Hallo Wurmjäger,

dank Eurer Hilfe hatte ich lange Zeit keine Probleme. Leider hat MBAM gerade 16 Schädlinge gemeldet. Ich habe keine unbekannten Dateianhänge geöffnet, weiß also nicht wie die ins System kamen!

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.08.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
kriepel :: KRIEPEL-PC [Administrator]

08.02.2014 10:48:36
mbam-log-2014-02-08 (10-48-36).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 208875
Laufzeit: 6 Minute(n), 34 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 16
C:\Program Files (x86)\SearchProtect (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\Main (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\Main\Logs (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\Main\rep (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\SearchProtect (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\SearchProtect\rep (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\rep (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\kriepel\AppData\Local\Lollipop (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 51
C:\Users\kriepel\AppData\Local\Temp\bitool.dll (PUP.Optional.Somoto) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\EULA.txt (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt.
C:\Users\kriepel\AppData\Local\Lollipop\lollipop.lpd (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\kriepel\AppData\Local\Lollipop\lollipop.dat (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\kriepel\AppData\Local\Lollipop\lollipop_cfg.lpd (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\kriepel\AppData\Local\Lollipop\lollipop_ps.lpd (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Bitte schaut einmal was das ist und ob ich weitere Schritte unternehmen muss!!
Danke

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke für die schnelle Antwort!

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-02-2014
Ran by kriepel at 2014-02-08 11:35:35
Running from C:\Users\kriepel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

1&1 Surf-Stick (x32 Version: 1.0.0.2 - )
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x32 Version:  - )
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Hidden
AllDup 3.4.24 (x32 Version: 3.4.24 - Michael Thummerer Software Design)
Amazon Kindle (HKCU Version:  - Amazon)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17 - Amazon Services LLC)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.26 - Atheros Communications Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.5.1.1249 - APN, LLC)
BatteryCare 0.9.15.0 (x32 Version: 0.9.15.0 - Filipe Lourenço)
Canon Utilities CameraWindow DC 8 (x32 Version: 8.9.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional (x32 Version: 3.12.20.0 - Canon Inc.)
Canon Utilities ImageBrowser EX (x32 Version: 1.0.1.32 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.23.47 - Canon Inc.)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009 - Georgy Berdyshev)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.1.320 (x32 Version: 3.2.1.320 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (x32 Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKCU Version: 32.0.1700.107 - Google Inc.)
Google Earth (x32 Version: 6.2.2.6613 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HP FWUpdateEDO2 (x32 Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet 6700 - Grundlegende Software für das Gerät (Version: 25.0.619.0 - Hewlett-Packard Co.)
HP Officejet 6700 Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
HP Update (x32 Version: 5.003.000.004 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2226 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.37 - Irfan Skiljan)
iSpy (x32 Version: 4.7.7 - iSpy)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Medion Home Cinema (x32 Version: 8.0.2608 - CyberLink Corp.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Baseline Security Analyzer 2.2 (Version: 2.2.2170 - Microsoft Corporation)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
MotoHelper 2.0.53 Driver 5.2.0 (x32 Version: 2.0.53 - Motorola)
MotoHelper MergeModules (x32 Version: 1.2.0 - Motorola) Hidden
Motorola Mobile Drivers Installation 5.2.0 (Version: 5.2.0 - Motorola Inc.) Hidden
Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
NetWorx 5.2.2 (Version:  - Softperfect Research)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Netzmanager (x32 Version: 1.071 - Deutsche Telekom AG)
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
Personal Backup 5.5 (x32 Version: 5.3 - J. Rathlev)
phonostar-Player Version 3.02.2 (x32 Version:  - )
PHotkey (x32 Version: 1.00.0017 - Pegatron Corporation)
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6136 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (x32 Version: 1.00.0148 - REALTEK Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Samsung Mobile phone USB driver Drive Software (Version:  - )
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 USB Driver Installer (x32 Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.7011) (x32 Version: 3.0.0.7011 - Secunia)
Secure Banking Version 1.5.1 (x32 Version: 1.5.1 - Hopfgartner Niklas)
Skype Click to Call (x32 Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.7 (x32 Version: 6.7.102 - Skype Technologies S.A.)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0 - Adobe Systems Incorporated)
Synaptics Pointing Device Driver (Version: 15.0.4.0 - Synaptics Incorporated)
TeamViewer 8 (x32 Version: 8.0.16642 - TeamViewer)
VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Win7codecs (x32 Version: 3.2.0 - Shark007)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
WinPatrol (Version: 26.1.2013.0 - BillP Studios)
X10 Hardware(TM) (x32 Version:  - )
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

03-01-2014 12:28:27 Windows Update
07-01-2014 21:50:34 Windows Update
15-01-2014 22:28:12 Windows Update
16-01-2014 23:39:35 Windows Update
21-01-2014 21:42:36 Windows Update
25-01-2014 20:14:05 Windows Update
31-01-2014 10:13:55 Windows Update
03-02-2014 21:34:57 Installed MOTOROLA MEDIA LINK.
03-02-2014 21:51:58 Wiederherstellungsvorgang
06-02-2014 10:09:18 Windows Update
06-02-2014 10:26:44 Installed MOTOROLA MEDIA LINK.
06-02-2014 18:29:57 Windows-Sicherung
06-02-2014 19:01:29 Removed MOTOROLA MEDIA LINK.
06-02-2014 23:16:53 Windows-Sicherung
06-02-2014 23:19:18 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BC214D7-8E1A-4D51-A2DC-B858B51689DA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-05] (Google Inc.)
Task: {12C29228-A875-47D6-A5B6-5997E7EB3CFE} - System32\Tasks\MotoHelper MUM => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {14AA7126-DE0A-4F13-B13E-5BCAFA737706} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {176B29E0-3076-4B0E-A7C0-65029333F9DC} - System32\Tasks\MotoHelper Routing => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {27A9F0C4-9139-43E9-B360-6A421E0F059F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {320CCF11-488B-4528-86FD-4C8CC95358B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-17] (Google Inc.)
Task: {38FE6597-C4CE-4865-9C55-D79BF1011977} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-17] (Google Inc.)
Task: {43253897-8D31-42F9-B278-CD6780C68880} - System32\Tasks\{856AFD78-239C-4564-8493-2CFF15EB12A7} => Firefox.exe hxxp://ui.skype.com/ui/0/6.7.0.102/de/go/help.faq.installer?LastError=1618
Task: {4546E714-3CDB-49BA-A587-FF9F00D6DC20} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe
Task: {4A0A5A7F-9345-4EE2-BAA7-8B7CA6C15DA4} - System32\Tasks\{E2332988-BC12-41B1-AB55-F57BBAD7AE44} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe
Task: {66A8B8D3-5BA4-4497-B747-F395438C6F28} - System32\Tasks\{9F33C0BF-EAB7-472B-98FE-E2777E5675D0} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {683630C5-6FD8-4C95-ABE9-83E516B71CC4} - System32\Tasks\{7585BC53-A2D7-4AEB-878E-75ABF0CB551A} => C:\Program Files (x86)\WatchMyCam\WatchMyCam.exe [2012-02-10] (www.WatchMyCam.de)
Task: {79EB526B-414F-429D-A6C5-9995AA430889} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {7CBABA52-2D1D-4403-AA0A-CAF0C80F17FF} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-03-24] (Hewlett-Packard)
Task: {831B2694-439F-452B-9EE2-F4440A0C00D1} - System32\Tasks\{E961E590-D8EB-467C-BF76-E94DC6216F31} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {A09B0256-F73A-4B8F-AD3D-53781ABBAB43} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {A0D93F55-7502-416D-A533-03D5FAC5E1B5} - System32\Tasks\{74C9C7D0-47FA-443B-8E11-1260399C2982} => C:\Program Files (x86)\Canon\ImageBrowser EX\ImageBrowserEX.exe [2012-02-07] ()
Task: {A65CA375-1277-4284-B6C2-EAC4B8715DC9} - System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {AC39A37A-B036-4422-A923-ED37EA251D03} - System32\Tasks\{D08F8096-DAF9-4BF6-A314-71E968048195} => C:\Program Files (x86)\WatchMyCam\WatchMyCam.exe [2012-02-10] (www.WatchMyCam.de)
Task: {BD65572B-506C-4355-8EB7-DB12D9A76554} - System32\Tasks\{FC5289D4-8D55-4BCB-AC5F-F24523F593A6} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {BE6C8EBE-8B9E-480D-B6DB-36D26DEF30C3} - System32\Tasks\MotoHelper Update => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {C0158E9F-C2C1-43CF-8E80-DC5BDAB2C154} - System32\Tasks\MotoHelper Initial Update => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {D3FE39DE-9CFD-432C-ACE6-FBAFF3F0AEA6} - System32\Tasks\Google Updater and Installer => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-05] (Google Inc.)
Task: {E2CEF81C-FBD0-40C9-9DCC-B6501B473268} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-05] (Google Inc.)
Task: {FAA3C95F-4262-48E9-9326-C8F02DC07E61} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core.job => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA.job => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-02 19:47 - 2012-07-26 08:27 - 00252928 _____ () C:\Program Files (x86)\BatteryCare\OpenHardwareMonitorLib.dll
2013-10-20 09:46 - 2013-10-20 09:45 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-03-11 17:19 - 2009-12-19 00:41 - 00129544 ____R () C:\Program Files (x86)\PHotkey\GFNEX.dll
2013-02-09 19:56 - 2013-07-11 23:21 - 00017920 _____ () C:\Program Files (x86)\Secure Banking\SecureBanking.dll
2013-02-09 19:56 - 2013-07-11 23:21 - 00008704 _____ () C:\Program Files (x86)\Secure Banking\funcs.dll
2013-02-16 20:03 - 2012-12-10 02:46 - 00600868 ____N () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll
2014-02-06 23:55 - 2014-02-06 23:55 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-06 11:34 - 2014-02-06 11:34 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:0507A16B

