Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet)

Hupit · 21.02.2014, 18:33

Hallo und danke für die Hilfe in Vorhaus

Ich habe eine Computer mit Win 7 Pro (Java ist nicht installiert), Thunderbird, Standard Browser ist Firefox auf dem auch NoScript Läuft.

Nun zu meinen vielleicht Problem ich habe ausversehen beim löschen der Spam Mails in eine Mail Geklickt

in der ein Bild angezeigt wurde der mich auf eine Webseite weitergeleitet hatt (Normalerweise zeigt er mir keine Bilder an keine Ahnung warum da) wo In der oberen Ecke ein kleines Feld erscheinen ist. Was darin stand kann ich nicht sagen habe das Fenster eigentlich sofort geschlossen.

Daten der Mail

Betreff: Verkauf von Drogen in der Apotheke
Von: Apotheke <apde76003556@cooleri.com.ua>
An: stelz@e-weitemeyer.de (nicht meine Emailadresse)

Meine Frage ist nun ob Sich da ein Programm schon durchgeschlichen haben kann.

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-02-2014
Ran by Hupit (ATTENTION: The logged in user is not administrator) on HUPIT-PC on 21-02-2014 19:16:57
Running from C:\Users\Hupit\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Electronic Arts) D:\Program Files (x86)\Origin\Origin.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6827664 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-06] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-24] (Logitech Inc.)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-08-07] (Microsoft Corporation)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [Steam] - D:\Program Files (x86)\Steam\Steam.exe [1822400 2014-02-20] (Valve Corporation)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [EADM] - D:\Program Files (x86)\Origin\Origin.exe [3598680 2014-02-15] (Electronic Arts)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [Epson Stylus Office BX320FW(Netzwerk)] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGIE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\Run: [HP Officejet 6700 (NET)] - C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\MountPoints2: {5028c97e-feb8-11e2-9e6a-806e6f6e6963} - E:\AUTORUN.EXE
HKU\S-1-5-21-2540011524-3140850547-2436867168-1000\...\MountPoints2: {97b15c19-fe1a-11e2-8d17-806e6f6e6963} - F:\.\Bin\ASSETUP.exe
Startup: C:\Users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8AA59245C892CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797
FF Homepage: Google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: YouTube Unblocker - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\youtubeunblocker@unblocker.yt [2014-01-24]
FF Extension: Video DivX Helper Light - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{33e12104-b9a7-4f69-8966-f18fd276054a}.xpi [2013-11-05]
FF Extension: NoScript - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-10-08]
FF Extension: {c0904d71-7eb3-4105-abbf-71a2d256221a} - C:\Users\Hupit\AppData\Roaming\Mozilla\Firefox\Profiles\xo8ajt5r.default-1381237943797\Extensions\{c0904d71-7eb3-4105-abbf-71a2d256221a}.xpi [2013-11-04]

==================== Services (Whitelisted) =================

R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [908856 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
U2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe [1457664 2012-06-19] (ASUSTeK Computer Inc.)
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-02-16] (BitRaider, LLC)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-11-21] ()
R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [5087584 2013-10-01] (TeamViewer GmbH)

