Ja die Bilder muss ich mal neu machen. Mach einfach alle Steps

Windows wurde repariert . Die Benutzerkontensteuerung funktioniert wieder Werde jetzt noch die Scans laufen lassen. Danke für deine Hilfe. (Keine Sorge, ich poste die Logs noch )

Alles fertig

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6761f5e9b42e2346bcd24a251803f691
# engine=16505
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-03 05:56:58
# local_time=2014-01-03 06:56:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3591 16777213 83 88 375764 151368403 0 0
# compatibility_mode=5893 16776574 100 94 15151194 140401668 0 0
# scanned=265184
# found=2
# cleaned=0
# scan_time=6207
sh=EF50E9B48CA05EC1423DD9C858738A2971BFB8A8 ft=1 fh=5f4591e8147a9bfd vn="Win32/StartPage.OIE trojan" ac=I fn="C:\Users\Familie Armlich\Downloads\vlc-1.1.11-win32.exe"
sh=8598FBAAF61C0A8C4340DD764F653E815958795F ft=1 fh=e5629a3ecf4d82bc vn="Win32/StartPage.OPH trojan" ac=I fn="C:\Users\Lucas\Downloads\vlc-2.0.2-win64.exe"
         

Security Check:

 Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
Norton Internet Security CBE   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Secunia PSI (3.0.0.4001)   
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2013   
 TuneUp Utilities Language Pack (de-DE) 
 JavaFX 2.1.1    
 Java(TM) 6 Update 45  
 Java 7 Update 21  
 Java version out of Date! 
 Adobe Flash Player 11.9.900.170  
 Adobe Reader 10.1.4 Adobe Reader out of Date!  
 Mozilla Thunderbird (17.0.7) 
 Google Chrome 31.0.1650.57  
 Google Chrome 31.0.1650.63  
 Google Chrome Plugins...  
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST.txt



FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2014
Ran by Lucas (administrator) on FAMILIEARMLICH on 03-01-2014 19:27:46
Running from C:\Users\Lucas\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\nis.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\nis.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectify.exe
(Connectify) C:\Program Files (x86)\Connectify\DispatchUI.exe
(Spotify Ltd) C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [Connectify Hotspot] - C:\Program Files (x86)\Connectify\Connectify.exe [3727648 2013-11-05] (Connectify)
HKLM\...\Run: [Connectify Dispatch] - C:\Program Files (x86)\Connectify\DispatchUI.exe [1656608 2013-11-05] (Connectify)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Spotify] - C:\Users\Lucas\AppData\Roaming\Spotify\spotify.exe [5955072 2013-11-27] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-27] (Spotify Ltd)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-22] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-22] ()
HKU\Familie Armlich\...\Run: [AshSnap] - C:\Program Files (x86)\Medion MediaPack 2\Ashampoo Snap\ashsnap.exe [1721344 2011-04-14] (ashampoo GmbH & Co. KG)
HKU\Familie Armlich\...\Policies\system: [LogonHoursAction] 2
HKU\Familie Armlich\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Katharina\...\Policies\system: [LogonHoursAction] 2
HKU\Katharina\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\MK\...\Run: [AshSnap] - C:\Program Files (x86)\Medion MediaPack 2\Ashampoo Snap\ashsnap.exe [1721344 2011-04-14] (ashampoo GmbH & Co. KG)
HKU\MK\...\Policies\system: [LogonHoursAction] 2
HKU\MK\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\schulfrei\...\Policies\system: [LogonHoursAction] 2
HKU\schulfrei\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Familie Armlich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Lucas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
URLSearchHook: HKCU - (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {9A734AE7-E0F0-459A-B5C4-4FA958BD987D} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  No File
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{057D22CF-3FC1-4D8B-BB5E-3996D4A969D9}: [NameServer]79.141.167.14,79.141.160.23
Tcpip\..\Interfaces\{4CCD9051-4C8F-4EFE-A913-AB010AA58E35}: [NameServer]79.141.167.14,79.141.160.23
Tcpip\..\Interfaces\{A510B75A-F220-493C-A39F-8442B5586AFE}: [NameServer]0.0.0.0
Tcpip\..\Interfaces\{BBA8F4CA-E1DA-4FDF-92E6-961F2BEE8634}: [NameServer]79.141.167.14,79.141.160.23
Tcpip\..\Interfaces\{E5AD613D-0EEE-4010-8733-9C7934BBC372}: [NameServer]79.141.167.14,79.141.160.23