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Officejet 6700
Description: Officejet 6700
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2014 11:00:06 AM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "F:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (02/08/2014 10:37:53 AM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 27.0.0.5140 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1bdc

Startzeit: 01cf24b099e8a139

Endzeit: 60

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: aa938f62-90a4-11e3-9823-e06995611895

Error: (02/07/2014 03:25:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/07/2014 02:26:32 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/07/2014 02:26:32 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/07/2014 02:24:34 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 488

Startzeit: 01cf212aca8094d6

Endzeit: 60000

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: ff3cf986-8ffa-11e3-9823-e06995611895

Error: (02/07/2014 10:48:20 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/07/2014 10:42:15 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/07/2014 00:08:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/07/2014 00:05:17 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (02/07/2014 04:11:38 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR10 gefunden.

Error: (02/07/2014 03:35:04 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR10 gefunden.

Error: (02/07/2014 02:27:20 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (02/07/2014 02:26:29 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "F:" wurden aufgrund eines E/A-Fehlers auf Volume "F:" abgebrochen.

Error: (02/07/2014 02:04:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (02/07/2014 10:20:52 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR8 gefunden.

Error: (02/07/2014 00:10:43 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (02/07/2014 00:10:13 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (02/06/2014 07:24:48 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (02/06/2014 07:24:18 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.


Microsoft Office Sessions:
=========================
Error: (02/08/2014 11:00:06 AM) (Source: Windows Backup)(User: )
Description: F:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (02/08/2014 10:37:53 AM) (Source: Application Hang)(User: )
Description: firefox.exe27.0.0.51401bdc01cf24b099e8a13960C:\Program Files (x86)\Mozilla Firefox\firefox.exeaa938f62-90a4-11e3-9823-e06995611895

Error: (02/07/2014 03:25:01 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\kriepel\Downloads\esetsmartinstaller_deu.exe

Error: (02/07/2014 02:26:32 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/07/2014 02:26:32 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/07/2014 02:24:34 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.1756748801cf212aca8094d660000C:\Windows\Explorer.EXEff3cf986-8ffa-11e3-9823-e06995611895

Error: (02/07/2014 10:48:20 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/07/2014 10:42:15 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\phonostar-player\phonostar.exe

Error: (02/07/2014 00:08:55 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/07/2014 00:05:17 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\kriepel\Downloads\esetsmartinstaller_deu.exe


CodeIntegrity Errors:
===================================
  Date: 2013-02-04 14:18:38.506
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 14:02:38.672
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 13:18:21.958
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 02:00:35.899
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 01:53:08.109
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 20:52:40.029
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 20:31:40.015
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 18:03:07.902
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 17:53:30.147
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 17:22:05.319
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 3893.14 MB
Available physical RAM: 1831.98 MB
Total Pagefile: 7784.47 MB
Available Pagefile: 5083.49 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:565.07 GB) (Free:392.37 GB) NTFS
Drive d: (Recover) (Fixed) (Total:30 GB) (Free:29.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=565 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by kriepel (administrator) on KRIEPEL-PC on 08-02-2014 11:34:43
Running from C:\Users\kriepel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POsd.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Filipe Lourenço) C:\Program Files (x86)\BatteryCare\BatteryCare.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Teruten Inc) C:\Windows\SysWOW64\FsExService64.Exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-12-08] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-09-24] (APN)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-11] (Secure Banking)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [Google Update] - C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-05] (Google Inc.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [HP Officejet 6700 (NET) #2] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [BatteryCare] - C:\Program Files (x86)\BatteryCare\BatteryCare.exe [752128 2013-10-28] (Filipe Lourenço)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: G - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {8421570a-eac1-11e0-b758-e06995611895} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {84215719-eac1-11e0-b758-e06995611895} - H:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {a01cc603-8c4f-11e3-82f7-e06995611895} - G:\setup.exe -a
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {db996920-6016-11e1-988f-e06995611895} - G:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {07420B46-2754-41B1-AB45-CD31B68A99F0} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN25008179790232-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=fa252e12000000000000000000000000&q={searchTerms}&r=900
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll No File
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.107/AxViewer/AxMediaControl.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: DownloadHelper - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: InstantFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\searchy@searchy.xpi [2011-10-15]
FF Extension: FastestFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-09-17]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-09-24]
FF Extension: NoScript - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-15]
FF Extension: Adblock Plus - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-17]
FF Extension: QuickJava - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-10-13]
FF Extension: FoxTab - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2011-09-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&SSPV=
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&q={searchTerms}&SSPV=
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2014-01-02]
CHR Extension: (YouTube) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-15]
CHR Extension: (Google Search) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-15]
CHR Extension: (Skype Click to Call) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-15]
CHR Extension: (Google Wallet) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-02]
CHR Extension: (Gmail) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-15]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-02-01]
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2013-09-24]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-23] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
S2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-04-24] ()
R2 HPSLPSVC; C:\Users\kriepel\AppData\Local\Temp\7zS4975\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [227184 2011-08-10] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-12-08] ()
S2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-12-01] (X10 Wireless Technology, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-08 11:34 - 2014-02-08 11:35 - 00020607 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-08 11:34 - 2014-02-08 11:34 - 00000000 ____D () C:\FRST
2014-02-08 11:33 - 2014-02-08 11:33 - 02079744 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 14:01 - 2014-02-07 15:52 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:01 - 2010-10-13 06:42 - 02369456 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2014-02-07 14:01 - 2010-08-20 21:53 - 00086016 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSplitter.ocx
2014-02-07 14:01 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx
2014-02-07 14:01 - 2010-06-01 14:45 - 01005088 _____ (Bennet-Tec Information Systems, Inc) C:\Windows\SysWOW64\TList8.ocx
2014-02-07 14:01 - 2010-03-25 10:33 - 00171752 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtRTF2.ocx
2014-02-07 14:01 - 2009-10-13 00:02 - 00044736 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSubclass.dll
2014-02-07 14:01 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx
2014-02-07 14:01 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx
2014-02-07 14:01 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-02-07 13:59 - 2014-02-07 14:00 - 03503200 _____ (Michael Thummerer Software Design ) C:\Users\kriepel\Downloads\alldup_3.4.24.exe
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:04 - 2014-02-07 00:05 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 13:56 - 2014-02-06 13:56 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{B41FBD15-AF1B-4284-BA4A-9EFC8707E209}
2014-02-06 11:42 - 2014-02-06 11:43 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-03 22:50 - 2014-02-03 22:56 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-02-03 22:50 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\LiveSupport
2014-02-03 22:50 - 2014-02-03 22:50 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\SpeedyPC Software
2014-02-03 22:50 - 2014-02-03 22:50 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DriverCure
2014-02-03 22:49 - 2014-02-03 22:49 - 00000000 ____D () C:\ProgramData\SpeedyPC Software
2014-02-03 22:49 - 2014-02-03 22:49 - 00000000 ____D () C:\Program Files (x86)\SpeedyPC Software
2014-02-03 22:48 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:48 - 2014-02-03 22:49 - 00000000 ____D () C:\Users\kriepel\AppData\Local\SearchProtect
2014-02-03 22:48 - 2014-02-03 22:49 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-02-03 22:48 - 2014-02-03 22:48 - 00000000 _____ () C:\END
2014-02-03 22:36 - 2014-02-06 20:03 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:35 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:21 - 2014-02-01 22:22 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-15 23:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 23:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 23:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe
2014-01-10 11:32 - 2014-01-10 11:32 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{27ADA537-A55F-4E17-B386-D34B83BF443B}