==================== Drivers (Whitelisted) ====================

R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-09-14] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
R3 ASUSstpt; C:\Windows\System32\DRIVERS\ASUSstpt.sys [24648 2011-09-15] (MCCI Corporation)
R3 ASUSumsc; C:\Windows\System32\DRIVERS\ASUSumsc.sys [141896 2011-09-15] (MCCI Corporation)
R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-12-09] (Avira GmbH)
R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-12-09] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15168 2012-03-10] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-21 19:14 - 2014-02-21 19:14 - 00019021 _____ () C:\Users\Hupit\Downloads\Addition.txt
2014-02-21 19:13 - 2014-02-21 19:17 - 00013363 _____ () C:\Users\Hupit\Downloads\FRST.txt
2014-02-21 19:13 - 2014-02-21 19:16 - 00000000 ____D () C:\FRST
2014-02-21 19:12 - 2014-02-21 19:12 - 02153984 _____ (Farbar) C:\Users\Hupit\Downloads\FRST64.exe
2014-02-20 16:18 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-20 16:18 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-19 21:07 - 2014-02-19 21:08 - 17954672 _____ (EaseUS ) C:\Users\Hupit\Downloads\partition_recovery_5.6.1.exe
2014-02-19 17:38 - 2014-02-19 17:38 - 04978424 _____ (EaseUS ) C:\Users\Hupit\Downloads\drw_trial.exe
2014-02-19 17:36 - 2014-02-19 17:36 - 00000957 _____ () C:\Users\Admin\Desktop\Smart Data Recovery.lnk
2014-02-19 17:36 - 2014-02-19 17:36 - 00000954 _____ () C:\Users\Admin\Desktop\Klicken Sie hier, um PC-Fehler zu finden und zu reparieren.lnk
2014-02-19 17:35 - 2014-02-19 17:35 - 02761752 _____ (Smart PC Solutions ) C:\Users\Hupit\Downloads\recoverysetup43.exe
2014-02-18 18:39 - 2014-02-21 16:21 - 00001951 _____ () C:\Windows\setupact.log
2014-02-18 18:39 - 2014-02-18 18:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-16 18:00 - 2014-02-16 18:00 - 00000000 ____D () C:\ProgramData\BitRaider
2014-02-15 16:04 - 2014-02-15 16:05 - 01416079 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de(1).zip
2014-02-15 16:04 - 2014-02-15 16:04 - 01158652 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de.zip
2014-02-15 06:57 - 2014-02-15 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 17:05 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 17:05 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 17:05 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 17:05 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 17:05 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 17:05 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 17:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 17:05 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 17:05 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 17:05 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 17:05 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 17:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 17:05 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 17:05 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 17:05 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 17:04 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 17:04 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 17:04 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 17:04 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 17:04 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 17:04 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 17:03 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 17:03 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 17:03 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 17:03 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 17:03 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 17:03 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 17:03 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 17:03 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 17:03 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 17:03 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 17:03 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 17:03 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 17:03 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 17:03 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 17:03 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 17:03 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 17:03 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 17:03 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 17:03 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 17:03 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 17:03 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 17:03 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 17:03 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 17:03 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 17:03 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 17:03 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 17:03 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 17:03 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 17:03 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 17:03 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 17:03 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 17:03 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 17:03 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 17:03 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 17:03 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 17:03 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 17:03 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 17:03 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 17:03 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-10 17:55 - 2014-02-10 17:55 - 00001202 _____ () C:\Users\Admin\Desktop\Format Factory.lnk
2014-02-10 17:55 - 2014-02-10 17:55 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2014-02-10 17:53 - 2014-02-10 17:54 - 58014512 _____ (Free Time) C:\Users\Hupit\Downloads\FFSetup3.3.1.0.exe
2014-02-08 21:28 - 2013-02-23 18:24 - 00002089 _____ () C:\Users\Hupit\Documents\configuration.php
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\Visan
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-03 19:34 - 2014-02-16 14:07 - 00000600 _____ () C:\Users\Hupit\AppData\Roaming\winscp.rnd
2014-02-03 16:16 - 2014-02-03 16:32 - 701560614 _____ () C:\Users\Hupit\Downloads\2013-09-25-wheezy-raspbian-lcd4.7z
2014-02-02 18:10 - 2014-02-16 16:08 - 00002184 ____H () C:\Users\Hupit\Documents\Default.rdp
2014-02-02 17:29 - 2014-02-04 16:28 - 00000806 _____ () C:\Users\Hupit\Desktop\Raspberry - Verknüpfung.lnk
2014-02-02 17:28 - 2014-02-02 17:28 - 00000600 _____ () C:\Users\Admin\AppData\Roaming\winscp.rnd
2014-02-02 17:27 - 2014-02-02 17:27 - 00002141 _____ () C:\Users\Admin\Desktop\root@Hupitpi.lnk
2014-02-02 17:23 - 2014-02-02 17:23 - 00002129 _____ () C:\Users\Admin\Desktop\pi@Hupitpi.lnk
2014-02-02 17:22 - 2014-02-02 17:22 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-02 17:17 - 2014-02-17 20:09 - 00000600 _____ () C:\Users\Hupit\AppData\Local\PUTTY.RND
2014-02-01 19:26 - 2014-02-01 19:26 - 00000425 _____ () C:\Users\Hupit\Downloads\listen-dsl.pls
2014-01-28 19:28 - 2014-01-28 19:28 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\ProgramData\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-28 19:11 - 2013-12-09 11:37 - 00141376 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwot.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00114608 _____ (Avira GmbH) C:\Windows\system32\Drivers\avfwim.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-28 19:11 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-28 19:01 - 2014-02-21 18:45 - 00817029 _____ () C:\Windows\WindowsUpdate.log
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird
2014-01-28 18:19 - 2014-01-28 18:30 - 144752616 _____ () C:\Users\Admin\Desktop\avira_internet_security_de.exe
2014-01-28 18:18 - 2014-01-28 18:18 - 00227096 _____ () C:\Users\Admin\Desktop\avira_registry_cleaner_de.exe
2014-01-28 18:15 - 2014-01-28 18:16 - 01300824 _____ () C:\Users\Hupit\Downloads\avira_support_collector_de.exe
2014-01-27 21:07 - 2014-02-11 16:24 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\HpUpdate
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-24 19:07 - 2014-01-24 19:07 - 00000000 ____D () C:\Users\Hupit\Documents\OneNote-Notizbücher
2014-01-24 18:59 - 2014-01-25 03:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-01-24 18:59 - 2014-01-24 18:59 - 00000000 ____D () C:\Windows\PCHEALTH
2014-01-24 18:58 - 2014-01-25 18:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-24 18:57 - 2014-01-25 18:28 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-24 18:57 - 2014-01-24 18:57 - 00000000 __RHD () C:\MSOCache
2014-01-24 16:22 - 2014-01-24 16:23 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-01-24 16:07 - 2014-01-24 16:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\AVAST Software
2014-01-22 23:07 - 2014-01-22 23:07 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390428484
2014-01-22 21:20 - 2014-01-23 05:26 - 00007669 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg
2014-01-22 19:26 - 2014-01-22 19:27 - 00000000 _____ () C:\Users\Hupit\pathping