FireFox:
========
FF ProfilePath: C:\Users\Lucas\AppData\Roaming\Mozilla\Firefox\Profiles\0bt5obqp.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=1.6.0_45 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lucas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Lucas\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Lucas\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Aurora\firefox.exe

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
S4 CGVPNCliService; C:\Program Files\CyberGhost VPN\Service.exe [26600 2013-10-08] (CyberGhost S.R.L)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-11-05] (Connectify)
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-06-06] (Freemake)
S4 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-08-26] (Ellora Assets Corp.)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S4 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [559552 2013-08-08] (RealNetworks, Inc.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] ()
S4 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
S4 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2409272 2013-12-11] (TuneUp Software)
S4 Virtual Router; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (hxxp://pietschsoft.com))

==================== Drivers (Whitelisted) ====================

S3 AQFileRestore; C:\Windows\System32\DRIVERS\AQFileRestore.sys [21040 2012-01-13] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\BASHDefs\20131114.001\BHDrvx64.sys [1524824 2013-11-02] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [35352 2013-12-18] (Connectify)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
U3 EraserUtilDrv11312; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11312.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\IPSDefs\20140102.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\VirusDefs\20140103.001\ENG64.SYS [126040 2013-11-06] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security CBE\NortonData\21.0.0.100\Definitions\VirusDefs\20140103.001\EX64.SYS [2099288 2013-11-06] (Symantec Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 SQTECH900A; C:\Windows\System32\Drivers\CaptFXV2.sys [143040 2010-01-28] (Service & Quality Technology.)
S3 SQUSBDng; C:\Windows\System32\drivers\FXV2AUD.sys [46400 2010-03-05] (Service & Quality Technology.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-06] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2013-03-26] (TuneUp Software)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [14544 2012-08-01] (OpenLibSys.org)
S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2012-11-20] (Wondershare)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-03 19:27 - 2014-01-03 19:27 - 00019708 _____ C:\Users\Lucas\Desktop\FRST.txt
2014-01-03 19:27 - 2014-01-03 19:27 - 00000000 ____D C:\Users\Lucas\Desktop\FRST-OlderVersion
2014-01-03 19:26 - 2014-01-03 19:26 - 00001180 _____ C:\Users\Lucas\Desktop\checkup.txt
2014-01-03 17:10 - 2014-01-03 17:10 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-03 16:34 - 2014-01-03 16:34 - 00003288 ____N C:\bootsqm.dat
2014-01-02 17:59 - 2014-01-02 18:17 - 257427741 _____ C:\Users\Lucas\Desktop\gapps-full-4.4-20131126-signed.zip
2014-01-02 16:59 - 2014-01-02 17:08 - 199611867 _____ C:\Users\Lucas\Desktop\cm11.0_golden.maclaw.20140101.zip
2014-01-02 16:53 - 2014-01-02 16:53 - 00000000 ____D C:\Users\Lucas\AppData\Local\Omar_Bizreh
2014-01-02 16:52 - 2014-01-02 16:52 - 00000000 ____D C:\Users\Lucas\AppData\Local\IsolatedStorage
2014-01-02 16:51 - 2014-01-02 16:51 - 00001035 _____ C:\Users\Public\Desktop\Droid Manager.lnk
2014-01-02 16:51 - 2014-01-02 16:51 - 00000000 ____D C:\Users\Lucas\Documents\Droid Manager
2014-01-02 16:51 - 2014-01-02 16:51 - 00000000 ____D C:\Program Files (x86)\Droid Manager
2014-01-02 15:30 - 2014-01-02 15:30 - 00891200 _____ C:\Users\Lucas\Desktop\SecurityCheck.exe
2014-01-01 13:32 - 2014-01-01 16:06 - 00000000 ____D C:\Users\Lucas\Desktop\Tweaking.com - Windows Repair
2013-12-31 15:09 - 2013-12-31 15:09 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 15:07 - 2013-12-31 15:07 - 01034531 _____ (Thisisu) C:\Users\Lucas\Desktop\JRT.exe
2013-12-31 14:52 - 2013-12-31 15:02 - 00000000 ____D C:\AdwCleaner
2013-12-31 14:52 - 2013-12-31 14:52 - 01233962 _____ C:\Users\Lucas\Desktop\adwcleaner.exe
2013-12-30 11:40 - 2013-12-30 11:40 - 00030981 _____ C:\ComboFix.txt
2013-12-30 11:17 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-30 11:17 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-30 11:17 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-30 11:17 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-30 11:17 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-30 11:17 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-30 11:17 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-30 11:17 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-30 11:12 - 2013-12-30 11:40 - 00000000 ____D C:\Qoobox
2013-12-30 11:11 - 2013-12-30 11:39 - 00000000 ____D C:\Windows\erdnt
2013-12-29 13:12 - 2013-12-30 11:11 - 05159030 ____R (Swearware) C:\Users\Lucas\Desktop\ComboFix.exe
2013-12-28 15:01 - 2013-12-11 00:48 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-28 15:01 - 2013-12-11 00:48 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-28 15:00 - 2013-12-11 00:48 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-28 15:00 - 2013-12-11 00:48 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-26 16:38 - 2014-01-03 19:27 - 01931750 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe
2013-12-26 16:38 - 2014-01-03 19:27 - 00000000 ____D C:\FRST
2013-12-26 13:51 - 2013-12-26 13:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Malwarebytes
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-26 13:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-24 17:21 - 2013-12-24 17:21 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-12-23 21:38 - 2013-01-20 02:18 - 937485728 _____ C:\Users\Lucas\Documents\system.img
2013-12-23 21:38 - 2013-01-18 12:29 - 62148864 _____ C:\Users\Lucas\Documents\cache.img
2013-12-23 21:38 - 2013-01-04 14:08 - 69009964 _____ C:\Users\Lucas\Documents\hidden.img
2013-12-23 21:38 - 2013-01-04 14:08 - 12927884 _____ C:\Users\Lucas\Documents\modem.bin
2013-12-23 21:38 - 2013-01-04 14:08 - 07090432 _____ C:\Users\Lucas\Documents\boot.img
2013-12-23 21:38 - 2013-01-04 14:08 - 00393472 _____ C:\Users\Lucas\Documents\STE_boot2.img
2013-12-23 21:38 - 2013-01-04 14:08 - 00393472 _____ C:\Users\Lucas\Documents\STE_boot1.img
2013-12-23 18:42 - 2013-12-23 18:42 - 00000000 ____D C:\Users\Lucas\.android
2013-12-18 13:40 - 2013-12-18 13:40 - 00000000 ____D C:\ProgramData\Connectify
2013-12-18 13:38 - 2013-12-18 13:38 - 00000358 _____ C:\Users\Public\Desktop\Connectify Hotspot.lnk
2013-12-18 13:36 - 2013-12-18 13:36 - 00035352 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2013-12-18 13:27 - 2014-01-03 18:05 - 00000000 ____D C:\Program Files (x86)\Connectify