==================== One Month Modified Files and Folders =======

2014-02-08 11:35 - 2014-02-08 11:34 - 00020607 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-08 11:34 - 2014-02-08 11:34 - 00000000 ____D () C:\FRST
2014-02-08 11:34 - 2012-05-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-08 11:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-08 11:33 - 2014-02-08 11:33 - 02079744 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-08 11:33 - 2012-09-07 13:56 - 01494250 _____ () C:\Windows\WindowsUpdate.log
2014-02-08 11:20 - 2012-01-28 18:31 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2B06E81-3F74-4B88-BE96-FB5A7666A9C4}
2014-02-08 11:19 - 2012-08-05 18:42 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA.job
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-08 10:45 - 2012-08-05 18:42 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core.job
2014-02-07 15:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 15:52 - 2014-02-07 14:01 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:00 - 2014-02-07 13:59 - 03503200 _____ (Michael Thummerer Software Design ) C:\Users\kriepel\Downloads\alldup_3.4.24.exe
2014-02-07 10:48 - 2013-02-15 21:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-07 00:18 - 2011-09-17 09:05 - 00000000 ___RD () C:\Users\kriepel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:05 - 2014-02-07 00:04 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:44 - 2012-07-02 21:32 - 00000000 ___DC () C:\Users\kriepel\AppData\Local\MigWiz
2014-02-06 20:03 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 19:25 - 2011-02-10 20:25 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 19:25 - 2011-02-10 20:25 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 19:25 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 18:40 - 2013-01-07 19:28 - 00000000 ____D () C:\Users\kriepel\Desktop\Firma
2014-02-06 14:09 - 2012-01-27 17:23 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\vlc
2014-02-06 13:56 - 2014-02-06 13:56 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{B41FBD15-AF1B-4284-BA4A-9EFC8707E209}
2014-02-06 11:43 - 2014-02-06 11:42 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:34 - 2011-10-23 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:29 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel\AppData\Local\VirtualStore
2014-02-06 11:08 - 2013-02-04 20:48 - 00015473 _____ () C:\Windows\setupact.log
2014-02-04 21:47 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-04 21:47 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-03 22:56 - 2014-02-03 22:50 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-02-03 22:56 - 2012-08-25 19:34 - 00524288 _____ () C:\Windows\system32\Ikeext.etl
2014-02-03 22:56 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel
2014-02-03 22:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-03 22:54 - 2014-02-03 22:50 - 00000000 ____D () C:\Program Files (x86)\LiveSupport
2014-02-03 22:54 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:54 - 2013-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-03 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-03 22:50 - 2014-02-03 22:50 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\SpeedyPC Software
2014-02-03 22:50 - 2014-02-03 22:50 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DriverCure
2014-02-03 22:49 - 2014-02-03 22:49 - 00000000 ____D () C:\ProgramData\SpeedyPC Software
2014-02-03 22:49 - 2014-02-03 22:49 - 00000000 ____D () C:\Program Files (x86)\SpeedyPC Software
2014-02-03 22:49 - 2014-02-03 22:48 - 00000000 ____D () C:\Users\kriepel\AppData\Local\SearchProtect
2014-02-03 22:49 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-02-03 22:48 - 2014-02-03 22:48 - 00000000 _____ () C:\END
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:36 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 22:32 - 2012-10-28 17:00 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Downloaded Installations
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:11 - 2013-10-05 17:05 - 00000000 ____D () C:\AdwCleaner
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 22:01 - 2013-02-04 20:48 - 00367924 _____ () C:\Windows\PFRO.log
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-02 00:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:25 - 2013-04-18 20:14 - 00001247 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DVDVideoSoft
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-01 22:22 - 2014-02-01 22:21 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-17 01:00 - 2009-07-14 05:45 - 00298768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-17 00:44 - 2013-07-16 10:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 00:40 - 2011-02-10 21:56 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 12:01 - 2012-05-28 15:41 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe
2014-01-12 11:55 - 2013-01-17 16:53 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-10 11:32 - 2014-01-10 11:32 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{27ADA537-A55F-4E17-B386-D34B83BF443B}

Some content of TEMP:
====================
C:\Users\kriepel\AppData\Local\Temp\avgnt.exe
C:\Users\kriepel\AppData\Local\Temp\bitool.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 11:23

==================== End Of Log ============================
         

--- --- ---

Funde von MBAM löschen lassen.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo,
hier die Log`s, ich habe zwar hier keinen Durchblick aber die ASK-Toolbar hat sich da wohl wieder eingeschlichen!

# AdwCleaner v3.018 - Bericht erstellt am 09/02/2014 um 13:11:00
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : kriepel - KRIEPEL-PC
# Gestartet von : C:\Users\kriepel\Desktop\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Datei Gefunden : C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
Ordner Gefunden C:\Program Files (x86)\Common Files\SpeedyPC Software
Ordner Gefunden C:\Program Files (x86)\optimizer pro
Ordner Gefunden C:\Program Files (x86)\SpeedyPC Software
Ordner Gefunden C:\ProgramData\SpeedyPC Software
Ordner Gefunden C:\Users\kriepel\AppData\Local\Searchprotect
Ordner Gefunden C:\Users\kriepel\AppData\Roaming\DriverCure
Ordner Gefunden C:\Users\kriepel\AppData\Roaming\SpeedyPC Software

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v27.0 (de)

[ Datei : C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden : homepage
Gefunden : icon_url
Gefunden : search_url
Gefunden : suggest_url
Gefunden : keyword
Gefunden : homepage
Gefunden : icon_url
Gefunden : search_url
Gefunden : suggest_url
Gefunden : keyword
Gefunden : homepage
Gefunden : icon_url
Gefunden : search_url
Gefunden : suggest_url
Gefunden : keyword