==================== One Month Modified Files and Folders =======

2014-02-21 19:17 - 2014-02-21 19:13 - 00013363 _____ () C:\Users\Hupit\Downloads\FRST.txt
2014-02-21 19:16 - 2014-02-21 19:13 - 00000000 ____D () C:\FRST
2014-02-21 19:14 - 2014-02-21 19:14 - 00019021 _____ () C:\Users\Hupit\Downloads\Addition.txt
2014-02-21 19:12 - 2014-02-21 19:12 - 02153984 _____ (Farbar) C:\Users\Hupit\Downloads\FRST64.exe
2014-02-21 19:01 - 2013-08-06 20:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-21 18:55 - 2013-08-13 20:29 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-21 18:45 - 2014-01-28 19:01 - 00817029 _____ () C:\Windows\WindowsUpdate.log
2014-02-21 16:21 - 2014-02-18 18:39 - 00001951 _____ () C:\Windows\setupact.log
2014-02-21 16:20 - 2009-07-14 05:45 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-21 16:20 - 2009-07-14 05:45 - 00015040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-21 16:15 - 2013-08-06 20:45 - 00000000 ____D () C:\ProgramData\Origin
2014-02-21 16:14 - 2013-08-13 20:29 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-21 16:10 - 2013-08-06 19:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-21 16:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 16:18 - 2013-08-06 19:48 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-19 21:08 - 2014-02-19 21:07 - 17954672 _____ (EaseUS ) C:\Users\Hupit\Downloads\partition_recovery_5.6.1.exe
2014-02-19 17:50 - 2013-08-31 02:03 - 00000000 ____D () C:\Users\Hupit\Desktop\Programme
2014-02-19 17:38 - 2014-02-19 17:38 - 04978424 _____ (EaseUS ) C:\Users\Hupit\Downloads\drw_trial.exe
2014-02-19 17:36 - 2014-02-19 17:36 - 00000957 _____ () C:\Users\Admin\Desktop\Smart Data Recovery.lnk
2014-02-19 17:36 - 2014-02-19 17:36 - 00000954 _____ () C:\Users\Admin\Desktop\Klicken Sie hier, um PC-Fehler zu finden und zu reparieren.lnk
2014-02-19 17:35 - 2014-02-19 17:35 - 02761752 _____ (Smart PC Solutions ) C:\Users\Hupit\Downloads\recoverysetup43.exe
2014-02-18 19:15 - 2013-08-16 12:27 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\TS3Client
2014-02-18 18:46 - 2013-08-13 20:55 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\EVEMon
2014-02-18 18:39 - 2014-02-18 18:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-17 20:09 - 2014-02-02 17:17 - 00000600 _____ () C:\Users\Hupit\AppData\Local\PUTTY.RND
2014-02-17 16:34 - 2013-09-01 07:43 - 00000000 ____D () C:\Windows\Minidump
2014-02-17 16:31 - 2013-08-06 21:30 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-16 18:00 - 2014-02-16 18:00 - 00000000 ____D () C:\ProgramData\BitRaider
2014-02-16 16:08 - 2014-02-02 18:10 - 00002184 ____H () C:\Users\Hupit\Documents\Default.rdp
2014-02-16 14:07 - 2014-02-03 19:34 - 00000600 _____ () C:\Users\Hupit\AppData\Roaming\winscp.rnd
2014-02-15 16:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 16:05 - 2014-02-15 16:04 - 01416079 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de(1).zip
2014-02-15 16:04 - 2014-02-15 16:04 - 01158652 _____ () C:\Users\Hupit\Downloads\Portscanner-u-de.zip
2014-02-15 15:08 - 2013-08-06 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 06:57 - 2014-02-15 06:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 17:05 - 2013-08-06 17:49 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-13 17:05 - 2009-07-14 18:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2014-02-13 17:05 - 2009-07-14 18:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2014-02-13 17:05 - 2009-07-14 06:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-13 16:53 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-11 23:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-11 16:24 - 2014-01-27 21:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\HpUpdate
2014-02-10 18:00 - 2013-08-13 16:21 - 00000000 ____D () C:\Users\Hupit\AppData\Local\Paint.NET
2014-02-10 17:55 - 2014-02-10 17:55 - 00001202 _____ () C:\Users\Admin\Desktop\Format Factory.lnk
2014-02-10 17:55 - 2014-02-10 17:55 - 00000000 ____D () C:\Program Files (x86)\FreeTime
2014-02-10 17:54 - 2014-02-10 17:53 - 58014512 _____ (Free Time) C:\Users\Hupit\Downloads\FFSetup3.3.1.0.exe
2014-02-06 13:16 - 2014-02-13 17:03 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 17:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 17:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 17:03 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 17:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 17:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 17:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 17:03 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 17:03 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 17:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 17:03 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 17:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 17:03 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 17:03 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 17:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 17:03 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 17:03 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 17:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 17:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 17:03 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 17:03 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 17:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 17:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 17:03 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 17:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 17:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 17:03 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 17:03 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 17:03 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 17:03 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 17:03 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 17:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 17:03 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 17:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 17:03 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 17:03 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 17:03 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 17:03 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 17:03 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 21:01 - 2013-08-06 20:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 21:01 - 2013-08-06 20:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 16:28 - 2014-02-02 17:29 - 00000806 _____ () C:\Users\Hupit\Desktop\Raspberry - Verknüpfung.lnk
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\Visan
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-03 21:18 - 2014-02-03 21:18 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-03 16:32 - 2014-02-03 16:16 - 701560614 _____ () C:\Users\Hupit\Downloads\2013-09-25-wheezy-raspbian-lcd4.7z
2014-02-02 19:21 - 2013-08-06 17:08 - 00000000 ____D () C:\Users\Hupit
2014-02-02 17:28 - 2014-02-02 17:28 - 00000600 _____ () C:\Users\Admin\AppData\Roaming\winscp.rnd
2014-02-02 17:27 - 2014-02-02 17:27 - 00002141 _____ () C:\Users\Admin\Desktop\root@Hupitpi.lnk
2014-02-02 17:23 - 2014-02-02 17:23 - 00002129 _____ () C:\Users\Admin\Desktop\pi@Hupitpi.lnk
2014-02-02 17:22 - 2014-02-02 17:22 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-02-01 19:26 - 2014-02-01 19:26 - 00000425 _____ () C:\Users\Hupit\Downloads\listen-dsl.pls
2014-01-28 23:03 - 2013-08-13 15:57 - 00000000 ____D () C:\ProgramData\CCP
2014-01-28 19:28 - 2014-01-28 19:28 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\Avira
2014-01-28 19:17 - 2013-09-16 15:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Overwolf
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\ProgramData\Avira
2014-01-28 19:11 - 2014-01-28 19:11 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-28 19:00 - 2013-09-01 17:57 - 00072512 _____ () C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Thunderbird
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2014-01-28 18:45 - 2014-01-28 18:45 - 00000000 ____D () C:\Users\Admin\AppData\Local\Thunderbird
2014-01-28 18:30 - 2014-01-28 18:19 - 144752616 _____ () C:\Users\Admin\Desktop\avira_internet_security_de.exe
2014-01-28 18:18 - 2014-01-28 18:18 - 00227096 _____ () C:\Users\Admin\Desktop\avira_registry_cleaner_de.exe
2014-01-28 18:16 - 2014-01-28 18:15 - 01300824 _____ () C:\Users\Hupit\Downloads\avira_support_collector_de.exe
2014-01-25 22:58 - 2013-09-16 15:26 - 00000000 ____D () C:\Users\Hupit\AppData\Local\Overwolf
2014-01-25 18:57 - 2013-08-06 20:05 - 00072512 _____ () C:\Users\Hupit\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 18:40 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-01-25 18:39 - 2013-09-01 17:54 - 00000000 ____D () C:\Users\Admin
2014-01-25 18:28 - 2014-01-24 18:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-25 03:20 - 2009-07-14 05:45 - 00324632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-25 03:02 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-01-25 03:02 - 2014-01-24 18:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-01-25 03:01 - 2013-08-19 16:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-24 19:07 - 2014-01-24 19:07 - 00000000 ____D () C:\Users\Hupit\Documents\OneNote-Notizbücher
2014-01-24 19:07 - 2013-08-06 17:08 - 00000000 ___RD () C:\Users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 18:59 - 2014-01-24 18:59 - 00000000 ____D () C:\Windows\PCHEALTH
2014-01-24 18:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Users\Admin\AppData\Local\Microsoft Help
2014-01-24 18:58 - 2014-01-24 18:58 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-01-24 18:58 - 2009-07-14 19:18 - 00000000 ____D () C:\Windows\ShellNew
2014-01-24 18:57 - 2014-01-24 18:57 - 00000000 __RHD () C:\MSOCache
2014-01-24 16:23 - 2014-01-24 16:22 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-01-24 16:07 - 2014-01-24 16:07 - 00000000 ____D () C:\Users\Hupit\AppData\Roaming\AVAST Software
2014-01-23 05:26 - 2014-01-22 21:20 - 00007669 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg
2014-01-22 23:07 - 2014-01-22 23:07 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390428484
2014-01-22 20:50 - 2013-12-04 22:20 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation
2014-01-22 19:27 - 2014-01-22 19:26 - 00000000 _____ () C:\Users\Hupit\pathping