==================== One Month Modified Files and Folders =======

2014-01-03 19:28 - 2014-01-03 19:27 - 00019708 _____ C:\Users\Lucas\Desktop\FRST.txt
2014-01-03 19:27 - 2014-01-03 19:27 - 00000000 ____D C:\Users\Lucas\Desktop\FRST-OlderVersion
2014-01-03 19:27 - 2013-12-26 16:38 - 01931750 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe
2014-01-03 19:27 - 2013-12-26 16:38 - 00000000 ____D C:\FRST
2014-01-03 19:26 - 2014-01-03 19:26 - 00001180 _____ C:\Users\Lucas\Desktop\checkup.txt
2014-01-03 18:39 - 2012-05-28 09:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-03 18:05 - 2013-12-18 13:27 - 00000000 ____D C:\Program Files (x86)\Connectify
2014-01-03 17:10 - 2014-01-03 17:10 - 00000000 ____D C:\Program Files (x86)\ESET
2014-01-03 17:06 - 2013-03-16 20:26 - 00000000 ____D C:\ProgramData\Wizard101(DE)
2014-01-03 16:43 - 2013-10-22 12:50 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Spotify
2014-01-03 16:42 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-03 16:42 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-03 16:41 - 2013-07-26 13:55 - 01725465 _____ C:\Windows\WindowsUpdate.log
2014-01-03 16:35 - 2013-11-22 19:23 - 00000560 _____ C:\Windows\setupact.log
2014-01-03 16:35 - 2013-07-20 13:38 - 00000000 ____D C:\ProgramData\VMware
2014-01-03 16:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-03 16:34 - 2014-01-03 16:34 - 00003288 ____N C:\bootsqm.dat
2014-01-03 14:19 - 2013-04-27 13:21 - 00000000 ___RD C:\Users\Lucas\Documents\Wizard101
2014-01-02 18:17 - 2014-01-02 17:59 - 257427741 _____ C:\Users\Lucas\Desktop\gapps-full-4.4-20131126-signed.zip
2014-01-02 17:08 - 2014-01-02 16:59 - 199611867 _____ C:\Users\Lucas\Desktop\cm11.0_golden.maclaw.20140101.zip
2014-01-02 16:56 - 2012-10-17 16:18 - 00000000 ____D C:\Users\Lucas\AppData\Local\CrashDumps
2014-01-02 16:53 - 2014-01-02 16:53 - 00000000 ____D C:\Users\Lucas\AppData\Local\Omar_Bizreh
2014-01-02 16:52 - 2014-01-02 16:52 - 00000000 ____D C:\Users\Lucas\AppData\Local\IsolatedStorage
2014-01-02 16:51 - 2014-01-02 16:51 - 00001035 _____ C:\Users\Public\Desktop\Droid Manager.lnk
2014-01-02 16:51 - 2014-01-02 16:51 - 00000000 ____D C:\Users\Lucas\Documents\Droid Manager
2014-01-02 16:51 - 2014-01-02 16:51 - 00000000 ____D C:\Program Files (x86)\Droid Manager
2014-01-02 15:30 - 2014-01-02 15:30 - 00891200 _____ C:\Users\Lucas\Desktop\SecurityCheck.exe
2014-01-01 16:06 - 2014-01-01 13:32 - 00000000 ____D C:\Users\Lucas\Desktop\Tweaking.com - Windows Repair
2013-12-31 16:23 - 2013-09-03 13:58 - 00000519 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-12-31 15:09 - 2013-12-31 15:09 - 00000000 ____D C:\Windows\ERUNT
2013-12-31 15:07 - 2013-12-31 15:07 - 01034531 _____ (Thisisu) C:\Users\Lucas\Desktop\JRT.exe
2013-12-31 15:02 - 2013-12-31 14:52 - 00000000 ____D C:\AdwCleaner
2013-12-31 15:02 - 2012-02-04 13:07 - 00000000 ____D C:\ProgramData\ICQ
2013-12-31 14:52 - 2013-12-31 14:52 - 01233962 _____ C:\Users\Lucas\Desktop\adwcleaner.exe
2013-12-31 14:40 - 2013-11-22 19:22 - 00074434 _____ C:\Windows\PFRO.log
2013-12-30 11:40 - 2013-12-30 11:40 - 00030981 _____ C:\ComboFix.txt
