Hallo zusammen,

erstmal muss ich sagen, das es ein tolles Forum ist, endlich eine Seite wo betroffenen wirklich geholfen wird!

Ich habe seit einigen Tagen das Problem das mein Rechner total träge ist und die Auslastung der CPU´s bei teilweise 100% im Desktopbetrieb ist. Augenscheilich ist dafür der Prozess dllhost.exe COM surrogate verantwortlich, beende ich den Prozess geht die Auslastung auf ca 50%zurück, also ist es nicht der alleinige Übeltäter und ich denke das das Problem etwas tiefer sitzt.

Ich könnte jetzt sagen ich wüsste nicht wie ich mir was eingefangen haben könnte, aber das will keiner hören, das kommt halt wenn man sich vermeintlich kostenlose Software runter läd, dann gibt es halt so nette beigaben ;-(.
Leider werde ich dieses biest nicht mehr los und brauche wohl mal wirklich Hilfe, die tole Startseite awesomehp bin ich mittlerweile los, aber das war wohl auch nicht alles. Ich habe schon mal einen Log-file von FRST gemacht und hoffe ihr seht mehr wie ich und könnt mir helfen mein Problem zu lösen.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Funride (administrator) on FUNRIDE-PC on 29-01-2014 15:53:45
Running from C:\Users\Funride\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files (x86)\BumpTop\BumpTop.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
() C:\Advanced Wheel Mouse\wh_exec.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Program Files (x86)\BumpTop\TexHelper.exe
() C:\Program Files (x86)\BumpTop\TexHelper.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2014-01-18] (AVAST Software)
HKLM-x32\...\Run: [WheelMouse] - C:\Advanced Wheel Mouse\wh_exec.exe [98304 2008-02-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2014-01-18] (AVAST Software)
HKLM-x32\...\RunOnce: [20131224] - C:\Program Files\Alwil Software\Avast5\setup\emupdate\8ed16bed-9781-4ac4-bd81-7fcec44bdb09.exe /check [181136 2014-01-29] (AVAST Software)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-04-23] (Samsung)
HKCU\...\Run: [Google Update] - C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-03-11] (Google Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60082B40A352CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-24]
FF Extension: sslpersonas - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\sslPersonas@tobitobi.de.xpi [2011-07-10]
FF Extension: Speed Dial - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-07-04]
FF Extension: NoScript - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-05-09]
FF Extension: Adblock Plus - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-02-25]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\extensions\lightningnewtab@gmail.com.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Chrome: 
=======
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Mozilla\plugins\npoctoshape.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Users\Funride\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-11]
CHR Extension: (Google-Suche) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-03-11]
CHR Extension: (avast! Online Security) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-07-08]
CHR Extension: (Google Wallet) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-03-11]
CHR HKLM-x32\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-23]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-01-18] (AVAST Software)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-27] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-18] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-18] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-19] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-18] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-07-22] ()
R3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2011-03-29] (Turtle Entertainment GmbH)
R2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [179616 2011-04-14] (<Turtle Entertainment>)
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-07-22] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [503352 2011-07-17] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-03-05] (Scott)
R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [9600 2007-01-26] ()
U3 afr9la7c; C:\Windows\System32\Drivers\afr9la7c.sys [0 ] (NVIDIA Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-29 15:53 - 2014-01-29 15:54 - 00016049 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-29 15:53 - 2014-01-29 15:53 - 00000000 ____D C:\FRST
2014-01-29 15:52 - 2014-01-29 15:53 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:45 - 2014-01-29 15:45 - 00000056 _____ C:\Windows\setupact.log
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:44 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-28 16:16 - 2014-01-28 16:39 - 00000000 ____D C:\AdwCleaner
2014-01-28 16:13 - 2014-01-28 16:14 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 20:01 - 2014-01-24 20:02 - 37587477 _____ C:\Users\Funride\Desktop\OneRepublic-Counting Stars HD Lyrics Native_.mp4
2014-01-24 19:48 - 2014-01-24 19:49 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 12:59 - 2011-08-18 21:13 - 00000000 ____D C:\Users\Funride\Downloads\VAGCom
2014-01-23 17:49 - 2014-01-23 18:24 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:22 - 2014-01-23 17:23 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:21 - 2014-01-28 16:54 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-23 17:20 - 2014-01-28 21:12 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-19 16:07 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-15 15:46 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:46 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:46 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump

==================== One Month Modified Files and Folders =======

2014-01-29 15:54 - 2014-01-29 15:53 - 00016049 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-29 15:53 - 2014-01-29 15:53 - 00000000 ____D C:\FRST
2014-01-29 15:53 - 2014-01-29 15:52 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:52 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-29 15:52 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 15:49 - 2013-03-06 16:14 - 01419883 _____ C:\Windows\WindowsUpdate.log
2014-01-29 15:45 - 2014-01-29 15:45 - 00000056 _____ C:\Windows\setupact.log
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-29 15:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-28 21:43 - 2011-07-11 17:56 - 00007601 _____ C:\Users\Funride\AppData\Local\Resmon.ResmonCfg
2014-01-28 21:28 - 2012-04-01 18:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-28 21:20 - 2012-03-11 18:21 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000UA.job
2014-01-28 21:13 - 2010-08-30 17:01 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-28 21:12 - 2014-01-23 17:20 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-28 20:56 - 2010-09-12 18:58 - 00001943 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-28 20:55 - 2012-03-11 18:22 - 00002372 _____ C:\Users\Funride\Desktop\Google Chrome.lnk
2014-01-28 19:22 - 2012-08-06 15:41 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-28 16:54 - 2014-01-23 17:21 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:39 - 2014-01-28 16:16 - 00000000 ____D C:\AdwCleaner
2014-01-28 16:18 - 2011-01-25 17:36 - 00000000 ____D C:\ProgramData\ICQ
2014-01-28 16:14 - 2014-01-28 16:13 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 16:14 - 2011-10-03 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-25 00:15 - 2010-10-25 13:30 - 00008440 _____ C:\Users\Funride\Desktop\Unbenannt 1.odt
2014-01-24 20:02 - 2014-01-24 20:01 - 37587477 _____ C:\Users\Funride\Desktop\OneRepublic-Counting Stars HD Lyrics Native_.mp4
2014-01-24 20:01 - 2011-02-05 16:32 - 00000000 ____D C:\Users\Funride\dwhelper
2014-01-24 19:49 - 2014-01-24 19:48 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 13:00 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2014-01-24 13:00 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2014-01-24 13:00 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-23 19:07 - 2010-08-30 17:15 - 00000000 ____D C:\Users\Funride\AppData\Roaming\TS3Client
2014-01-23 18:24 - 2014-01-23 17:49 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:23 - 2014-01-23 17:22 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:23 - 2010-08-30 16:48 - 00000000 ___RD C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-23 17:21 - 2010-08-30 16:48 - 00001611 _____ C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-22 16:04 - 2012-04-01 18:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-22 16:04 - 2012-04-01 18:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-22 16:04 - 2011-07-22 16:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-22 16:03 - 2010-08-30 17:40 - 00000000 ____D C:\Users\Funride\AppData\Local\Adobe
2014-01-19 16:07 - 2014-01-18 17:13 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:13 - 2013-07-05 19:15 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-18 17:13 - 2013-07-05 19:15 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-18 17:13 - 2012-04-25 15:36 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-18 17:13 - 2011-02-25 17:08 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-18 17:13 - 2011-01-19 19:22 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-18 17:13 - 2010-08-30 16:52 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-18 17:13 - 2010-08-30 16:52 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-18 17:13 - 2010-08-30 16:51 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-18 17:08 - 2010-08-30 16:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2014-01-16 16:00 - 2009-07-14 05:45 - 00290704 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 18:50 - 2013-08-14 19:22 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 18:48 - 2010-09-01 16:49 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-05 19:09 - 2011-11-06 22:34 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Skype
2014-01-05 18:09 - 2013-11-11 14:17 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2014-01-05 18:09 - 2010-09-01 14:52 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-01 18:11 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Funride\AppData\Local\Temp\htmlayout.dll
C:\Users\Funride\AppData\Local\Temp\Launcher_i284120494.exe
C:\Users\Funride\AppData\Local\Temp\Quarantine.exe
C:\Users\Funride\AppData\Local\Temp\SHSetup.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4263975.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4341679.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413268.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413283.exe
C:\Users\Funride\AppData\Local\Temp\VuuPC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 17:26