Some content of TEMP:
====================
C:\Users\Hupit\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================

--- --- ---

Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-02-2014
Ran by Hupit at 2014-02-21 19:17:13
Running from C:\Users\Hupit\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

3DMark 11 (x32 Version: 1.0.5 - Futuremark Corporation)
3DMark06 (x32 Version: 1.2.1 - Futuremark Corporation)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AI Suite II (x32 Version: 2.01.01 - ASUSTeK Computer Inc.)
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.14.3.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (x32 Version: 1.3.4.000 - Asmedia Technology)
Assassin's Creed IV Black Flag (x32 Version:  - Ubisoft)
Assassin's Creed(R) III v1.03 (x32 Version: 1.03 - Ubisoft)
ASUS GPU Tweak (x32 Version: 2.2.8.1 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.2.8.1 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (x32 Version: 1.0.018 - ASUSTek Computer Inc.)
Avira Internet Security (x32 Version: 14.0.2.286 - Avira)
Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts)
Battlefield 3™ (x32 Version: 1.0.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (x32 Version: 2.3.0 - EA Digital Illusions CE AB)
BitRaider Web Client (x32 Version: 1.1.9.9 - BitRaider, LLC)
Call of Duty: Ghosts - Multiplayer (x32 Version:  - )
Call of Duty: Ghosts (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 - Multiplayer (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (x32 Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (x32 Version:  - Infinity Ward)
CCleaner (Version: 4.10 - Piriform)
Counter-Strike: Source (x32 Version: 1.0.0.0 - Valve)
Dota 2 (x32 Version:  - Valve)
Druckerdeinstallation für EPSON BX320FW Series (Version:  - SEIKO EPSON Corporation)
EaseUS Data Recovery Wizard 7.0 (x32 Version:  - EaseUS)
EpsonNet Print (x32 Version: 2.6.0 - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (x32 Version: 3.3b - SEIKO EPSON CORPORATION)
EVEMon (x32 Version: 1.8.5.4162 - battleclinic.com)
FormatFactory 3.3.1.0 (x32 Version: 3.3.1.0 - Format Factory)
Futuremark SystemInfo (x32 Version: 4.17.0 - Futuremark Corporation)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GIMP 2.8.6 (Version: 2.8.6 - The GIMP Team)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Half-Life 2: Deathmatch (x32 Version:  - Valve)
Heaven Benchmark version 4.0 (x32 Version: 4.0 - Unigine Corp.)
HP Officejet 6700 - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photo Creations (x32 Version: 1.0.0.9572 - HP)
HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
Intel(R) Network Connections 17.3.63.0 (Version: 17.3.63.0 - Intel)
Intel(R) Network Connections 17.3.63.0 (Version: 17.3.63.0 - Intel) Hidden
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.46 (Version: 8.46.27 - Logitech Inc.)
Media Go (x32 Version: 2.5.290 - Sony)
Media Go Video Playback Engine 1.120.108.05010 (x32 Version: 1.120.108.05010 - Sony)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2 (Version: 1.8.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3221 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (Version: 1.2.20 - NVIDIA Corporation)
OpenAL (x32 Version:  - )
Origin (x32 Version: 9.2.1.4399 - Electronic Arts, Inc.)
Overwolf (x32 Version: 0.47.284 - Overwolf)
Paint.NET v3.5.10 (Version: 3.60.0 - dotPDN LLC)
PlayStation(R)Store (x32 Version: 4.16.2.15545 - Sony Computer Entertainment Inc.)
PunkBuster Services (x32 Version: 0.991 - Even Balance, Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6699 - Realtek Semiconductor Corp.)
SDFormatter (x32 Version: 4.0.0 - SD Association)
SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden
Smart Data Recovery v4.3 (x32 Version: 4.3 - Smart PC Solutions)
Sniper: Ghost Warrior (x32 Version:  - City Interactive)
SpeedFan (remove only) (x32 Version:  - )
Star Wars The Old Republic (x32 Version: 7.0.0.21 - Bioware/EA)
Star Wars: The Old Republic (x32 Version: 1.00 - Electronic Arts, Inc.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (Version: 3.0.11 - TeamSpeak Systems GmbH)
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
TextMaker Viewer (x32 Version:  - SoftMaker Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Uplay (x32 Version: 4.0 - Ubisoft)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
WinSCP 5.5.1 (x32 Version: 5.5.1 - Martin Prikryl)
World of Warcraft (x32 Version:  - Blizzard Entertainment)