*************************

AdwCleaner[R0].txt - [15424 octets] - [05/10/2013 17:07:34]
AdwCleaner[R1].txt - [2659 octets] - [09/02/2014 13:11:00]
AdwCleaner[S0].txt - [14263 octets] - [05/10/2013 17:12:51]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [2780 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by kriepel on 09.02.2014 at 13:13:45,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASMANCS



~~~ Files

Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\speedypc software"
Successfully deleted: [Folder] "C:\Users\kriepel\AppData\Roaming\drivercure"
Successfully deleted: [Folder] "C:\Users\kriepel\AppData\Roaming\speedypc software"
Successfully deleted: [Folder] "C:\Users\kriepel\appdata\local\searchprotect"
Successfully deleted: [Folder] "C:\Program Files (x86)\livesupport"
Successfully deleted: [Folder] "C:\Program Files (x86)\optimizer pro"
Successfully deleted: [Folder] "C:\Program Files (x86)\speedypc software"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\speedypc software"
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{046F3EE4-A5D1-42BD-A4A6-5193E0937121}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{0CF03E82-01E3-4A76-80DD-4EDB3B17516C}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{171C41BF-B085-4AD7-9194-99C3C67E8D9C}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{1E211527-4E4E-47CE-9EA8-2A8A08272FAE}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{1FA534B0-7E76-47A3-A926-F5AC353EA51D}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{238FC7FA-64CB-415B-97CE-02BC70A92DC3}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{27ADA537-A55F-4E17-B386-D34B83BF443B}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{328CB210-06B3-4506-8546-F0116CF3C9D0}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{4C28BE55-9362-400A-8BCA-CEEA4E2C9043}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{4E3493A7-C2D9-45B8-85B5-906BADDB2CC2}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{55BB7826-7B35-4E52-BC0E-00FFB31C7D32}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{5732FA5C-D581-4DDD-A9FC-8CA547B4E7BD}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{5E6C004E-6698-43BA-8FB1-7A49AB086754}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{61D01925-B540-482B-9B6C-70A1885603F5}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{659C31B6-F2DE-4A62-B05D-8D42B6AD46FC}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{67359B37-F29D-4412-A2FC-EB6CC9C0A146}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{6D1E255F-DAEC-4B9A-AA14-DAE93353917D}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{76D9BE70-30B8-4966-A7B4-332D9177E9EB}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{7E24C67B-C9F4-4962-9F6E-3497236B8226}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{82577ED2-44AC-4084-82AA-5C6A8EE07EB4}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{88DB1A54-A517-47A4-AAB2-098EEF032586}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{92A8AC80-98B5-4657-A33F-4502886FA1BE}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{B03318CA-5A31-4D43-A132-4EBDFF1658B5}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{B125DDEE-F773-4057-BD80-226406CA5C0E}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{B2F19D80-F7C1-4F10-9356-3D33ABFFAAD5}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{B41FBD15-AF1B-4284-BA4A-9EFC8707E209}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{C5141549-0534-4924-B22A-387731BEE9D7}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{CA71652B-9913-4E34-8FC8-94DA742245D3}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{D08A02D4-8D5B-4A1C-A159-2F40C390C3CC}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{D2802CF4-1565-4E1A-816C-878FDF678E28}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{D9F716C0-B89A-4FA2-85BC-6D08DB5A408F}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{E00B0ECA-3B38-461C-A8A7-AB1F28489275}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{F87F74E9-5266-45F6-81BA-2224741C419D}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{FAD409B3-A40A-4098-ACD1-FC352556D429}
Successfully deleted: [Empty Folder] C:\Users\kriepel\appdata\local\{FC4B482F-9A86-4D42-AB60-55DEA2570CEE}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] C:\Users\kriepel\AppData\Roaming\mozilla\firefox\profiles\cxq4plck.default\extensions\searchy@searchy.xpi
Successfully deleted: [File] C:\Users\kriepel\AppData\Roaming\mozilla\firefox\profiles\cxq4plck.default\extensions\toolbar_avira-v7@apn.ask.com.xpi
Emptied folder: C:\Users\kriepel\AppData\Roaming\mozilla\firefox\profiles\cxq4plck.default\minidumps [167 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\kriepel\appdata\local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.02.2014 at 13:23:27,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Hätte ich beinah übersehen, Logfile Frst

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02
Ran by kriepel (administrator) on KRIEPEL-PC on 09-02-2014 22:41:54
Running from C:\Users\kriepel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-12-08] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-11] (Secure Banking)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [Google Update] - C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-05] (Google Inc.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [HP Officejet 6700 (NET) #2] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [BatteryCare] - C:\Program Files (x86)\BatteryCare\BatteryCare.exe [752128 2013-10-28] (Filipe Lourenço)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: G - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {8421570a-eac1-11e0-b758-e06995611895} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {84215719-eac1-11e0-b758-e06995611895} - H:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {a01cc603-8c4f-11e3-82f7-e06995611895} - G:\setup.exe -a
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {db996920-6016-11e1-988f-e06995611895} - G:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {07420B46-2754-41B1-AB45-CD31B68A99F0} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN25008179790232-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=fa252e12000000000000000000000000&q={searchTerms}&r=900
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll No File
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.107/AxViewer/AxMediaControl.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: DownloadHelper - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: FastestFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-09-17]
FF Extension: NoScript - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-15]
FF Extension: Adblock Plus - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-17]
FF Extension: QuickJava - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-10-13]
FF Extension: FoxTab - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2011-09-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&SSPV=
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&q={searchTerms}&SSPV=
CHR Extension: (YouTube) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-15]
CHR Extension: (Google Search) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-15]
CHR Extension: (Skype Click to Call) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-15]
CHR Extension: (Google Wallet) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-02]
CHR Extension: (Gmail) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-15]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-02-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-23] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-04-24] ()
R2 HPSLPSVC; C:\Users\kriepel\AppData\Local\Temp\7zS4975\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [227184 2011-08-10] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-12-08] ()
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-12-01] (X10 Wireless Technology, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-09 22:41 - 2014-02-09 22:41 - 00018980 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-09 22:39 - 2014-02-09 22:41 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 11:34 - 2014-02-09 22:41 - 00000000 ____D () C:\FRST
2014-02-08 11:33 - 2014-02-09 22:39 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 14:01 - 2014-02-07 15:52 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:01 - 2010-10-13 06:42 - 02369456 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2014-02-07 14:01 - 2010-08-20 21:53 - 00086016 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSplitter.ocx
2014-02-07 14:01 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx
2014-02-07 14:01 - 2010-06-01 14:45 - 01005088 _____ (Bennet-Tec Information Systems, Inc) C:\Windows\SysWOW64\TList8.ocx
2014-02-07 14:01 - 2010-03-25 10:33 - 00171752 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtRTF2.ocx
2014-02-07 14:01 - 2009-10-13 00:02 - 00044736 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSubclass.dll
2014-02-07 14:01 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx
2014-02-07 14:01 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx
2014-02-07 14:01 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:04 - 2014-02-07 00:05 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 11:42 - 2014-02-06 11:43 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-03 22:48 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:36 - 2014-02-06 20:03 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:35 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:21 - 2014-02-01 22:22 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-15 23:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 23:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 23:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe

==================== One Month Modified Files and Folders =======

2014-02-09 22:42 - 2014-02-09 22:41 - 00018980 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-09 22:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-09 22:41 - 2014-02-09 22:39 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 22:41 - 2014-02-08 11:34 - 00000000 ____D () C:\FRST
2014-02-09 22:41 - 2012-01-28 18:31 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2B06E81-3F74-4B88-BE96-FB5A7666A9C4}
2014-02-09 22:41 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 22:41 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 22:39 - 2014-02-08 11:33 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-09 22:39 - 2012-08-05 18:42 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core.job
2014-02-09 22:36 - 2012-08-05 18:42 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA.job
2014-02-09 22:34 - 2012-09-07 13:56 - 01521284 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 22:34 - 2012-05-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 13:13 - 2013-10-13 12:06 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 13:11 - 2013-10-05 17:05 - 00000000 ____D () C:\AdwCleaner
2014-02-09 13:03 - 2013-02-15 21:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-09 13:03 - 2013-02-04 20:48 - 00384488 _____ () C:\Windows\PFRO.log
2014-02-09 13:03 - 2013-02-04 20:48 - 00015529 _____ () C:\Windows\setupact.log
2014-02-09 13:03 - 2012-08-25 19:34 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-09 13:03 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 15:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 15:52 - 2014-02-07 14:01 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 00:18 - 2011-09-17 09:05 - 00000000 ___RD () C:\Users\kriepel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:05 - 2014-02-07 00:04 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:44 - 2012-07-02 21:32 - 00000000 ___DC () C:\Users\kriepel\AppData\Local\MigWiz
2014-02-06 20:03 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 19:25 - 2011-02-10 20:25 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 19:25 - 2011-02-10 20:25 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 19:25 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 18:40 - 2013-01-07 19:28 - 00000000 ____D () C:\Users\kriepel\Desktop\Firma
2014-02-06 14:09 - 2012-01-27 17:23 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\vlc
2014-02-06 11:43 - 2014-02-06 11:42 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:34 - 2011-10-23 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:29 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel\AppData\Local\VirtualStore
2014-02-03 22:56 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel
2014-02-03 22:54 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:54 - 2013-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-03 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:36 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 22:32 - 2012-10-28 17:00 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Downloaded Installations
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-02 00:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:25 - 2013-04-18 20:14 - 00001247 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DVDVideoSoft
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-01 22:22 - 2014-02-01 22:21 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-17 01:00 - 2009-07-14 05:45 - 00298768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-17 00:44 - 2013-07-16 10:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 00:40 - 2011-02-10 21:56 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 12:01 - 2012-05-28 15:41 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe
2014-01-12 11:55 - 2013-01-17 16:53 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk

Some content of TEMP:
====================
C:\Users\kriepel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 11:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Hätte ich beinah übersehen, Logfile Frst

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02
Ran by kriepel (administrator) on KRIEPEL-PC on 09-02-2014 22:41:54
Running from C:\Users\kriepel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-12-08] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-11] (Secure Banking)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [Google Update] - C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-05] (Google Inc.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [HP Officejet 6700 (NET) #2] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [BatteryCare] - C:\Program Files (x86)\BatteryCare\BatteryCare.exe [752128 2013-10-28] (Filipe Lourenço)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: G - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {8421570a-eac1-11e0-b758-e06995611895} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {84215719-eac1-11e0-b758-e06995611895} - H:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {a01cc603-8c4f-11e3-82f7-e06995611895} - G:\setup.exe -a
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {db996920-6016-11e1-988f-e06995611895} - G:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {07420B46-2754-41B1-AB45-CD31B68A99F0} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN25008179790232-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=fa252e12000000000000000000000000&q={searchTerms}&r=900
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll No File
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.107/AxViewer/AxMediaControl.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: DownloadHelper - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: FastestFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-09-17]
FF Extension: NoScript - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-15]
FF Extension: Adblock Plus - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-17]
FF Extension: QuickJava - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-10-13]
FF Extension: FoxTab - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2011-09-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&SSPV=
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&q={searchTerms}&SSPV=
CHR Extension: (YouTube) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-15]
CHR Extension: (Google Search) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-15]
CHR Extension: (Skype Click to Call) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-15]
CHR Extension: (Google Wallet) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-02]
CHR Extension: (Gmail) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-15]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-02-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-23] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-04-24] ()
R2 HPSLPSVC; C:\Users\kriepel\AppData\Local\Temp\7zS4975\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [227184 2011-08-10] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-12-08] ()
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-12-01] (X10 Wireless Technology, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-09 22:41 - 2014-02-09 22:41 - 00018980 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-09 22:39 - 2014-02-09 22:41 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 11:34 - 2014-02-09 22:41 - 00000000 ____D () C:\FRST
2014-02-08 11:33 - 2014-02-09 22:39 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 14:01 - 2014-02-07 15:52 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:01 - 2010-10-13 06:42 - 02369456 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2014-02-07 14:01 - 2010-08-20 21:53 - 00086016 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSplitter.ocx
2014-02-07 14:01 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx
2014-02-07 14:01 - 2010-06-01 14:45 - 01005088 _____ (Bennet-Tec Information Systems, Inc) C:\Windows\SysWOW64\TList8.ocx
2014-02-07 14:01 - 2010-03-25 10:33 - 00171752 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtRTF2.ocx
2014-02-07 14:01 - 2009-10-13 00:02 - 00044736 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSubclass.dll
2014-02-07 14:01 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx
2014-02-07 14:01 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx
2014-02-07 14:01 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:04 - 2014-02-07 00:05 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 11:42 - 2014-02-06 11:43 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-03 22:48 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:36 - 2014-02-06 20:03 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:35 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:21 - 2014-02-01 22:22 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-15 23:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 23:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 23:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe

==================== One Month Modified Files and Folders =======

2014-02-09 22:42 - 2014-02-09 22:41 - 00018980 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-09 22:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-09 22:41 - 2014-02-09 22:39 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 22:41 - 2014-02-08 11:34 - 00000000 ____D () C:\FRST
2014-02-09 22:41 - 2012-01-28 18:31 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2B06E81-3F74-4B88-BE96-FB5A7666A9C4}
2014-02-09 22:41 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 22:41 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 22:39 - 2014-02-08 11:33 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-09 22:39 - 2012-08-05 18:42 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core.job
2014-02-09 22:36 - 2012-08-05 18:42 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA.job
2014-02-09 22:34 - 2012-09-07 13:56 - 01521284 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 22:34 - 2012-05-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 13:13 - 2013-10-13 12:06 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 13:11 - 2013-10-05 17:05 - 00000000 ____D () C:\AdwCleaner
2014-02-09 13:03 - 2013-02-15 21:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-09 13:03 - 2013-02-04 20:48 - 00384488 _____ () C:\Windows\PFRO.log
2014-02-09 13:03 - 2013-02-04 20:48 - 00015529 _____ () C:\Windows\setupact.log
2014-02-09 13:03 - 2012-08-25 19:34 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-09 13:03 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 15:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 15:52 - 2014-02-07 14:01 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 00:18 - 2011-09-17 09:05 - 00000000 ___RD () C:\Users\kriepel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:05 - 2014-02-07 00:04 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:44 - 2012-07-02 21:32 - 00000000 ___DC () C:\Users\kriepel\AppData\Local\MigWiz
2014-02-06 20:03 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-06 20:02 - 2014-02-06 20:02 - 00000005 _____ () C:\Windows\SysWOW64\lMMLDeleteUserData42107612FX.tmp
2014-02-06 19:25 - 2011-02-10 20:25 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 19:25 - 2011-02-10 20:25 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 19:25 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 18:40 - 2013-01-07 19:28 - 00000000 ____D () C:\Users\kriepel\Desktop\Firma
2014-02-06 14:09 - 2012-01-27 17:23 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\vlc
2014-02-06 11:43 - 2014-02-06 11:42 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:34 - 2011-10-23 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:29 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel\AppData\Local\VirtualStore
2014-02-03 22:56 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel
2014-02-03 22:54 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:54 - 2013-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-03 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:36 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 22:32 - 2012-10-28 17:00 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Downloaded Installations
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-02 00:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:25 - 2013-04-18 20:14 - 00001247 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DVDVideoSoft
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-01 22:22 - 2014-02-01 22:21 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-17 01:00 - 2009-07-14 05:45 - 00298768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-17 00:44 - 2013-07-16 10:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 00:40 - 2011-02-10 21:56 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 12:01 - 2012-05-28 15:41 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe
2014-01-12 11:55 - 2013-01-17 16:53 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk

Some content of TEMP:
====================
C:\Users\kriepel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 11:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo, soweit ist mit dem Rechner alles ok, bin nur im Moment mobil im Internet, dass macht es etwas zähflüssig.

ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=7ec3ec3df281da4f94497935b97eaa3f
# engine=17015
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-10 07:06:37
# local_time=2014-02-10 08:06:37 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 81109 9800679 73856 0
# compatibility_mode=5893 16776573 100 94 293350 143689047 0 0
# scanned=135444
# found=0
# cleaned=0
# scan_time=7635
         

 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 iSpy     
 Secunia PSI (3.0.0.7011)   
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader XI  
 Mozilla Firefox (27.0) 
 Google Chrome 32.0.1700.102  
 Google Chrome 32.0.1700.107  
````````Process Check: objlist.exe by Laurent````````  
 WinPatrol winpatrol.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 BillP Studios WinPatrol WinPatrol.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02
Ran by kriepel (administrator) on KRIEPEL-PC on 10-02-2014 21:01:34
Running from C:\Users\kriepel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Filipe Lourenço) C:\Program Files (x86)\BatteryCare\BatteryCare.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
() C:\Program Files (x86)\1&1 Surf-Stick\CMUpdater.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-12-08] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-11] (Secure Banking)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [BatteryCare] - C:\Program Files (x86)\BatteryCare\BatteryCare.exe [752128 2013-10-28] (Filipe Lourenço)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: G - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {8421570a-eac1-11e0-b758-e06995611895} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {84215719-eac1-11e0-b758-e06995611895} - H:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {a01cc603-8c4f-11e3-82f7-e06995611895} - G:\setup.exe -a
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {db996920-6016-11e1-988f-e06995611895} - G:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {07420B46-2754-41B1-AB45-CD31B68A99F0} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN25008179790232-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=fa252e12000000000000000000000000&q={searchTerms}&r=900
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll No File
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.107/AxViewer/AxMediaControl.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\kriepel\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: DownloadHelper - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: FastestFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-09-17]
FF Extension: NoScript - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-15]
FF Extension: Adblock Plus - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-17]
FF Extension: QuickJava - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-10-13]
FF Extension: FoxTab - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2011-09-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&SSPV=
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3320691&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPD5AAF50D-DFBC-418C-8CE7-4993D897B014&q={searchTerms}&SSPV=
CHR Extension: (YouTube) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-15]
CHR Extension: (Google Search) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-15]
CHR Extension: (Skype Click to Call) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-09-15]
CHR Extension: (Google Wallet) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-02]
CHR Extension: (Gmail) - C:\Users\kriepel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-15]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-02-01]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-23] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-04-24] ()
R2 HPSLPSVC; C:\Users\kriepel\AppData\Local\Temp\7zS4975\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [227184 2011-08-10] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-12-08] ()
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-12-01] (X10 Wireless Technology, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-10 17:48 - 2014-02-10 17:48 - 00987425 _____ () C:\Users\kriepel\Desktop\SecurityCheck.exe
2014-02-10 17:45 - 2014-02-10 17:45 - 02347384 _____ (ESET) C:\Users\kriepel\Downloads\esetsmartinstaller_enu.exe
2014-02-09 22:41 - 2014-02-10 21:01 - 00018697 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-09 22:39 - 2014-02-09 22:41 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 11:34 - 2014-02-10 21:01 - 00000000 ____D () C:\FRST
2014-02-08 11:33 - 2014-02-09 22:39 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 14:01 - 2014-02-07 15:52 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:01 - 2010-10-13 06:42 - 02369456 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2014-02-07 14:01 - 2010-08-20 21:53 - 00086016 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSplitter.ocx
2014-02-07 14:01 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx
2014-02-07 14:01 - 2010-06-01 14:45 - 01005088 _____ (Bennet-Tec Information Systems, Inc) C:\Windows\SysWOW64\TList8.ocx
2014-02-07 14:01 - 2010-03-25 10:33 - 00171752 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtRTF2.ocx
2014-02-07 14:01 - 2009-10-13 00:02 - 00044736 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSubclass.dll
2014-02-07 14:01 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx
2014-02-07 14:01 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx
2014-02-07 14:01 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:04 - 2014-02-07 00:05 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 11:42 - 2014-02-06 11:43 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-03 22:48 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:36 - 2014-02-06 20:03 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:35 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:21 - 2014-02-01 22:22 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-15 23:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 23:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 23:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe

==================== One Month Modified Files and Folders =======

2014-02-10 21:01 - 2014-02-09 22:41 - 00018697 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-10 21:01 - 2014-02-08 11:34 - 00000000 ____D () C:\FRST
2014-02-10 20:56 - 2012-09-07 13:56 - 01542696 _____ () C:\Windows\WindowsUpdate.log
2014-02-10 20:34 - 2012-05-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-10 20:19 - 2012-08-05 18:42 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000UA.job
2014-02-10 19:19 - 2012-01-28 18:31 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2B06E81-3F74-4B88-BE96-FB5A7666A9C4}
2014-02-10 17:48 - 2014-02-10 17:48 - 00987425 _____ () C:\Users\kriepel\Desktop\SecurityCheck.exe
2014-02-10 17:45 - 2014-02-10 17:45 - 02347384 _____ (ESET) C:\Users\kriepel\Downloads\esetsmartinstaller_enu.exe
2014-02-10 17:38 - 2011-02-10 20:25 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-10 17:38 - 2011-02-10 20:25 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-10 17:38 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-10 17:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-10 03:56 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-10 03:56 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-10 03:48 - 2012-08-25 19:34 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-10 03:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 03:47 - 2013-02-04 20:48 - 00015641 _____ () C:\Windows\setupact.log
2014-02-09 22:41 - 2014-02-09 22:39 - 00000000 ____D () C:\Users\kriepel\Desktop\FRST-OlderVersion
2014-02-09 22:39 - 2014-02-08 11:33 - 02170880 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-09 22:39 - 2012-08-05 18:42 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3121445375-2444279003-4231372175-1000Core.job
2014-02-09 13:23 - 2014-02-09 13:23 - 00006501 _____ () C:\Users\kriepel\Desktop\JRT.txt
2014-02-09 13:13 - 2014-02-09 13:13 - 00002864 _____ () C:\Users\kriepel\Desktop\AdwCleaner[R1].txt
2014-02-09 13:13 - 2013-10-13 12:06 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 13:11 - 2013-10-05 17:05 - 00000000 ____D () C:\AdwCleaner
2014-02-09 13:03 - 2013-02-15 21:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-09 13:03 - 2013-02-04 20:48 - 00384488 _____ () C:\Windows\PFRO.log
2014-02-09 12:48 - 2014-02-09 12:48 - 01037530 _____ (Thisisu) C:\Users\kriepel\Desktop\JRT.exe
2014-02-09 12:47 - 2014-02-09 12:47 - 01166132 _____ () C:\Users\kriepel\Desktop\adwcleaner.exe
2014-02-09 12:34 - 2014-02-09 12:34 - 00016406 _____ () C:\Users\kriepel\Desktop\W80H+r1i.htm
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 15:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 15:52 - 2014-02-07 14:01 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 00:18 - 2011-09-17 09:05 - 00000000 ___RD () C:\Users\kriepel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:05 - 2014-02-07 00:04 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 23:55 - 2014-02-06 23:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 20:44 - 2012-07-02 21:32 - 00000000 ___DC () C:\Users\kriepel\AppData\Local\MigWiz
2014-02-06 20:03 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-06 18:40 - 2013-01-07 19:28 - 00000000 ____D () C:\Users\kriepel\Desktop\Firma
2014-02-06 14:09 - 2012-01-27 17:23 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\vlc
2014-02-06 11:43 - 2014-02-06 11:42 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:34 - 2011-10-23 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:29 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel\AppData\Local\VirtualStore
2014-02-03 22:56 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel
2014-02-03 22:54 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:54 - 2013-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-03 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:36 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 22:32 - 2012-10-28 17:00 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Downloaded Installations
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 22:07 - 2014-02-02 22:07 - 01166132 _____ () C:\Users\kriepel\Downloads\adwcleaner-3.018.exe
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-02 00:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:25 - 2013-04-18 20:14 - 00001247 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DVDVideoSoft
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-01 22:22 - 2014-02-01 22:21 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-17 01:00 - 2009-07-14 05:45 - 00298768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-17 00:44 - 2013-07-16 10:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-17 00:40 - 2011-02-10 21:56 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-12 12:01 - 2014-01-12 12:01 - 00001898 _____ () C:\Users\kriepel\Desktop\IrfanView Thumbnails.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00001006 _____ () C:\Users\kriepel\Desktop\IrfanView.lnk
2014-01-12 12:01 - 2014-01-12 12:01 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-12 12:01 - 2012-05-28 15:41 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\IrfanView
2014-01-12 11:58 - 2014-01-12 11:58 - 01883792 _____ (Irfan Skiljan) C:\Users\kriepel\Downloads\iview437_setup.exe
2014-01-12 11:55 - 2013-01-17 16:53 - 00001074 _____ () C:\Users\Public\Desktop\VLC media player.lnk