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-01-2014 01
Ran by Funride at 2014-01-29 15:54:48
Running from C:\Users\Funride\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Digital Editions 2.0 (x32 Version: 2.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Advanced Wheel Mouse 6.0.0.002 (x32 Version:  - )
AMD Accelerated Video Transcoding (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden
Assassin's Creed (x32 Version: 1.02 - Ubisoft)
Assassin's Creed IV Black Flag (x32 Version:  - Ubisoft)
ATI Catalyst Registration (x32 Version: 3.00.0000 - ATI Technologies Inc.) Hidden
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
BumpTop (x32 Version: 2.1.6211 - Bump Technologies, Inc.)
calibre (x32 Version: 0.9.13 - Kovid Goyal)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 3.07 - Piriform)
Chinese Traditional Fonts Support For Adobe Reader 9 (x32 Version: 9.0.0 - Adobe Systems Incorporated)
Counter-Strike (x32 Version:  - Valve)
Counter-Strike: Condition Zero (x32 Version:  - Valve)
Counter-Strike: Condition Zero Deleted Scenes (x32 Version:  - Ritual)
Counter-Strike: Global Offensive Beta (x32 Version:  - )
Counter-Strike: Source Beta (x32 Version:  - )
Day of Defeat (x32 Version:  - Valve)
Day of Defeat: Source (x32 Version:  - Valve)
Deathmatch Classic (x32 Version:  - Valve)
ESL Wire 1.9.7 (Version:  - Turtle Entertainment GmbH)
Gaming Mouse (x32 Version:  - )
Google Chrome (HKCU Version: 32.0.1700.102 - Google Inc.)
Half-Life 2: Deathmatch (x32 Version:  - Valve)
Half-Life 2: Lost Coast (x32 Version:  - Valve)
Java Auto Updater (x32 Version: 2.0.7.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 20 (x32 Version: 6.0.200 - Sun Microsystems, Inc.)
Java(TM) 6 Update 32 (x32 Version: 6.0.320 - Oracle)
LAN-Explorer (x32 Version: 1.72 - Speed-Soft)
Left 4 Dead 2 (x32 Version:  - Valve)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
OpenOffice.org 3.2 (x32 Version: 3.2.9502 - OpenOffice.org)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
R.U.S.E (x32 Version:  - Ubisoft)
Samsung Kies (x32 Version: 2.5.3.13034_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.3.13034_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0 - SAMSUNG Electronics Co., Ltd.)
Sid Meier's Civilization V (x32 Version:  - Firaxis Games)
Sid Meier's Civilization V SDK (x32 Version:  - Firaxis Games)
Skype Click to Call (x32 Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.3 (x32 Version: 6.3.105 - Skype Technologies S.A.)
Source SDK Base 2006 (x32 Version:  - Valve)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.11.1 - TeamSpeak Systems GmbH)
TeamViewer 6 (x32 Version: 6.0.9895 - TeamViewer GmbH)
The Lord of the Rings FREE Trial  (x32 Version: 1.00.0000 - ATI Technologies Inc.) Hidden
TS3 Overlay (Version: 3.0.3 - Rohrbacher Development)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Uplay (x32 Version: 4.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 2.1.1 (x32 Version: 2.1.1 - VideoLAN)
WinRAR 5.00 beta 8 (64-bit) (Version: 5.00.8 - win.rar GmbH)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {26B8396F-9096-4FCE-84A3-94F73C54C7BA} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {45D7B2ED-9691-4F56-8021-4469928A2261} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-22] (Adobe Systems Incorporated)
Task: {4B66BDDB-7AC3-4325-A418-6B48B49EE349} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe
Task: {71B3E426-25F7-47A7-B991-292C65DE40C6} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {76F44926-5035-4F3C-980D-0EA4A84995D7} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
Task: {9983E39C-7F7E-4E0F-9092-65868B66AE23} - System32\Tasks\{4A50438E-335A-4AEE-8C23-76F100D3C503} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?page=tsProgressBar
Task: {A1362CD0-69F0-455C-AAB9-2EA501D76710} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {D4F4AE16-FFCE-4981-8801-A09987BBC0A9} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {DDBF2956-0C24-465D-91EF-BD1897367B8F} - \GoforFilesUpdate No Task File
Task: {E034DDF7-74DC-4BA4-ABBF-FD3B5DEAC4EE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000UA => C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-11] (Google Inc.)
Task: {EEF2246F-4133-4C9A-BA5A-55225A421F2A} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2014-01-18] (AVAST Software)
Task: {FC6541E1-B8B6-43E2-ACFC-A4F3F83175F3} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1679839257-3410286964-3224026430-1000
Task: {FD65FCDB-2731-4E17-9B54-C29ACB601E59} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000Core => C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-11] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000Core.job => C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000UA.job => C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-08-30 16:59 - 2008-02-21 21:58 - 00036864 _____ () C:\Advanced Wheel Mouse\wh_hook.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 02251592 _____ () C:\Program Files (x86)\BumpTop\QtCore4.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 07848264 _____ () C:\Program Files (x86)\BumpTop\QtGui4.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 00977736 _____ () C:\Program Files (x86)\BumpTop\QtNetwork4.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 10255688 _____ () C:\Program Files (x86)\BumpTop\QtWebKit4.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 00336712 _____ () C:\Program Files (x86)\BumpTop\phonon4.dll
2010-08-30 17:41 - 2010-03-22 10:50 - 02455880 _____ () C:\Program Files (x86)\BumpTop\QtXmlPatterns4.dll
2010-08-30 17:41 - 2010-01-22 12:55 - 00207360 _____ () C:\Program Files (x86)\BumpTop\imageformats\qjpeg4.dll
2014-01-18 17:13 - 2014-01-18 17:13 - 19336120 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2014-01-28 20:32 - 2014-01-23 06:56 - 00715544 _____ () C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\libglesv2.dll
2014-01-28 20:32 - 2014-01-23 06:56 - 00100120 _____ () C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\libegl.dll
2014-01-28 20:32 - 2014-01-23 06:56 - 04055320 _____ () C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll
2014-01-28 20:32 - 2014-01-23 06:57 - 00399640 _____ () C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
2014-01-28 20:32 - 2014-01-23 06:55 - 01634584 _____ () C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB Device(VID_1f3a_PID_efe8)
Description: USB Device(VID_1f3a_PID_efe8)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: USB Devices
Service: usbUDisc
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/28/2014 00:30:12 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/27/2014 07:08:23 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/27/2014 04:55:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 32.0.1700.76, Zeitstempel: 0x52d0feb8
Name des fehlerhaften Moduls: chrome.dll, Version: 32.0.1700.76, Zeitstempel: 0x52d0f860
Ausnahmecode: 0x80000003
Fehleroffset: 0x003da309
ID des fehlerhaften Prozesses: 0x6d0
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3

Error: (01/24/2014 00:19:59 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/23/2014 04:40:14 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/20/2014 03:35:06 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/19/2014 05:24:57 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/17/2014 04:40:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/14/2014 07:00:26 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.

