-19 18:58 - 2013-08-10 17:10 - 00000000 ____D C:\Windows\system32\MRT
2013-11-19 18:55 - 2010-09-20 17:25 - 80340640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-19 15:38 - 2010-10-28 13:30 - 00007603 _____ C:\Users\silke\AppData\Local\Resmon.ResmonCfg
2013-11-15 09:53 - 2010-09-16 09:08 - 00000000 ____D C:\Users\silke\AppData\Roaming\Winamp
2013-11-11 05:50 - 2010-09-15 11:03 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\silke\AppData\Local\Temp\ApnStub.exe
C:\Users\silke\AppData\Local\Temp\ezGameXN.dll
C:\Users\silke\AppData\Local\Temp\GameXNGO.exe
C:\Users\silke\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\silke\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\silke\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\silke\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\silke\AppData\Local\Temp\PDSetup2e40.exe
C:\Users\silke\AppData\Local\Temp\Refresh.exe
C:\Users\silke\AppData\Local\Temp\SkypeSetup.exe
C:\Users\silke\AppData\Local\Temp\SystemDiagnostics.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 10:21

==================== End Of Log ============================
         

Additional

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-11-2013 01
Ran by silke at 2013-11-28 16:56:15
Running from C:\Users\silke\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Sophos Anti-Virus (Enabled - Up to date) {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Sophos Anti-Virus (Enabled - Up to date) {DE9A3984-B0E2-7A61-FD5D-409005EB0337}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958)
2007 Microsoft Office system (Version: 12.0.6612.1000)
AAVUpdateManager (Version: 18.00.0000)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.152)
Adobe Reader 9.5.2 - Deutsch (Version: 9.5.2)
Anno 1404: Venice
Black Mirror 1.2
Citavi 2.5 (Version: 2.5.2.0)
Corel Graphics - Windows Shell Extension (Version: 15.0.0.487)
Corel Graphics - Windows Shell Extension (Version: 15.0.487)
CorelDRAW Graphics Suite X5 - BR (Version: 15.0)
CorelDRAW Graphics Suite X5 - Capture (Version: 15.0)
CorelDRAW Graphics Suite X5 - Common (Version: 15.0)
CorelDRAW Graphics Suite X5 - Connect (Version: 15.0)
CorelDRAW Graphics Suite X5 - Custom Data (Version: 15.0)
CorelDRAW Graphics Suite X5 - DE (Version: 15.0)
CorelDRAW Graphics Suite X5 - Draw (Version: 15.0)
CorelDRAW Graphics Suite X5 - EN (Version: 15.0)
CorelDRAW Graphics Suite X5 - ES (Version: 15.0)
CorelDRAW Graphics Suite X5 - Extra Content
CorelDRAW Graphics Suite X5 - Extra Content (Version: 15.0)
CorelDRAW Graphics Suite X5 - Filters (Version: 15.0)
CorelDRAW Graphics Suite X5 - FontNav (Version: 15.0)
CorelDRAW Graphics Suite X5 - FR (Version: 15.0)
CorelDRAW Graphics Suite X5 - IPM (Version: 15.0)
CorelDRAW Graphics Suite X5 - IT (Version: 15.0)
CorelDRAW Graphics Suite X5 - NL (Version: 15.0)
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (Version: 15.0)
CorelDRAW Graphics Suite X5 - Photozoom Plugin (Version: 15.0)
CorelDRAW Graphics Suite X5 - Redist (Version: 15.0)
CorelDRAW Graphics Suite X5 - Setup Files (Version: 15.0)
CorelDRAW Graphics Suite X5 - VBA (Version: 15.0)
CorelDRAW Graphics Suite X5 - VideoBrowser (Version: 15.0)
CorelDRAW Graphics Suite X5 - VSTA (Version: 15.0)
CorelDRAW Graphics Suite X5 - WT (Version: 15.0)
CorelDRAW Graphics Suite X5 (Version: 15.0)
CorelDRAW(R) Graphics Suite X5 (Version: 15.0.0.486)
FreePDF (Remove only)
Ghostscript GPL 8.64 (Msi Setup) (Version: 8.64)
GPL Ghostscript 8.71
GraFit 5 (Workstation) (Version: 5.0)
Harveys Neue Augen (Version: 1.0)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (Version: 1)
Jalview
Java 7 Update 40 (Version: 7.0.400)
Java Auto Updater (Version: 2.1.9.8)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft PhotoDraw 2000 V2 (Version: 2.00.00.1429)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (Version: 9.0.30729)
Microsoft XNA Framework Redistributable 3.1 (Version: 3.1.10527.0)
Mozilla Firefox 25.0.1 (x86 de) (Version: 25.0.1)
Mozilla Maintenance Service (Version: 25.0.1)
Mozilla Thunderbird 24.1.1 (x86 de) (Version: 24.1.1)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Novell iPrint Client v05.90.00
NVIDIA 3D Vision Treiber 296.10 (Version: 296.10)
NVIDIA Drivers (Version: 1.4)
NVIDIA Grafiktreiber 296.10 (Version: 296.10)
NVIDIA Install Application (Version: 2.1002.62.312)
NVIDIA PhysX (Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.9610)
NVIDIA Systemsteuerung 296.10 (Version: 296.10)