2013-12-30 11:40 - 2013-12-30 11:12 - 00000000 ____D C:\Qoobox
2013-12-30 11:40 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-30 11:39 - 2013-12-30 11:11 - 00000000 ____D C:\Windows\erdnt
2013-12-30 11:35 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-30 11:34 - 2012-05-27 10:16 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 11:34 - 2012-05-27 10:16 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 11:32 - 2012-05-27 10:16 - 00004134 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-30 11:32 - 2012-05-27 10:16 - 00003882 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-30 11:32 - 2009-07-14 03:34 - 83886080 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-12-30 11:32 - 2009-07-14 03:34 - 21757952 _____ C:\Windows\system32\config\SYSTEM.bak
2013-12-30 11:32 - 2009-07-14 03:34 - 01835008 _____ C:\Windows\system32\config\DEFAULT.bak
2013-12-30 11:32 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2013-12-30 11:32 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2013-12-30 11:30 - 2012-05-10 12:57 - 00000000 ____D C:\Users\Lucas
2013-12-30 11:30 - 2011-12-24 13:42 - 00000000 ____D C:\Users\Familie Armlich
2013-12-30 11:11 - 2013-12-29 13:12 - 05159030 ____R (Swearware) C:\Users\Lucas\Desktop\ComboFix.exe
2013-12-28 15:00 - 2013-11-22 13:49 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2013
2013-12-26 13:51 - 2013-12-26 13:51 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Malwarebytes
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-26 13:51 - 2013-12-26 13:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-24 18:48 - 2013-07-21 20:14 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Free Download Manager
2013-12-24 18:48 - 2012-09-09 09:17 - 00805376 ___SH C:\Users\Lucas\Thumbs.db
2013-12-24 17:21 - 2013-12-24 17:21 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-12-23 18:42 - 2013-12-23 18:42 - 00000000 ____D C:\Users\Lucas\.android
2013-12-18 13:40 - 2013-12-18 13:40 - 00000000 ____D C:\ProgramData\Connectify
2013-12-18 13:38 - 2013-12-18 13:38 - 00000358 _____ C:\Users\Public\Desktop\Connectify Hotspot.lnk
2013-12-18 13:36 - 2013-12-18 13:36 - 00035352 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2013-12-12 08:42 - 2012-05-28 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-12 08:42 - 2012-05-28 09:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-12 08:42 - 2011-08-29 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 16:50 - 2012-09-09 13:37 - 00000000 ____D C:\Users\Lucas\Documents\Youcam
2013-12-11 00:48 - 2013-12-28 15:01 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-11 00:48 - 2013-12-28 15:01 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-11 00:48 - 2013-12-28 15:00 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-11 00:48 - 2013-12-28 15:00 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-11 00:48 - 2013-11-22 13:50 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-06 17:43 - 2013-07-23 11:52 - 00000000 ____D C:\Users\Lucas\AppData\Local\CyberGhost
2013-12-06 17:43 - 2013-07-23 11:49 - 00000000 ____D C:\Program Files\CyberGhost VPN