Error: (01/13/2014 06:05:37 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.


System errors:
=============
Error: (01/29/2014 03:45:09 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 09:36:45 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht vergrößert werden kann.

Error: (01/28/2014 07:40:33 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 04:57:18 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 04:55:21 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (01/28/2014 04:41:09 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 04:28:06 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 04:16:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/28/2014 04:09:41 PM) (Source: amdkmdag) (User: )
Description: EDID contain an error in the RangeLimit field

Error: (01/28/2014 04:09:46 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎01.‎2014 um 16:07:02 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (01/28/2014 00:30:12 AM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/27/2014 07:08:23 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/27/2014 04:55:13 PM) (Source: Application Error)(User: )
Description: chrome.exe32.0.1700.7652d0feb8chrome.dll32.0.1700.7652d0f86080000003003da3096d001cf1b77d1d8eb10C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exeC:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.76\chrome.dll67a778f0-876b-11e3-a4ad-00ff01000001

Error: (01/24/2014 00:19:59 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/23/2014 04:40:14 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/20/2014 03:35:06 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/19/2014 05:24:57 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/17/2014 04:40:42 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/14/2014 07:00:26 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

Error: (01/13/2014 06:05:37 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2


==================== Memory info =========================== 

Percentage of memory in use: 74%
Total physical RAM: 4095.55 MB
Available physical RAM: 1037.59 MB
Total Pagefile: 8189.29 MB
Available Pagefile: 4380.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:244.14 GB) (Free:24 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:221.48 GB) (Free:129.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 178D178C)
Partition 1: (Active) - (Size=244 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=221 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

Vielen Dank schon mal im Voraus...

hi,

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

so alles durch, habe leider auf eine Fertigmeldung von junkware gewartet, da kann man aber lange warten ;-)

# AdwCleaner v3.018 - Bericht erstellt am 29/01/2014 um 17:20:38
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Funride - FUNRIDE-PC
# Gestartet von : C:\Users\Funride\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [15371 octets] - [28/01/2014 16:16:52]
AdwCleaner[R1].txt - [1489 octets] - [28/01/2014 16:38:19]
AdwCleaner[R2].txt - [1484 octets] - [29/01/2014 17:19:18]
AdwCleaner[S0].txt - [14127 octets] - [28/01/2014 16:18:56]
AdwCleaner[S1].txt - [1506 octets] - [28/01/2014 16:39:44]
AdwCleaner[S2].txt - [1405 octets] - [29/01/2014 17:20:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1465 octets] ##########
         

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.28.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Funride :: FUNRIDE-PC [Administrator]

Schutz: Deaktiviert

29.01.2014 17:09:20
mbam-log-2014-01-29 (17-09-20).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 212534
Laufzeit: 4 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Funride (administrator) on FUNRIDE-PC on 29-01-2014 18:15:11
Running from C:\Users\Funride\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files (x86)\BumpTop\BumpTop.exe
() C:\Advanced Wheel Mouse\wh_exec.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\BumpTop\TexHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2014-01-18] (AVAST Software)
HKLM-x32\...\Run: [WheelMouse] - C:\Advanced Wheel Mouse\wh_exec.exe [98304 2008-02-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2014-01-18] (AVAST Software)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-04-23] (Samsung)
HKCU\...\Run: [Google Update] - C:\Users\Funride\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-03-11] (Google Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60082B40A352CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390494106&from=amt&uid=3219913727_67190_309618D9&q={searchTerms}
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-24]
FF Extension: sslpersonas - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\sslPersonas@tobitobi.de.xpi [2011-07-10]
FF Extension: Speed Dial - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-07-04]
FF Extension: NoScript - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-05-09]
FF Extension: Adblock Plus - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-02-25]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\extensions\lightningnewtab@gmail.com.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Chrome: 
=======
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Mozilla\plugins\npoctoshape.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Users\Funride\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-11]
CHR Extension: (Google-Suche) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-03-11]
CHR Extension: (avast! Online Security) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-07-08]
CHR Extension: (Google Wallet) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-03-11]
CHR HKLM-x32\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-23]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-01-18] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-27] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-18] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-18] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-19] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-18] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-07-22] ()
R3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2011-03-29] (Turtle Entertainment GmbH)
R2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [179616 2011-04-14] (<Turtle Entertainment>)
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-07-22] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [503352 2011-07-17] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-03-05] (Scott)
R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [9600 2007-01-26] ()
U3 ag9b4lh0; C:\Windows\System32\Drivers\ag9b4lh0.sys [0 ] (Advanced Micro Devices)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-29 17:26 - 2014-01-29 17:26 - 00000000 ____D C:\Windows\ERUNT
2014-01-29 17:24 - 2014-01-29 17:24 - 00001545 _____ C:\Users\Funride\Desktop\AdwCleaner[S2].1.txt
2014-01-29 17:20 - 2014-01-29 17:20 - 00001484 _____ C:\Users\Funride\Desktop\AdwCleaner[R2].txt
2014-01-29 17:11 - 2014-01-29 17:11 - 01037068 _____ (Thisisu) C:\Users\Funride\Downloads\JRT.exe
2014-01-29 17:10 - 2014-01-29 17:10 - 01166132 _____ C:\Users\Funride\Downloads\adwcleaner.exe
2014-01-29 15:54 - 2014-01-29 15:55 - 00023047 _____ C:\Users\Funride\Downloads\Addition.txt
2014-01-29 15:53 - 2014-01-29 18:15 - 00016135 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-29 15:53 - 2014-01-29 18:15 - 00000000 ____D C:\FRST
2014-01-29 15:52 - 2014-01-29 15:53 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:45 - 2014-01-29 18:07 - 00000168 _____ C:\Windows\setupact.log
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:44 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-28 16:16 - 2014-01-29 17:20 - 00000000 ____D C:\AdwCleaner
2014-01-28 16:13 - 2014-01-28 16:14 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 20:01 - 2014-01-24 20:02 - 37587477 _____ C:\Users\Funride\Desktop\OneRepublic-Counting Stars HD Lyrics Native_.mp4
2014-01-24 19:48 - 2014-01-24 19:49 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 12:59 - 2011-08-18 21:13 - 00000000 ____D C:\Users\Funride\Downloads\VAGCom
2014-01-23 17:49 - 2014-01-23 18:24 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:22 - 2014-01-23 17:23 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:21 - 2014-01-28 16:54 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-23 17:20 - 2014-01-28 21:12 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-19 16:07 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-15 15:46 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:46 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:46 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump

==================== One Month Modified Files and Folders =======

2014-01-29 18:16 - 2014-01-29 15:53 - 00016135 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-29 18:15 - 2014-01-29 15:53 - 00000000 ____D C:\FRST
2014-01-29 18:15 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-29 18:15 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 18:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-29 18:07 - 2014-01-29 15:45 - 00000168 _____ C:\Windows\setupact.log
2014-01-29 18:06 - 2013-03-06 16:14 - 01440597 _____ C:\Windows\WindowsUpdate.log
2014-01-29 17:28 - 2012-04-01 18:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 17:26 - 2014-01-29 17:26 - 00000000 ____D C:\Windows\ERUNT
2014-01-29 17:24 - 2014-01-29 17:24 - 00001545 _____ C:\Users\Funride\Desktop\AdwCleaner[S2].1.txt
2014-01-29 17:20 - 2014-01-29 17:20 - 00001484 _____ C:\Users\Funride\Desktop\AdwCleaner[R2].txt
2014-01-29 17:20 - 2014-01-28 16:16 - 00000000 ____D C:\AdwCleaner
2014-01-29 17:20 - 2012-03-11 18:21 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000UA.job
2014-01-29 17:11 - 2014-01-29 17:11 - 01037068 _____ (Thisisu) C:\Users\Funride\Downloads\JRT.exe
2014-01-29 17:10 - 2014-01-29 17:10 - 01166132 _____ C:\Users\Funride\Downloads\adwcleaner.exe
2014-01-29 15:55 - 2014-01-29 15:54 - 00023047 _____ C:\Users\Funride\Downloads\Addition.txt
2014-01-29 15:53 - 2014-01-29 15:52 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 21:43 - 2011-07-11 17:56 - 00007601 _____ C:\Users\Funride\AppData\Local\Resmon.ResmonCfg
2014-01-28 21:13 - 2010-08-30 17:01 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-28 21:12 - 2014-01-23 17:20 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-28 20:56 - 2010-09-12 18:58 - 00001943 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-28 20:55 - 2012-03-11 18:22 - 00002372 _____ C:\Users\Funride\Desktop\Google Chrome.lnk
2014-01-28 19:22 - 2012-08-06 15:41 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-28 16:54 - 2014-01-23 17:21 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:18 - 2011-01-25 17:36 - 00000000 ____D C:\ProgramData\ICQ
2014-01-28 16:14 - 2014-01-28 16:13 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 16:14 - 2011-10-03 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-25 00:15 - 2010-10-25 13:30 - 00008440 _____ C:\Users\Funride\Desktop\Unbenannt 1.odt
2014-01-24 20:02 - 2014-01-24 20:01 - 37587477 _____ C:\Users\Funride\Desktop\OneRepublic-Counting Stars HD Lyrics Native_.mp4
2014-01-24 20:01 - 2011-02-05 16:32 - 00000000 ____D C:\Users\Funride\dwhelper
2014-01-24 19:49 - 2014-01-24 19:48 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 13:00 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2014-01-24 13:00 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2014-01-24 13:00 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-23 19:07 - 2010-08-30 17:15 - 00000000 ____D C:\Users\Funride\AppData\Roaming\TS3Client
2014-01-23 18:24 - 2014-01-23 17:49 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:23 - 2014-01-23 17:22 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:23 - 2010-08-30 16:48 - 00000000 ___RD C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-23 17:21 - 2010-08-30 16:48 - 00001611 _____ C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-22 16:04 - 2012-04-01 18:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-22 16:04 - 2012-04-01 18:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-22 16:04 - 2011-07-22 16:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-22 16:03 - 2010-08-30 17:40 - 00000000 ____D C:\Users\Funride\AppData\Local\Adobe
2014-01-19 16:07 - 2014-01-18 17:13 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:13 - 2013-07-05 19:15 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-18 17:13 - 2013-07-05 19:15 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-18 17:13 - 2012-04-25 15:36 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-18 17:13 - 2011-02-25 17:08 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-18 17:13 - 2011-01-19 19:22 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-18 17:13 - 2010-08-30 16:52 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-18 17:13 - 2010-08-30 16:52 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-18 17:13 - 2010-08-30 16:51 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-18 17:08 - 2010-08-30 16:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2014-01-16 16:00 - 2009-07-14 05:45 - 00290704 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 18:50 - 2013-08-14 19:22 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 18:48 - 2010-09-01 16:49 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-05 19:09 - 2011-11-06 22:34 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Skype
2014-01-05 18:09 - 2013-11-11 14:17 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2014-01-05 18:09 - 2010-09-01 14:52 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-01 18:11 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Funride\AppData\Local\Temp\htmlayout.dll
C:\Users\Funride\AppData\Local\Temp\Launcher_i284120494.exe
C:\Users\Funride\AppData\Local\Temp\Quarantine.exe
C:\Users\Funride\AppData\Local\Temp\SHSetup.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4263975.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4341679.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413268.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413283.exe
C:\Users\Funride\AppData\Local\Temp\VuuPC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-19 17:26