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/21/2014 04:15:25 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/21/2014 04:14:50 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/21/2014 04:11:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: wiaservc.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7ca0f
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000047a6b
ID des fehlerhaften Prozesses: 0x9c0
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3

Error: (02/20/2014 06:08:06 PM) (Source: Avira Antivirus) (User: NT-AUTORITÄT)
Description: AUSNAHMEFEHLER beim Aufruf der Funktion IThread(ProtocolSrvConThread)::run() für die Datei
unknown
[ACCESS_VIOLATION Exception!! EIP = 0x727e1237]
Bitte Avira informieren und die obige Datei übersenden!

Error: (02/20/2014 04:17:42 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/20/2014 04:12:10 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/20/2014 04:09:03 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/20/2014 04:08:35 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/19/2014 11:44:12 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (02/19/2014 11:43:39 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall


System errors:
=============
Error: (02/21/2014 04:12:52 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/21/2014 04:12:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.

Error: (02/21/2014 04:12:12 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/21/2014 04:10:49 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎21.‎02.‎2014 um 05:37:01 unerwartet heruntergefahren.

Error: (02/20/2014 04:17:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/20/2014 04:17:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (02/20/2014 04:05:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.

Error: (02/20/2014 04:05:03 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (02/19/2014 11:42:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AsusFanControlService" wurde nicht richtig gestartet.

Error: (02/19/2014 11:41:41 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-02-21 16:43:22.032
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-21 16:32:53.436
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-21 16:22:02.394
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-20 16:25:32.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-20 16:04:10.199
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-20 05:41:43.105
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 23:41:06.050
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 23:31:08.584
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 18:00:28.277
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-19 17:24:55.840
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 19%
Total physical RAM: 16282.99 MB
Available physical RAM: 13033.08 MB
Total Pagefile: 32564.16 MB
Available Pagefile: 29030.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.39 GB) (Free:56.72 GB) NTFS
Drive d: () (Fixed) (Total:785.03 GB) (Free:527.35 GB) NTFS
Drive i: (My Book) (Fixed) (Total:1862.98 GB) (Free:1624.39 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================

schrauber · 21.02.2014, 20:26

Hi,

unsre Tools brauchen immer Adminrechte.

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hupit · 21.02.2014, 21:52

Erstmal danke für die Hilfe.

Eine par komische Sachen sind passiert

1 Nach dem beenden von Combi Fix war ich plötzlich mit dem admin Benutzer angemeldet. (Combo fix wurde Von einem Standard Benutzer ausgeführt bzw. über rechts klick als Admin ausführen)

2 beim erneuten anmelden kam die Meldung UpdateTool.exe konnte nicht gefunden werden.....

3 Avira vergessen aus zu machen Combo fix hat dies vor Beginn Bemängelt und ich habe in dann ausgestellt

4 Mehrere Ordner aufgetaucht die vorher nicht da waren Auf C: "found.000" "MOSCache" "Qoobox" D: "$RECYCLE.BIN" I: $RECYCLE.BIN" Bei allen Zugriff verweigert bzw Admin Rechte Benötigt

Code:

ATTFilter

ComboFix 14-02-20.01 - Admin 21.02.2014  20:54:33.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.16283.12593 [GMT 1:00]
ausgeführt von:: c:\users\Hupit\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-21 bis 2014-02-21  ))))))))))))))))))))))))))))))
.
.
2014-02-21 20:12 . 2014-02-21 20:12	--------	d-----w-	c:\users\hedev\AppData\Local\temp
2014-02-21 20:12 . 2014-02-21 20:12	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-21 20:12 . 2014-02-21 20:12	--------	d-----w-	c:\users\Admin\AppData\Local\temp
2014-02-21 18:13 . 2014-02-21 18:17	--------	d-----w-	C:\FRST
2014-02-20 15:18 . 2013-12-27 18:42	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2014-02-20 15:18 . 2013-12-27 18:42	33056	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2014-02-16 17:00 . 2014-02-16 17:00	--------	d-----w-	c:\programdata\BitRaider
2014-02-13 16:04 . 2013-12-24 23:09	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2014-02-13 16:04 . 2013-12-24 22:48	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2014-02-13 16:04 . 2013-11-26 08:16	3419136	----a-w-	c:\windows\SysWow64\d2d1.dll
2014-02-13 16:04 . 2013-11-22 22:48	3928064	----a-w-	c:\windows\system32\d2d1.dll
2014-02-13 16:04 . 2013-12-21 09:53	548864	----a-w-	c:\windows\system32\vbscript.dll
2014-02-13 16:04 . 2013-12-21 08:56	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-02-10 16:55 . 2014-02-10 16:55	--------	d-----w-	c:\program files (x86)\FreeTime
2014-02-08 22:50 . 2014-02-08 22:50	--------	d-----w-	c:\users\Hupit\AppData\Local\Diagnostics
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\programdata\Visan
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\programdata\HP Photo Creations
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\program files (x86)\HP Photo Creations
2014-02-02 16:22 . 2014-02-02 16:22	--------	d-----w-	c:\program files (x86)\WinSCP
2014-02-02 16:21 . 2014-02-02 16:21	--------	d-----w-	c:\users\Hupit\AppData\Local\Programs
2014-01-28 18:28 . 2014-01-28 18:28	--------	d-----w-	c:\users\Hupit\AppData\Roaming\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\users\Admin\AppData\Roaming\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\programdata\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\program files (x86)\Avira
2014-01-28 18:11 . 2013-12-09 10:37	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-01-28 18:11 . 2013-12-09 10:37	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2014-01-28 18:11 . 2013-12-09 10:37	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-01-28 18:11 . 2013-12-09 10:37	141376	----a-w-	c:\windows\system32\drivers\avfwot.sys
2014-01-28 18:11 . 2013-12-09 10:37	114608	----a-w-	c:\windows\system32\drivers\avfwim.sys
2014-01-28 18:11 . 2013-12-09 10:37	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-01-28 17:45 . 2014-01-28 17:45	--------	d-----w-	c:\users\Admin\AppData\Roaming\Thunderbird
2014-01-28 17:45 . 2014-01-28 17:45	--------	d-----w-	c:\users\Admin\AppData\Local\Thunderbird
2014-01-27 20:07 . 2014-02-11 15:24	--------	d-----w-	c:\users\Hupit\AppData\Roaming\HpUpdate
2014-01-25 17:40 . 2014-01-25 17:40	--------	d-----w-	c:\program files (x86)\Microsoft
2014-01-25 02:02 . 2014-01-25 02:02	--------	d-----w-	c:\users\Default\AppData\Local\Microsoft Help
2014-01-24 17:59 . 2014-01-25 02:02	--------	d-----w-	c:\program files (x86)\Microsoft Works
2014-01-24 17:59 . 2014-01-24 17:59	--------	d-----w-	c:\windows\PCHEALTH
2014-01-24 17:58 . 2014-01-24 17:58	--------	d-----w-	c:\program files\Microsoft Office
2014-01-24 17:58 . 2014-01-24 17:58	--------	d-----w-	c:\users\Admin\AppData\Local\Microsoft Help
2014-01-24 17:57 . 2014-01-25 17:28	--------	d-----w-	c:\programdata\Microsoft Help
2014-01-24 17:57 . 2014-01-24 17:57	--------	d-----r-	C:\MSOCache
2014-01-24 15:13 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F2F6A463-38D8-4985-AEC8-3FAF1A8A0A80}\mpengine.dll
2014-01-24 15:07 . 2014-01-24 15:07	--------	d-----w-	c:\users\Hupit\AppData\Roaming\AVAST Software
2014-01-23 18:08 . 2014-01-23 18:08	--------	d-----w-	c:\windows\Migration
2014-01-22 22:07 . 2014-01-22 22:07	82744	----a-w-	c:\windows\system32\drivers\aswstm.sys.1390428484
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 20:01 . 2013-08-06 19:09	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 20:01 . 2013-08-06 19:09	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-21 02:53 . 2013-10-30 19:37	1048152	----a-w-	c:\windows\SysWow64\nvspcap.dll
2014-01-21 02:53 . 2013-10-30 19:37	1179576	----a-w-	c:\windows\system32\nvspcap64.dll
2014-01-15 15:09 . 2014-01-10 12:51	1048576	----a-w-	c:\windows\PE_Rom.dll
2014-01-06 15:20 . 2013-08-06 18:37	86054176	----a-w-	c:\windows\system32\MRT.exe
2013-12-27 18:42 . 2013-08-06 19:19	35104	----a-w-	c:\windows\system32\nvaudcap64v.dll
2013-12-19 20:33 . 2014-01-09 16:01	9657464	----a-w-	c:\windows\SysWow64\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 16:01	15877216	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2013-12-19 20:33 . 2014-01-09 16:01	1242400	----a-w-	c:\windows\SysWow64\nvumdshim.dll
2013-12-19 20:33 . 2014-01-09 16:01	11554264	----a-w-	c:\windows\system32\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 16:01	9700224	----a-w-	c:\windows\SysWow64\nvcuda.dll
2013-12-19 20:33 . 2014-01-09 16:01	882464	----a-w-	c:\windows\system32\NvIFR64.dll
2013-12-19 20:33 . 2014-01-09 16:01	879392	----a-w-	c:\windows\system32\NvFBC64.dll
2013-12-19 20:33 . 2014-01-09 16:01	852768	----a-w-	c:\windows\SysWow64\NvIFR.dll
2013-12-19 20:33 . 2014-01-09 16:01	847648	----a-w-	c:\windows\SysWow64\NvFBC.dll
2013-12-19 20:33 . 2014-01-09 16:01	479520	----a-w-	c:\windows\system32\nvEncodeAPI64.dll
2013-12-19 20:33 . 2014-01-09 16:01	405280	----a-w-	c:\windows\SysWow64\nvEncodeAPI.dll
2013-12-19 20:33 . 2014-01-09 16:01	357152	----a-w-	c:\windows\system32\NvIFROpenGL.dll
2013-12-19 20:33 . 2014-01-09 16:01	317472	----a-w-	c:\windows\system32\nvoglshim64.dll
2013-12-19 20:33 . 2014-01-09 16:01	314656	----a-w-	c:\windows\SysWow64\NvIFROpenGL.dll
2013-12-19 20:33 . 2014-01-09 16:01	3132704	----a-w-	c:\windows\system32\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 16:01	3125024	----a-w-	c:\windows\system32\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 16:01	2947872	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 16:01	2747680	----a-w-	c:\windows\SysWow64\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 16:01	266984	----a-w-	c:\windows\SysWow64\nvoglshim32.dll
2013-12-19 20:33 . 2014-01-09 16:01	25257248	----a-w-	c:\windows\system32\nvcompiler.dll
2013-12-19 20:33 . 2014-01-09 16:01	22960416	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2013-12-19 20:33 . 2014-01-09 16:01	1884448	----a-w-	c:\windows\system32\nvdispco6433221.dll
2013-12-19 20:33 . 2014-01-09 16:01	18222008	----a-w-	c:\windows\system32\nvd3dumx.dll
2013-12-19 20:33 . 2014-01-09 16:01	17560352	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2013-12-19 20:33 . 2014-01-09 16:01	168616	----a-w-	c:\windows\system32\nvinitx.dll
2013-12-19 20:33 . 2014-01-09 16:01	1511712	----a-w-	c:\windows\system32\nvdispgenco6433221.dll
2013-12-19 20:33 . 2014-01-09 16:01	141336	----a-w-	c:\windows\SysWow64\nvinit.dll
2013-12-19 20:33 . 2014-01-09 16:01	12645664	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2013-12-19 20:33 . 2014-01-09 16:01	11605752	----a-w-	c:\windows\system32\nvcuda.dll
2013-12-19 20:33 . 2013-08-06 19:15	30372640	----a-w-	c:\windows\system32\nvoglv64.dll
2013-12-19 20:33 . 2013-08-06 19:15	18310112	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-12-19 20:33 . 2013-08-06 19:15	15230352	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2013-12-19 20:33 . 2013-08-06 19:15	2698272	----a-w-	c:\windows\SysWow64\nvapi.dll
2013-12-19 20:33 . 2013-02-25 22:32	3071656	----a-w-	c:\windows\system32\nvapi64.dll
2013-12-19 20:33 . 2013-02-25 22:32	1436528	----a-w-	c:\windows\system32\nvumdshimx.dll
2013-12-19 18:53 . 2013-08-06 18:49	6671648	----a-w-	c:\windows\system32\nvcpl.dll
2013-12-19 18:53 . 2013-08-06 18:49	3490080	----a-w-	c:\windows\system32\nvsvc64.dll
2013-12-19 18:53 . 2013-08-06 18:49	922912	----a-w-	c:\windows\system32\nvvsvc.exe