Files to move or delete:
====================
C:\Users\Familie Armlich\TS3CLA.exe
C:\Users\Familie Armlich\TS3Lib.dll
C:\Users\Lucas\7z920.exe
C:\Users\Lucas\Adobe_Photoshop_Elements_10.exe
C:\Users\Lucas\ccsetup402.exe
C:\Users\Lucas\FastCopy.exe
C:\Users\Lucas\FreemakeAudioConverterSetup.exe
C:\Users\Lucas\FreemakeMusicBoxSetup.exe
C:\Users\Lucas\FreemakeVideoDownloaderSetup (2).exe
C:\Users\Lucas\FreemakeVideoDownloaderSetup.exe
C:\Users\Lucas\KasperskyPURE12.0.2.733de-DE-xchip.exe
C:\Users\Lucas\ocster_1click_backup_1.exe
C:\Users\Lucas\OriginThinSetup.exe
C:\Users\Lucas\setup.exe
C:\Users\Lucas\TS3CAP_767618.exe
C:\Users\Lucas\Tunderbird Installaton.exe
C:\Users\Lucas\worldtool.exe
C:\Users\Lucas\youtube_downloader_hd_setup_2.9.4.exe


Some content of TEMP:
====================
C:\Users\Lucas\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-21 21:06

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Java und Adobe updaten. die 2 Funde von ESET kannste manuell löschen.


Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Okay fertig! Vielen Dank für deine Hilfe!

Gern Geschehen