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Problem besteht weiterhin....wie man sieht, bin ich die awesomehp immer noch nicht vollständig los und im Anhang sieht man, dass die dllhost.exe immer noch meine Resourcen frisst, hmmm.

Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.

• Starte die sc-cleaner.exe mit einem Doppelclick.
• Bestätige die Meldung Shortcut Cleaner Finished am Ende des Suchlaufs mit Ok.
• Eine Logdatei wird sich öffnen (sc-cleaner.txt).
• Poste den Inhalt mit deiner nächsten Antwort.

Frisches FRST log bitte.

Hallo Schrauber,

anbei die beiden logs ...

Shortcut Cleaner 1.2.8 by Lawrence Abrams (Grinler)
hxxp://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
 hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/

Windows Version: Windows 7 Ultimate Service Pack 1
Program started at: 01/31/2014 03:27:15 PM.

Scanning for registry hijacks:

 * No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\

  * Shortcut Cleaned: C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

  * Shortcut Cleaned: C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk => C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

  * Shortcut Cleaned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk => C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Searching C:\Users\Funride\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

  * Shortcut Cleaned: C:\Users\Funride\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

  * Shortcut Cleaned: C:\Users\Funride\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk => C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Searching C:\Users\Public\Desktop\

Searching C:\Users\Funride\Desktop


5 bad shortcuts found.

Program finished at: 01/31/2014 03:27:19 PM
Execution time: 0 hours(s), 0 minute(s), and 4 seconds(s)
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01
Ran by Funride (administrator) on FUNRIDE-PC on 31-01-2014 15:43:56
Running from C:\Users\Funride\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
() C:\Program Files (x86)\BumpTop\BumpTop.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
() C:\Advanced Wheel Mouse\wh_exec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\BumpTop\TexHelper.exe
() C:\Program Files (x86)\BumpTop\TexHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Funride\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avast5] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [3764024 2014-01-18] (AVAST Software)
HKLM-x32\...\Run: [WheelMouse] - C:\Advanced Wheel Mouse\wh_exec.exe [98304 2008-02-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2014-01-18] (AVAST Software)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x60082B40A352CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Funride\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-24]
FF Extension: sslpersonas - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\sslPersonas@tobitobi.de.xpi [2011-07-10]
FF Extension: Speed Dial - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-07-04]
FF Extension: NoScript - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-05-09]
FF Extension: Adblock Plus - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-02-25]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Funride\AppData\Roaming\Mozilla\Firefox\Profiles\qfx1qcs0.default\extensions\lightningnewtab@gmail.com.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9