2013-12-19 18:53 . 2013-08-06 18:49	63776	----a-w-	c:\windows\system32\nvshext.dll
2013-12-19 18:53 . 2013-08-06 18:49	386336	----a-w-	c:\windows\system32\nvmctray.dll
2013-12-19 18:53 . 2013-08-06 18:49	2559776	----a-w-	c:\windows\system32\nvsvcr.dll
2013-12-19 11:20 . 2013-12-19 11:20	590112	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-12-19 05:01 . 2013-08-06 18:49	3539040	----a-w-	c:\windows\system32\nvcoproc.bin
2013-12-18 05:13 . 2013-11-15 15:50	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-11-28 13:38 . 2014-01-09 16:01	31520	----a-w-	c:\windows\system32\nvhdap64.dll
2013-11-28 13:38 . 2014-01-09 16:01	197408	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2013-11-27 01:41 . 2014-01-15 20:07	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:41 . 2014-01-15 20:07	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:41 . 2014-01-15 20:07	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:41 . 2014-01-15 20:07	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2013-11-27 01:41 . 2014-01-15 20:07	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:41 . 2014-01-15 20:07	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:41 . 2014-01-15 20:07	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2013-11-26 11:40 . 2014-01-15 20:07	376768	----a-w-	c:\windows\system32\drivers\netio.sys
2013-11-26 10:32 . 2014-01-15 20:07	3156480	----a-w-	c:\windows\system32\win32k.sys
2013-11-26 02:01 . 2013-11-26 02:01	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-26 02:01 . 2013-11-26 02:01	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-11-26 02:01 . 2013-11-26 02:01	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-26 02:01 . 2013-11-26 02:01	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-11-26 02:01 . 2013-11-26 02:01	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-11-26 02:01 . 2013-11-26 02:01	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-11-26 02:01 . 2013-11-26 02:01	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-11-26 02:01 . 2013-11-26 02:01	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-11-26 02:01 . 2013-11-26 02:01	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-11-26 02:01 . 2013-11-26 02:01	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-26 02:01 . 2013-11-26 02:01	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-11-26 02:01 . 2013-11-26 02:01	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-11-26 02:01 . 2013-11-26 02:01	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-11-26 02:01 . 2013-11-26 02:01	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-11-26 02:01 . 2013-11-26 02:01	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-11-26 02:01 . 2013-11-26 02:01	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-26 02:01 . 2013-11-26 02:01	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-11-26 02:01 . 2013-11-26 02:01	247808	----a-w-	c:\windows\system32\msls31.dll
2013-11-26 02:01 . 2013-11-26 02:01	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-11-26 02:01 . 2013-11-26 02:01	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-11-26 02:01 . 2013-11-26 02:01	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-11-26 02:01 . 2013-11-26 02:01	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-11-26 02:01 . 2013-11-26 02:01	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-11-26 02:01 . 2013-11-26 02:01	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-11-26 02:01 . 2013-11-26 02:01	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-11-26 02:01 . 2013-11-26 02:01	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-11-26 02:01 . 2013-11-26 02:01	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-11-26 02:01 . 2013-11-26 02:01	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-11-26 02:01 . 2013-11-26 02:01	81408	----a-w-	c:\windows\system32\icardie.dll
2013-11-26 02:01 . 2013-11-26 02:01	774144	----a-w-	c:\windows\system32\jscript.dll
2013-11-26 02:01 . 2013-11-26 02:01	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-11-26 02:01 . 2013-11-26 02:01	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-11-26 02:01 . 2013-11-26 02:01	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-11-26 02:01 . 2013-11-26 02:01	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-11-26 02:01 . 2013-11-26 02:01	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-11-26 02:01 . 2013-11-26 02:01	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-11-26 02:01 . 2013-11-26 02:01	413696	----a-w-	c:\windows\system32\html.iec
2013-11-26 02:01 . 2013-11-26 02:01	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-12-09 35768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]
.
c:\users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
2;2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe [x]
R2 ASGT;ASGT;c:\windows\SysWOW64\ASGT.exe;c:\windows\SysWOW64\ASGT.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BRDriver64;BRDriver64;c:\programdata\BitRaider\BRDriver64.sys;c:\programdata\BitRaider\BRDriver64.sys [x]
R3 BRSptSvc;BitRaider Mini-Support Service;c:\programdata\BitRaider\BRSptSvc.exe;c:\programdata\BitRaider\BRSptSvc.exe [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NVFLASH;NVFLASH;c:\windows\system32\drivers\nvflash.sys;c:\windows\SYSNATIVE\drivers\nvflash.sys [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys;c:\windows\SYSNATIVE\DRIVERS\asahci64.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 DTSAudioSvc;DTSAudioSvc;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 AiChargerPlus;AiChargerPlus;SysWow64\drivers\AiChargerPlus.sys;SysWow64\drivers\AiChargerPlus.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x]
S3 ASUSstpt;ASUS USB 3.0 Boost Storage Driver (Storage Driver);c:\windows\system32\DRIVERS\ASUSstpt.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSstpt.sys [x]
S3 ASUSumsc;ASUS USB 3.0 Boost Storage Driver (WDM);c:\windows\system32\DRIVERS\ASUSumsc.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSumsc.sys [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-06 20:01]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-13 19:29]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-13 19:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-08-07 6827664]
"RtHDVBg_DTS"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-08-06 1215632]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2013-04-24 7477016]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-01-21 1179576]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-01-21 2234144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"="c:\windows\SYSTEM32\WerFault.exe" [2009-07-14 415232]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - 
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-ASUS AiChargerPlus Execute - c:\program files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{3E31400D-274E-4647-916C-2CACC3741799} - c:\program files (x86)\InstallShield Installation Information\{3E31400D-274E-4647-916C-2CACC3741799}\ENPSETUP.EXE
AddRemove-{46EDCFA5-7EDB-46A9-B093-1C6237470CEC} - c:\program files (x86)\InstallShield Installation Information\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}\setup.exe
AddRemove-{7F3AD00A-1819-4B15-BB7D-08B3586336D7} - c:\program files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe
AddRemove-{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF} - c:\program files (x86)\InstallShield Installation Information\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}\setup.exe
AddRemove-{BEE64C14-BEF1-4610-8A68-A16EAA47B882} - c:\program files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe
AddRemove-{C9D8A041-2963-4B31-8FFC-1500F3DB9293} - c:\program files (x86)\InstallShield Installation Information\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}\Setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-21  21:16:49
ComboFix-quarantined-files.txt  2014-02-21 20:16
.
Vor Suchlauf: 9 Verzeichnis(se), 59.934.167.040 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 59.979.948.032 Bytes frei
.
- - End Of File - - E62DE1A47660361587B6342ECDBDC747
A36C5E4F47E84449FF07ED3517B43A31