Some content of TEMP:
====================
C:\Users\kriepel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 11:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Herzlichsten Dank,
vorallem für die schnelle Hilfe!
Alles läuft wieder super und ich achte nun noch aufmerksamer was so alles über den Browser kommt!

Gruß

Gern Geschehen

Hallo,
ich kann momentan leider "Code einfügen" nicht verwenden. Ich hoffe so geht es auch.
Den Screenshot habe ich gemacht. Aber jetzt hast Du mich erwischt, wie füge ich den jetzt hier ein?FRST Additions Logfile:
FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01
Ran by kriepel at 2014-02-14 20:19:53
Running from C:\Users\kriepel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

1&1 Surf-Stick (x32 Version: 1.0.0.2 - )
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x32 Version:  - )
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Hidden
AllDup 3.4.24 (x32 Version: 3.4.24 - Michael Thummerer Software Design)
Amazon Kindle (HKCU Version:  - Amazon)
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17 - Amazon Services LLC)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.26 - Atheros Communications Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.5.1.1249 - APN, LLC)
BatteryCare 0.9.15.0 (x32 Version: 0.9.15.0 - Filipe Lourenço)
Canon Utilities CameraWindow DC 8 (x32 Version: 8.9.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional (x32 Version: 3.12.20.0 - Canon Inc.)
Canon Utilities ImageBrowser EX (x32 Version: 1.0.1.32 - Canon Inc.)
Canon Utilities PhotoStitch (x32 Version: 3.1.23.47 - Canon Inc.)
CDex - Open Source Digital Audio CD Extractor (x32 Version: 1.70.4.2009 - Georgy Berdyshev)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.1.320 (x32 Version: 3.2.1.320 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (x32 Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Earth (x32 Version: 6.2.2.6613 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HP FWUpdateEDO2 (x32 Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet 6700 - Grundlegende Software für das Gerät (Version: 25.0.619.0 - Hewlett-Packard Co.)
HP Officejet 6700 Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)
HP Update (x32 Version: 5.003.000.004 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2226 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.37 - Irfan Skiljan)
iSpy (x32 Version: 4.7.7 - iSpy)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Medion Home Cinema (x32 Version: 8.0.2608 - CyberLink Corp.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Baseline Security Analyzer 2.2 (Version: 2.2.2170 - Microsoft Corporation)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
MotoHelper 2.0.53 Driver 5.2.0 (x32 Version: 2.0.53 - Motorola)
MotoHelper MergeModules (x32 Version: 1.2.0 - Motorola) Hidden
Motorola Mobile Drivers Installation 5.2.0 (Version: 5.2.0 - Motorola Inc.) Hidden
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
NetWorx 5.2.2 (Version:  - Softperfect Research)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Netzmanager (x32 Version: 1.071 - Deutsche Telekom AG)
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
Personal Backup 5.5 (x32 Version: 5.3 - J. Rathlev)
phonostar-Player Version 3.02.2 (x32 Version:  - )
PHotkey (x32 Version: 1.00.0017 - Pegatron Corporation)
PlayReady PC Runtime amd64 (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6136 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (x32 Version: 1.00.0148 - REALTEK Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Samsung Mobile phone USB driver Drive Software (Version:  - )
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 USB Driver Installer (x32 Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.7011) (x32 Version: 3.0.0.7011 - Secunia)
Secure Banking Version 1.5.1 (x32 Version: 1.5.1 - Hopfgartner Niklas)
Skype Click to Call (x32 Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.7 (x32 Version: 6.7.102 - Skype Technologies S.A.)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0 - Adobe Systems Incorporated)
Synaptics Pointing Device Driver (Version: 15.0.4.0 - Synaptics Incorporated)
TeamViewer 8 (x32 Version: 8.0.16642 - TeamViewer)
VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Win7codecs (x32 Version: 3.2.0 - Shark007)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
WinPatrol (Version: 26.1.2013.0 - BillP Studios)
X10 Hardware(TM) (x32 Version:  - )
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

11-02-2014 21:30:36 Ende der Bereinigung
13-02-2014 17:46:35 Windows Update
14-02-2014 09:36:22 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {12C29228-A875-47D6-A5B6-5997E7EB3CFE} - System32\Tasks\MotoHelper MUM => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {14AA7126-DE0A-4F13-B13E-5BCAFA737706} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {176B29E0-3076-4B0E-A7C0-65029333F9DC} - System32\Tasks\MotoHelper Routing => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {27A9F0C4-9139-43E9-B360-6A421E0F059F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {320CCF11-488B-4528-86FD-4C8CC95358B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-17] (Google Inc.)
Task: {38FE6597-C4CE-4865-9C55-D79BF1011977} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-17] (Google Inc.)
Task: {43253897-8D31-42F9-B278-CD6780C68880} - System32\Tasks\{856AFD78-239C-4564-8493-2CFF15EB12A7} => Firefox.exe hxxp://ui.skype.com/ui/0/6.7.0.102/de/go/help.faq.installer?LastError=1618
Task: {4546E714-3CDB-49BA-A587-FF9F00D6DC20} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe
Task: {4A0A5A7F-9345-4EE2-BAA7-8B7CA6C15DA4} - System32\Tasks\{E2332988-BC12-41B1-AB55-F57BBAD7AE44} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe
Task: {66A8B8D3-5BA4-4497-B747-F395438C6F28} - System32\Tasks\{9F33C0BF-EAB7-472B-98FE-E2777E5675D0} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {683630C5-6FD8-4C95-ABE9-83E516B71CC4} - System32\Tasks\{7585BC53-A2D7-4AEB-878E-75ABF0CB551A} => C:\Program Files (x86)\WatchMyCam\WatchMyCam.exe [2012-02-10] (www.WatchMyCam.de)
Task: {79EB526B-414F-429D-A6C5-9995AA430889} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {7CBABA52-2D1D-4403-AA0A-CAF0C80F17FF} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-03-24] (Hewlett-Packard)
Task: {831B2694-439F-452B-9EE2-F4440A0C00D1} - System32\Tasks\{E961E590-D8EB-467C-BF76-E94DC6216F31} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {A09B0256-F73A-4B8F-AD3D-53781ABBAB43} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {A0D93F55-7502-416D-A533-03D5FAC5E1B5} - System32\Tasks\{74C9C7D0-47FA-443B-8E11-1260399C2982} => C:\Program Files (x86)\Canon\ImageBrowser EX\ImageBrowserEX.exe [2012-02-07] ()
Task: {A65CA375-1277-4284-B6C2-EAC4B8715DC9} - System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {AC39A37A-B036-4422-A923-ED37EA251D03} - System32\Tasks\{D08F8096-DAF9-4BF6-A314-71E968048195} => C:\Program Files (x86)\WatchMyCam\WatchMyCam.exe [2012-02-10] (www.WatchMyCam.de)
Task: {BD65572B-506C-4355-8EB7-DB12D9A76554} - System32\Tasks\{FC5289D4-8D55-4BCB-AC5F-F24523F593A6} => C:\Program Files (x86)\Secure Banking\SecureBanking.exe [2013-07-11] (Secure Banking)
Task: {BE6C8EBE-8B9E-480D-B6DB-36D26DEF30C3} - System32\Tasks\MotoHelper Update => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {C0158E9F-C2C1-43CF-8E80-DC5BDAB2C154} - System32\Tasks\MotoHelper Initial Update => C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperUpdate.exe [2011-08-08] ()
Task: {D3FE39DE-9CFD-432C-ACE6-FBAFF3F0AEA6} - System32\Tasks\Google Updater and Installer => C:\Users\kriepel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {FAA3C95F-4262-48E9-9326-C8F02DC07E61} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-08-08 23:11 - 2011-08-08 23:11 - 00681840 _____ () C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
2011-03-11 17:19 - 2009-12-19 00:20 - 00462856 ____R () C:\Program Files (x86)\PHotkey\PVDAgent.exe
2012-01-10 21:12 - 2012-01-10 21:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-02 19:47 - 2012-07-26 08:27 - 00252928 _____ () C:\Program Files (x86)\BatteryCare\OpenHardwareMonitorLib.dll
2013-02-18 19:43 - 2010-12-08 10:45 - 00139088 _____ () C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
2013-02-09 19:56 - 2013-07-11 23:21 - 00002560 _____ () C:\Program Files (x86)\Secure Banking\sbservice.exe
2013-02-16 20:03 - 2012-12-10 02:46 - 00600868 ____N () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll
2013-02-09 19:56 - 2013-07-11 23:21 - 00017920 _____ () C:\Program Files (x86)\Secure Banking\SecureBanking.dll
2013-02-09 19:56 - 2013-07-11 23:21 - 00008704 _____ () C:\Program Files (x86)\Secure Banking\funcs.dll
2014-02-14 00:48 - 2014-02-14 00:48 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-06 11:34 - 2014-02-06 11:34 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:0507A16B