NVIDIA Update 1.7.11 (Version: 1.7.11)
NVIDIA Update Components (Version: 1.7.11)
Overlord II
PDF-XChange Viewer (Version: 2.5.201.0)
Portal 2
PVSonyDll (Version: 1.00.0001)
Python 2.7 pymol-1.5.0.3
Python 2.7.3 (Version: 2.7.3150)
Rainlendar2 (remove only)
Realtek High Definition Audio Driver (Version: 6.0.1.5859)
RedMon - Redirection Port Monitor
RockMaker (Version: 2.5.6.2)
Secure Download Manager (Version: 3.1.01)
Sid Meier's Civilization V
Skype™ 6.11 (Version: 6.11.102)
Sophos Anti-Virus (Version: 10.0.11)
Sophos AutoUpdate (Version: 2.7.4.317)
StarCraft II (Version: 1.4.3.21029)
Steam (Version: 1.0.0.0)
Steuer-Spar-Erklärung 2012 (Version: 17.02)
STRAP- Multiple Protein Alignments
Synaptics Pointing Device Driver (Version: 13.2.6.1)
SystemDiagnostics (Version: 3.02.0010)
TrackMania Nations Forever
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VideoLAN VLC media player 0.8.6e (Version: 0.8.6e)
Visual Basic for Applications (R) Core - English (Version: 6.4.99.69)
Visual Basic for Applications (R) Core - German (Version: 6.4.99.69)
Visual Basic for Applications (R) Core (Version: 6.4.99.69)
Winamp (Version: 5.581 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
Wireless_Utility (Version: 2.05.1005)
Xming 6.9.0.31 (Version: 6.9.0.31)
Xming-fonts 7.5.0.25 (Version: 7.5.0.25)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {3CF1186C-80F9-4D0A-B1F2-B52E075288D5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-20] (Adobe Systems Incorporated)
Task: {85A20CD5-34A1-49FA-84DD-15A944AE409B} - System32\Tasks\{C14FD3C3-9550-4E80-B773-6DC529EED315} => C:\Program Files\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {C8141A4C-6B41-4F46-9392-16E33919009D} - System32\Tasks\{09EC25C6-C21E-454C-B0CE-10B56D81A7DA} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112.259/de/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {E231162C-2748-4D36-AA11-DED51930D950} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2010-05-23 19:20 - 2010-05-23 19:20 - 00126976 _____ () C:\Program Files\Rainlendar2\lua51.dll
2011-08-12 06:45 - 2011-08-12 06:45 - 00198144 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2010-05-23 19:20 - 2010-05-23 19:20 - 00012288 _____ () C:\Program Files\Rainlendar2\lfs.dll
2013-10-15 09:42 - 2013-11-28 10:15 - 03008624 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll
2013-10-15 09:42 - 2013-11-28 10:15 - 00158832 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll
2013-10-15 09:42 - 2013-11-28 10:15 - 00023152 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-11-20 09:19 - 2013-11-20 09:19 - 03363952 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2012-02-29 12:26 - 2012-02-29 12:26 - 00360768 _____ () C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2013-03-12 17:10 - 2013-10-24 18:45 - 00691200 _____ () D:\private\steam\SDL2.dll
2011-07-14 08:58 - 2013-10-30 20:25 - 01123240 _____ () D:\private\steam\bin\chromehtml.DLL
2011-01-04 11:03 - 2013-10-23 21:07 - 20625832 _____ () D:\private\steam\bin\libcef.dll
2012-03-15 09:30 - 2013-06-15 00:49 - 01100800 _____ () D:\private\steam\bin\avcodec-53.dll
2012-03-15 09:30 - 2013-06-15 00:49 - 00124416 _____ () D:\private\steam\bin\avutil-51.dll
2012-03-15 09:30 - 2013-06-15 00:49 - 00192000 _____ () D:\private\steam\bin\avformat-53.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/28/2013 11:27:02 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x17dc
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 11:25:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x1014
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 11:25:40 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x1154
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 11:25:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x11e4
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 11:25:15 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x660
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 11:25:07 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PyMOL.exe, Version: 0.0.0.0, Zeitstempel: 0x50332682
Name des fehlerhaften Moduls: _cmd.pyd, Version: 0.0.0.0, Zeitstempel: 0x5033270c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00092b0b
ID des fehlerhaften Prozesses: 0x648
Startzeit der fehlerhaften Anwendung: 0xPyMOL.exe0
Pfad der fehlerhaften Anwendung: PyMOL.exe1
Pfad des fehlerhaften Moduls: PyMOL.exe2
Berichtskennung: PyMOL.exe3