Chrome: 
=======
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Funride\AppData\Local\Google\Chrome\Application\32.0.1700.102\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Mozilla\plugins\npoctoshape.dll No File
CHR Plugin: (Octoshape Streaming Services) - C:\Users\Funride\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Users\Funride\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-11]
CHR Extension: (Google-Suche) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-03-11]
CHR Extension: (avast! Online Security) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-07-08]
CHR Extension: (Google Wallet) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-03-11]
CHR HKLM-x32\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\Funride\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-23]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-01-18] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-27] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-18] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-18] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-19] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-18] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-07-22] ()
R3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2011-03-29] (Turtle Entertainment GmbH)
R2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [179616 2011-04-14] (<Turtle Entertainment>)
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-07-22] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [503352 2011-07-17] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-03-05] (Scott)
R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [9600 2007-01-26] ()
U3 agilqv3y; C:\Windows\System32\Drivers\agilqv3y.sys [0 ] (Advanced Micro Devices)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-31 15:27 - 2014-01-31 15:27 - 00004518 _____ C:\sc-cleaner.txt
2014-01-31 15:26 - 2014-01-31 15:26 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Funride\Downloads\sc-cleaner.exe
2014-01-29 18:16 - 2014-01-29 18:16 - 00030911 _____ C:\Users\Funride\Desktop\frst.1.txt
2014-01-29 17:26 - 2014-01-29 17:26 - 00000000 ____D C:\Windows\ERUNT
2014-01-29 17:24 - 2014-01-29 17:24 - 00001545 _____ C:\Users\Funride\Desktop\AdwCleaner[S2].1.txt
2014-01-29 17:20 - 2014-01-29 17:20 - 00001484 _____ C:\Users\Funride\Desktop\AdwCleaner[R2].txt
2014-01-29 17:11 - 2014-01-29 17:11 - 01037068 _____ (Thisisu) C:\Users\Funride\Downloads\JRT.exe
2014-01-29 17:10 - 2014-01-29 17:10 - 01166132 _____ C:\Users\Funride\Downloads\adwcleaner.exe
2014-01-29 15:54 - 2014-01-29 15:55 - 00023047 _____ C:\Users\Funride\Downloads\Addition.txt
2014-01-29 15:53 - 2014-01-31 15:43 - 00014218 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-29 15:53 - 2014-01-31 15:43 - 00000000 ____D C:\FRST
2014-01-29 15:52 - 2014-01-29 15:53 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:45 - 2014-01-31 15:13 - 00000448 _____ C:\Windows\setupact.log
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:44 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-28 16:16 - 2014-01-29 17:20 - 00000000 ____D C:\AdwCleaner
2014-01-28 16:13 - 2014-01-28 16:14 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-24 19:48 - 2014-01-24 19:49 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 12:59 - 2011-08-18 21:13 - 00000000 ____D C:\Users\Funride\Downloads\VAGCom
2014-01-23 17:49 - 2014-01-23 18:24 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:22 - 2014-01-23 17:23 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:21 - 2014-01-28 16:54 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-23 17:20 - 2014-01-28 21:12 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-19 16:07 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-15 15:46 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:46 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:46 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:46 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump

==================== One Month Modified Files and Folders =======

2014-01-31 15:44 - 2014-01-29 15:53 - 00014218 _____ C:\Users\Funride\Downloads\FRST.txt
2014-01-31 15:43 - 2014-01-29 15:53 - 00000000 ____D C:\FRST
2014-01-31 15:28 - 2012-04-01 18:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-31 15:27 - 2014-01-31 15:27 - 00004518 _____ C:\sc-cleaner.txt
2014-01-31 15:26 - 2014-01-31 15:26 - 00406264 _____ (Bleeping Computer, LLC) C:\Users\Funride\Downloads\sc-cleaner.exe
2014-01-31 15:20 - 2012-03-11 18:21 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1679839257-3410286964-3224026430-1000UA.job
2014-01-31 15:20 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-31 15:20 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-31 15:18 - 2013-03-06 16:14 - 01572247 _____ C:\Windows\WindowsUpdate.log
2014-01-31 15:13 - 2014-01-29 15:45 - 00000448 _____ C:\Windows\setupact.log
2014-01-31 15:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-30 16:43 - 2010-08-30 17:01 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-30 16:34 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2014-01-30 16:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-30 15:45 - 2012-01-29 20:34 - 00000000 ____D C:\Program Files (x86)\MarkAny
2014-01-30 15:44 - 2012-08-06 15:41 - 00004184 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-29 20:48 - 2012-01-29 20:38 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Samsung
2014-01-29 20:48 - 2012-01-29 20:34 - 00000000 ____D C:\ProgramData\Samsung
2014-01-29 20:48 - 2010-10-03 13:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-29 18:16 - 2014-01-29 18:16 - 00030911 _____ C:\Users\Funride\Desktop\frst.1.txt
2014-01-29 17:26 - 2014-01-29 17:26 - 00000000 ____D C:\Windows\ERUNT
2014-01-29 17:24 - 2014-01-29 17:24 - 00001545 _____ C:\Users\Funride\Desktop\AdwCleaner[S2].1.txt
2014-01-29 17:20 - 2014-01-29 17:20 - 00001484 _____ C:\Users\Funride\Desktop\AdwCleaner[R2].txt
2014-01-29 17:20 - 2014-01-28 16:16 - 00000000 ____D C:\AdwCleaner
2014-01-29 17:11 - 2014-01-29 17:11 - 01037068 _____ (Thisisu) C:\Users\Funride\Downloads\JRT.exe
2014-01-29 17:10 - 2014-01-29 17:10 - 01166132 _____ C:\Users\Funride\Downloads\adwcleaner.exe
2014-01-29 15:55 - 2014-01-29 15:54 - 00023047 _____ C:\Users\Funride\Downloads\Addition.txt
2014-01-29 15:53 - 2014-01-29 15:52 - 02079744 _____ (Farbar) C:\Users\Funride\Downloads\FRST64.exe
2014-01-29 15:45 - 2014-01-29 15:45 - 00000000 _____ C:\Windows\setuperr.log
2014-01-28 21:43 - 2011-07-11 17:56 - 00007601 _____ C:\Users\Funride\AppData\Local\Resmon.ResmonCfg
2014-01-28 21:12 - 2014-01-23 17:20 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
2014-01-28 20:56 - 2010-09-12 18:58 - 00001943 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-28 20:55 - 2012-03-11 18:22 - 00002372 _____ C:\Users\Funride\Desktop\Google Chrome.lnk
2014-01-28 16:54 - 2014-01-23 17:21 - 00000000 ____D C:\Users\Funride\AppData\Roaming\VOPackage
2014-01-28 16:44 - 2014-01-28 16:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Funride\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-28 16:44 - 2014-01-28 16:44 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-28 16:44 - 2014-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-28 16:18 - 2011-01-25 17:36 - 00000000 ____D C:\ProgramData\ICQ
2014-01-28 16:14 - 2014-01-28 16:13 - 00000000 ____D C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-28 16:14 - 2011-10-03 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-28 15:51 - 2014-01-28 15:51 - 00614784 _____ (Chip Digital GmbH) C:\Users\Funride\Downloads\AdwCleaner - CHIP-Downloader.exe
2014-01-27 21:51 - 2014-01-27 21:51 - 00000000 _____ C:\autoexec.bat
2014-01-27 21:50 - 2014-01-27 21:50 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-25 00:15 - 2010-10-25 13:30 - 00008440 _____ C:\Users\Funride\Desktop\Unbenannt 1.odt
2014-01-24 20:01 - 2011-02-05 16:32 - 00000000 ____D C:\Users\Funride\dwhelper
2014-01-24 19:49 - 2014-01-24 19:48 - 34008992 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Funride\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe
2014-01-24 13:00 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2014-01-24 13:00 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2014-01-24 13:00 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-23 19:07 - 2010-08-30 17:15 - 00000000 ____D C:\Users\Funride\AppData\Roaming\TS3Client
2014-01-23 18:24 - 2014-01-23 17:49 - 107248201 _____ C:\Users\Funride\Downloads\VAGCom.rar
2014-01-23 17:23 - 2014-01-23 17:22 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-23 17:23 - 2010-08-30 16:48 - 00000000 ___RD C:\Users\Funride\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-22 16:04 - 2012-04-01 18:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-22 16:04 - 2012-04-01 18:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-22 16:04 - 2011-07-22 16:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-22 16:03 - 2010-08-30 17:40 - 00000000 ____D C:\Users\Funride\AppData\Local\Adobe
2014-01-19 16:07 - 2014-01-18 17:13 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-19 16:02 - 2014-01-19 16:02 - 00000000 ____D C:\Users\Funride\AppData\Roaming\AVAST Software
2014-01-18 17:13 - 2014-01-18 17:13 - 00001977 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-18 17:13 - 2013-07-05 19:15 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-18 17:13 - 2013-07-05 19:15 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-18 17:13 - 2012-04-25 15:36 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-18 17:13 - 2011-02-25 17:08 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-18 17:13 - 2011-01-19 19:22 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-18 17:13 - 2010-08-30 16:52 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-18 17:13 - 2010-08-30 16:52 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-18 17:13 - 2010-08-30 16:51 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-18 17:08 - 2014-01-18 17:08 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-18 17:08 - 2010-08-30 16:52 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2014-01-16 16:00 - 2009-07-14 05:45 - 00290704 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 18:50 - 2013-08-14 19:22 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 18:48 - 2010-09-01 16:49 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 09:52 - 2014-01-14 09:52 - 00257384 _____ (FTDI Ltd.) C:\Windows\system32\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00219496 _____ (FTDI Ltd.) C:\Windows\SysWOW64\ftd2xx.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00215400 _____ (FTDI Ltd.) C:\Windows\system32\FTLang.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00109928 _____ (FTDI Ltd.) C:\Windows\system32\ftbusui.dll
2014-01-14 09:52 - 2014-01-14 09:52 - 00086376 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftser2k.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00079592 _____ (FTDI Ltd.) C:\Windows\system32\Drivers\ftdibus.sys
2014-01-14 09:52 - 2014-01-14 09:52 - 00056168 _____ (FTDI Ltd.) C:\Windows\system32\ftserui2.dll
2014-01-10 15:15 - 2014-01-10 15:15 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2014-01-05 19:09 - 2011-11-06 22:34 - 00000000 ____D C:\Users\Funride\AppData\Roaming\Skype
2014-01-05 18:09 - 2013-11-11 14:17 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2014-01-05 18:09 - 2010-09-01 14:52 - 00000000 ____D C:\Windows\System32\Tasks\Games
2014-01-01 18:11 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Funride\AppData\Local\Temp\htmlayout.dll
C:\Users\Funride\AppData\Local\Temp\Launcher_i284120494.exe
C:\Users\Funride\AppData\Local\Temp\Quarantine.exe
C:\Users\Funride\AppData\Local\Temp\SHSetup.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4263975.exe
C:\Users\Funride\AppData\Local\Temp\toolbar4341679.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413268.exe
C:\Users\Funride\AppData\Local\Temp\uninstall4413283.exe
C:\Users\Funride\AppData\Local\Temp\VuuPC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-29 20:23

==================== End Of Log ============================
         

--- --- ---


Das Problem der dllhost.exe scheint mit einem Problem der Windows updates zu tun zu haben, bzw mit einem Update des Internet explorers, ich habe diesen deaktiviert (benutze ihn eh nie!) und siehe da CPU Auslastung bei 20% mit geöffnetem Chrome und Musik hören.....

Awesomehp immer noch verweise....

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: about:home
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390494106&from=amt&uid=3219913727_67190_309618D9
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.