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^watchmi tray.lnk => C:\Windows\pss\watchmi tray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^kriepel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Versandhelfer.lnk => C:\Windows\pss\Versandhelfer.lnk.Startup
MSCONFIG\startupreg: (default) => 
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AmIcoSinglun64 => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: NetWorx => "C:\Program Files\NetWorx\networx.exe" /auto
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: phonostarTimer => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
MSCONFIG\startupreg: RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: UIExec => "C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe"
MSCONFIG\startupreg: YouCam Mirage => "C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
MSCONFIG\startupreg: YouCam Tray => "C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe" /s

==================== Faulty Device Manager Devices =============

Name: Officejet 6700
Description: Officejet 6700
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/14/2014 11:01:04 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2014 00:49:34 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/11/2014 10:41:39 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/11/2014 10:35:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2014 10:35:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/10/2014 09:20:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/10/2014 09:10:23 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/10/2014 08:34:19 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/10/2014 08:33:58 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/10/2014 05:53:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (02/14/2014 11:01:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Routing und RAS" wurde mit folgendem dienstspezifischem Fehler beendet: %%11004.

Error: (02/14/2014 11:01:10 AM) (Source: RemoteAccess) (User: )
Description: Der momentan konfigurierte Authentifizierungsanbieter konnte nicht geladen und initialisiert werden. Der angeforderte Name ist gültig, es wurden jedoch keine Daten des angeforderten Typs gefunden.

Error: (02/14/2014 10:58:47 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (02/14/2014 00:25:48 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.102 mit dem Computer mit der
Netzwerkhardwareadresse 18-59-33-11-12-D6 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (02/13/2014 06:38:11 PM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.108 mit dem Computer mit der
Netzwerkhardwareadresse 20-4E-7F-AC-1C-26 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (02/11/2014 10:35:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Routing und RAS" wurde mit folgendem dienstspezifischem Fehler beendet: %%11004.

Error: (02/11/2014 10:35:51 PM) (Source: RemoteAccess) (User: )
Description: Der momentan konfigurierte Authentifizierungsanbieter konnte nicht geladen und initialisiert werden. Der angeforderte Name ist gültig, es wurden jedoch keine Daten des angeforderten Typs gefunden.

Error: (02/10/2014 03:48:48 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Routing und RAS" wurde mit folgendem dienstspezifischem Fehler beendet: %%11004.

Error: (02/10/2014 03:48:46 AM) (Source: RemoteAccess) (User: )
Description: Der momentan konfigurierte Authentifizierungsanbieter konnte nicht geladen und initialisiert werden. Der angeforderte Name ist gültig, es wurden jedoch keine Daten des angeforderten Typs gefunden.

Error: (02/10/2014 03:47:57 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎02.‎2014 um 03:47:12 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (02/14/2014 11:01:04 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/14/2014 00:49:34 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/11/2014 10:41:39 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/11/2014 10:35:57 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2014 10:35:47 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\phonostar-Player\phonostar.exe

Error: (02/10/2014 09:20:25 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\$RECYCLE.BIN\S-1-5-21-3121445375-2444279003-4231372175-1000\$RD47KF6.exe

Error: (02/10/2014 09:10:23 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (02/10/2014 08:34:19 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\phonostar-player\phonostar.exe

Error: (02/10/2014 08:33:58 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (02/10/2014 05:53:07 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\kriepel\Downloads\esetsmartinstaller_enu.exe


CodeIntegrity Errors:
===================================
  Date: 2013-02-04 14:18:38.506
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 14:02:38.672
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 13:18:21.958
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 02:00:35.899
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-04 01:53:08.109
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 20:52:40.029
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 20:31:40.015
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 18:03:07.902
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 17:53:30.147
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-02-03 17:22:05.319
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3893.14 MB
Available physical RAM: 2155.17 MB
Total Pagefile: 7784.47 MB
Available Pagefile: 5271.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:565.07 GB) (Free:400.04 GB) NTFS
Drive d: (Recover) (Fixed) (Total:30 GB) (Free:29.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=565 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