Error: (11/28/2013 10:09:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: services.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bbf1b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002d6c9
ID des fehlerhaften Prozesses: 0x240
Startzeit der fehlerhaften Anwendung: 0xservices.exe0
Pfad der fehlerhaften Anwendung: services.exe1
Pfad des fehlerhaften Moduls: services.exe2
Berichtskennung: services.exe3

Error: (11/27/2013 06:42:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CORELDRW.EXE, Version: 15.0.0.486, Zeitstempel: 0x4b5e6f59
Name des fehlerhaften Moduls: CrlCUI.dll, Version: 15.0.0.486, Zeitstempel: 0x4b5ea046
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000079b4
ID des fehlerhaften Prozesses: 0x173c
Startzeit der fehlerhaften Anwendung: 0xCORELDRW.EXE0
Pfad der fehlerhaften Anwendung: CORELDRW.EXE1
Pfad des fehlerhaften Moduls: CORELDRW.EXE2
Berichtskennung: CORELDRW.EXE3

Error: (11/27/2013 06:18:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: GraFit32.exe, Version: 5.0.0.45, Zeitstempel: 0x3c67a7cb
Name des fehlerhaften Moduls: GraFit32.exe, Version: 5.0.0.45, Zeitstempel: 0x3c67a7cb
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000af0f3
ID des fehlerhaften Prozesses: 0xb6c
Startzeit der fehlerhaften Anwendung: 0xGraFit32.exe0
Pfad der fehlerhaften Anwendung: GraFit32.exe1
Pfad des fehlerhaften Moduls: GraFit32.exe2
Berichtskennung: GraFit32.exe3

Error: (11/27/2013 02:23:07 PM) (Source: Protexis Licensing Service) (User: )
Description: Failed to Release Mutex 
 Error ID = Returned Error 1


System errors:
=============
Error: (11/28/2013 10:14:29 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/28/2013 10:13:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DeskViewBasicService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/28/2013 10:13:22 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst DeskViewBasicService erreicht.

Error: (11/28/2013 10:12:11 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎11.‎2013 um 10:09:45 unerwartet heruntergefahren.

Error: (11/28/2013 10:09:32 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (11/27/2013 08:21:27 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR5 gefunden.

Error: (11/27/2013 08:21:26 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR5 gefunden.

Error: (11/27/2013 08:21:26 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR5 gefunden.

Error: (11/27/2013 06:44:01 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (11/27/2013 10:57:48 AM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office Sessions:
=========================
Error: (08/23/2012 06:17:05 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/21/2011 09:33:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1483 seconds with 1260 seconds of active time.  This session ended with a crash.

Error: (03/08/2011 03:44:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 225 seconds with 180 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 58%
Total physical RAM: 2558.42 MB
Available physical RAM: 1068.38 MB
Total Pagefile: 5115.13 MB
Available Pagefile: 3244.24 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.78 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:70 GB) (Free:5.39 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:393.75 GB) (Free:335.3 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: D22F9EB7)
Partition 1: (Active) - (Size=2 GB) - (Type=27)
Partition 2: (Not Active) - (Size=70 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=394 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Ich weiß der nächste Schritt wäre wohl GMER, richtig?
Oder eventuell doch anders vorgehen?

Danke schon mal, das sich jemand um mein Problem kümmert

verzweifelte Grüße,
kruemelchn

Hallo,

das ist ein bekannter Fehlalarm, weil sich Sophos und der Windows Defender nicht vertragen.
Deaktiviere den Defender einfach wie folgt.
Das Log sieht sauber aus.

Hinweis: Windows Defender deaktivieren

Da du einen anderen Virenscanner benutzt, solltest du den windowseigenen Scanner ausschalten:

• Gehe in die Systemsteuerung und klicke auf Windows Defender.
• Klicke Extras > Optionen.
• Administratoroptionen > Haken entfernen bei Windows Defender verwenden.
• Bestätige und schliesse alle offenen Fenster.

Danke,
das war wirklich alles?
Warum komm dann dieser Fehler so plötzlich? Ich hab nichts an meiner Antivirensoftware geändert...

Außerdem kam noch Fehler beim deaktiviere von Windows defender : 0x80004004

Viele Grüße,
kruemelchn