--- --- ---
FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by kriepel (administrator) on KRIEPEL-PC on 14-02-2014 20:18:36
Running from C:\Users\kriepel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Filipe Lourenço) C:\Program Files (x86)\BatteryCare\BatteryCare.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Secure Banking) C:\Program Files (x86)\Secure Banking\SecureBanking.exe
() C:\Program Files (x86)\Secure Banking\sbservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [404712 2013-01-04] (BillP Studios)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-12-08] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-23] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [SecureBanking] - C:\Program Files (x86)\Secure Banking\SecureBanking.exe [507904 2013-07-11] (Secure Banking)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\Run: [BatteryCare] - C:\Program Files (x86)\BatteryCare\BatteryCare.exe [752128 2013-10-28] (Filipe Lourenço)
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: G - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {8421570a-eac1-11e0-b758-e06995611895} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {84215719-eac1-11e0-b758-e06995611895} - H:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {a01cc603-8c4f-11e3-82f7-e06995611895} - G:\setup.exe -a
HKU\S-1-5-21-3121445375-2444279003-4231372175-1000\...\MountPoints2: {db996920-6016-11e1-988f-e06995611895} - G:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDND&bmod=MDND
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {07420B46-2754-41B1-AB45-CD31B68A99F0} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN25008179790232-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=fa252e12000000000000000000000000&q={searchTerms}&r=900
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.6.0_22\bin\jp2ssv.dll No File
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -  No File
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} -  No File
DPF: HKLM-x32 {B4CB8358-ABDB-47EE-BC2D-437B5DEBABCB} hxxp://192.168.2.107/AxViewer/AxMediaControl.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-29]
FF Extension: DownloadHelper - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: FastestFox - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-09-17]
FF Extension: NoScript - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-15]
FF Extension: Adblock Plus - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-17]
FF Extension: QuickJava - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-10-13]
FF Extension: FoxTab - C:\Users\kriepel\AppData\Roaming\Mozilla\Firefox\Profiles\cxq4plck.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2011-09-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-14]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-29] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-23] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-04-24] ()
R2 HPSLPSVC; C:\Users\kriepel\AppData\Local\Temp\7zS4975\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [227184 2011-08-10] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-12-08] ()
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [33048 2006-12-01] (X10 Wireless Technology, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-14 20:18 - 2014-02-14 20:19 - 00017628 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-14 20:18 - 2014-02-14 20:18 - 00000000 ____D () C:\FRST
2014-02-14 20:16 - 2014-02-14 20:16 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{D82D3D24-7900-461A-858D-B1998CBC5DB4}
2014-02-14 20:10 - 2014-02-14 20:10 - 02152960 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-14 10:38 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 10:38 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 10:37 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 10:37 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 10:37 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 10:37 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 10:37 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 10:37 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 10:37 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 10:37 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 10:37 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 10:37 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 10:37 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 10:37 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 10:37 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 10:37 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 10:37 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 10:37 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 10:37 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 10:37 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 10:37 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 10:37 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 10:37 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 10:37 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 10:37 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 10:37 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 10:37 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 10:37 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 10:37 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 10:37 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 10:37 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 10:37 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 10:37 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 10:37 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 10:37 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 10:37 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 10:37 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 10:37 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 10:37 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 10:37 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 10:37 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 01:00 - 2014-02-14 01:00 - 04095448 _____ (BrightFort LLC ) C:\Users\kriepel\Desktop\spywareblastersetup50.exe
2014-02-14 00:48 - 2014-02-14 00:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 18:51 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 18:51 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 18:51 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 18:51 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 18:51 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 18:51 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 18:51 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 18:51 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 18:51 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 18:51 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 18:51 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 18:51 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 18:51 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 18:51 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 18:51 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 18:51 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 18:51 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 18:51 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 18:51 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 18:51 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 18:51 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 18:51 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 18:51 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 18:51 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 18:51 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 18:50 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 18:50 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 18:50 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 14:01 - 2014-02-07 15:52 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 14:01 - 2010-10-13 06:42 - 02369456 _____ (Codejock Software) C:\Windows\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2014-02-07 14:01 - 2010-08-20 21:53 - 00086016 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSplitter.ocx
2014-02-07 14:01 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx
2014-02-07 14:01 - 2010-06-01 14:45 - 01005088 _____ (Bennet-Tec Information Systems, Inc) C:\Windows\SysWOW64\TList8.ocx
2014-02-07 14:01 - 2010-03-25 10:33 - 00171752 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtRTF2.ocx
2014-02-07 14:01 - 2009-10-13 00:02 - 00044736 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtSubclass.dll
2014-02-07 14:01 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx
2014-02-07 14:01 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx
2014-02-07 14:01 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:08 - 2014-02-07 00:16 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:04 - 2014-02-07 00:05 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 11:42 - 2014-02-06 11:43 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-03 22:48 - 2014-02-03 22:54 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:36 - 2014-02-06 20:03 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:35 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:21 - 2014-02-01 22:22 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-15 23:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 23:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 23:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 23:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-14 20:19 - 2014-02-14 20:18 - 00017628 _____ () C:\Users\kriepel\Desktop\FRST.txt
2014-02-14 20:18 - 2014-02-14 20:18 - 00000000 ____D () C:\FRST
2014-02-14 20:16 - 2014-02-14 20:16 - 00000000 ____D () C:\Users\kriepel\AppData\Local\{D82D3D24-7900-461A-858D-B1998CBC5DB4}
2014-02-14 20:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-14 20:10 - 2014-02-14 20:10 - 02152960 _____ (Farbar) C:\Users\kriepel\Desktop\FRST64.exe
2014-02-14 20:08 - 2012-01-28 18:31 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E2B06E81-3F74-4B88-BE96-FB5A7666A9C4}
2014-02-14 19:34 - 2012-05-12 11:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 19:21 - 2012-09-07 13:56 - 01926002 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 14:23 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 14:23 - 2009-07-14 05:45 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 11:00 - 2013-02-04 20:48 - 00015753 _____ () C:\Windows\setupact.log
2014-02-14 11:00 - 2012-08-25 19:34 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-14 11:00 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 10:59 - 2013-02-15 21:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 10:50 - 2013-07-16 10:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 10:47 - 2011-02-10 21:56 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-14 10:40 - 2011-09-21 19:37 - 01594964 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-14 10:40 - 2011-02-10 20:25 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 10:40 - 2011-02-10 20:25 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 10:40 - 2009-07-14 06:13 - 01594964 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 01:00 - 2014-02-14 01:00 - 04095448 _____ (BrightFort LLC ) C:\Users\kriepel\Desktop\spywareblastersetup50.exe
2014-02-14 00:48 - 2014-02-14 00:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-11 22:41 - 2011-09-17 09:06 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Google
2014-02-11 22:34 - 2013-02-04 20:48 - 00385322 _____ () C:\Windows\PFRO.log
2014-02-11 22:31 - 2013-10-13 12:06 - 00001980 _____ () C:\DelFix.txt
2014-02-09 13:13 - 2013-10-13 12:06 - 00000000 ____D () C:\Windows\ERUNT
2014-02-08 10:46 - 2014-02-08 10:46 - 00002984 _____ () C:\Windows\System32\Tasks\{5ACF4F37-5D00-4EB9-94E7-AA094C5FBB74}
2014-02-07 15:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-07 15:52 - 2014-02-07 14:01 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000987 _____ () C:\Users\Public\Desktop\AllDup.lnk
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\ProgramData\AllDup
2014-02-07 14:01 - 2014-02-07 14:01 - 00000000 ____D () C:\Program Files (x86)\AllDup
2014-02-07 00:18 - 2011-09-17 09:05 - 00000000 ___RD () C:\Users\kriepel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\Documents\PersBackup
2014-02-07 00:16 - 2014-02-07 00:08 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\PersBackup5
2014-02-07 00:08 - 2014-02-07 00:08 - 00001088 _____ () C:\Users\Public\Desktop\Personal Backup 5.lnk
2014-02-07 00:08 - 2014-02-07 00:08 - 00000000 ____D () C:\Program Files (x86)\Personal Backup 5
2014-02-07 00:05 - 2014-02-07 00:04 - 08337614 _____ (J. Rathlev ) C:\Users\kriepel\Downloads\pb-setup-5.5.0400.exe
2014-02-06 20:44 - 2012-07-02 21:32 - 00000000 ___DC () C:\Users\kriepel\AppData\Local\MigWiz
2014-02-06 20:03 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Motorola
2014-02-06 18:40 - 2013-01-07 19:28 - 00000000 ____D () C:\Users\kriepel\Desktop\Firma
2014-02-06 14:09 - 2012-01-27 17:23 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\vlc
2014-02-06 13:16 - 2014-02-14 10:37 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 10:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 10:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 10:37 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 10:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 10:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 10:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 10:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 10:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 10:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 10:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 10:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:43 - 2014-02-06 11:42 - 07080248 _____ () C:\Users\kriepel\Downloads\MyPhoneExplorer_1.8.5.exe
2014-02-06 11:38 - 2014-02-14 10:37 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:34 - 2012-05-12 11:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:34 - 2012-05-12 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:34 - 2011-10-23 10:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:32 - 2014-02-14 10:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:29 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel\AppData\Local\VirtualStore
2014-02-06 11:20 - 2014-02-14 10:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 10:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 10:37 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 10:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 10:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 10:37 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 10:37 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 10:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 10:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 10:37 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 10:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 10:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 10:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 10:37 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 10:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 10:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 10:37 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 10:37 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 10:37 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 10:37 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 10:37 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 10:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 10:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 10:37 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 10:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-03 22:56 - 2011-09-17 09:05 - 00000000 ____D () C:\Users\kriepel
2014-02-03 22:54 - 2014-02-03 22:48 - 00000000 ____D () C:\Program Files (x86)\Virtual WiFi Router
2014-02-03 22:54 - 2013-02-18 19:43 - 00000000 ____D () C:\Program Files (x86)\1&1 Surf-Stick
2014-02-03 22:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\Users\kriepel\Documents\Podcast
2014-02-03 22:36 - 2014-02-03 22:36 - 00000000 ____D () C:\ProgramData\Motorola Media Link
2014-02-03 22:36 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Motorola
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\ProgramData\Nero
2014-02-03 22:35 - 2014-02-03 22:35 - 00000000 ____D () C:\Program Files (x86)\Motorola Media Link
2014-02-03 22:34 - 2014-02-03 22:34 - 00003422 _____ () C:\Windows\System32\Tasks\MotoHelper Update
2014-02-03 22:34 - 2014-02-03 22:34 - 00003410 _____ () C:\Windows\System32\Tasks\MotoHelper MUM
2014-02-03 22:34 - 2014-02-03 22:34 - 00003404 _____ () C:\Windows\System32\Tasks\MotoHelper Routing
2014-02-03 22:34 - 2014-02-03 22:34 - 00003230 _____ () C:\Windows\System32\Tasks\MotoHelper Initial Update
2014-02-03 22:33 - 2014-02-03 22:33 - 00000000 ____D () C:\Program Files\Motorola Inc
2014-02-03 22:32 - 2012-10-28 17:00 - 00000000 ____D () C:\Users\kriepel\AppData\Local\Downloaded Installations
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Motousbnet_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motmodem_01007.Wdf
2014-02-03 21:38 - 2014-02-03 21:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motfilt_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motusbdevice_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgpfl_01007.Wdf
2014-02-03 21:37 - 2014-02-03 21:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_motccgp_01007.Wdf
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Motorola Shared
2014-02-03 21:36 - 2014-02-03 21:36 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-02-02 19:47 - 2014-02-02 19:47 - 00001051 _____ () C:\Users\Public\Desktop\BatteryCare.lnk
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\BatteryCare
2014-02-02 19:47 - 2014-02-02 19:47 - 00000000 ____D () C:\Program Files (x86)\BatteryCare
2014-02-02 19:46 - 2014-02-02 19:46 - 01560961 _____ () C:\Users\kriepel\Downloads\SetupBatteryCare_0.9.15.zip
2014-02-02 00:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 22:25 - 2014-02-01 22:25 - 00001540 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Users\kriepel\AppData\Roaming\DVDVideoSoft
2014-02-01 22:25 - 2013-04-18 20:13 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-02-01 22:22 - 2014-02-01 22:21 - 34012056 _____ (DVDVideoSoft Ltd. ) C:\Users\kriepel\Downloads\FreeYouTubeToMP3Converter.exe
2014-01-20 18:57 - 2014-01-20 18:57 - 00041984 _____ () C:\Users\kriepel\Downloads\Angebot_Reis_Fenster_.xls
2014-01-17 01:00 - 2009-07-14 05:45 - 00298768 _____ () C:\Windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\kriepel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 11:23

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---


Ich bin etwas verwirrt, das zweite Logfile ging ja nun doch mit Code.

Ich habe den Screenshot mal als JPG hochgeladen.

Rechtsklick > Löschen. Geht das?

Aus Chronik entfernen ging, jetzt ist alles weg aus den Downloads und im Moment kam auch kein weiterer Versuch eines Download.Ich beobachte und melde mich wieder.
Gruß

ok