Habe es nochmal Über Den Admin Benutzer Laufen lassen

Hat sich nix verändert wie vorher auch die Fehlermeldung kam wider.

1 Sache ist da aber noch die mir bei ersten mal aufgefallen ist der Computer Läuft wesentlich schneller als vorher Grade beim Anmelden etc.

Code:

ATTFilter

ComboFix 14-02-20.01 - Admin 21.02.2014  21:41:14.2.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.16283.13854 [GMT 1:00]
ausgeführt von:: c:\users\Admin\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-21 bis 2014-02-21  ))))))))))))))))))))))))))))))
.
.
2014-02-21 20:44 . 2014-02-21 20:44	--------	d-----w-	c:\users\hedev\AppData\Local\temp
2014-02-21 20:44 . 2014-02-21 20:44	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-21 20:16 . 2014-02-21 20:44	--------	d-----w-	c:\users\Admin\AppData\Local\temp
2014-02-21 18:13 . 2014-02-21 18:17	--------	d-----w-	C:\FRST
2014-02-20 15:18 . 2013-12-27 18:42	39200	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2014-02-20 15:18 . 2013-12-27 18:42	33056	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2014-02-16 17:00 . 2014-02-16 17:00	--------	d-----w-	c:\programdata\BitRaider
2014-02-13 16:04 . 2013-12-24 23:09	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2014-02-13 16:04 . 2013-12-24 22:48	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2014-02-13 16:04 . 2013-11-26 08:16	3419136	----a-w-	c:\windows\SysWow64\d2d1.dll
2014-02-13 16:04 . 2013-11-22 22:48	3928064	----a-w-	c:\windows\system32\d2d1.dll
2014-02-13 16:04 . 2013-12-21 09:53	548864	----a-w-	c:\windows\system32\vbscript.dll
2014-02-13 16:04 . 2013-12-21 08:56	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-02-10 16:55 . 2014-02-10 16:55	--------	d-----w-	c:\program files (x86)\FreeTime
2014-02-08 22:50 . 2014-02-08 22:50	--------	d-----w-	c:\users\Hupit\AppData\Local\Diagnostics
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\programdata\Visan
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\programdata\HP Photo Creations
2014-02-03 20:18 . 2014-02-03 20:18	--------	d-----w-	c:\program files (x86)\HP Photo Creations
2014-02-02 16:22 . 2014-02-02 16:22	--------	d-----w-	c:\program files (x86)\WinSCP
2014-02-02 16:21 . 2014-02-02 16:21	--------	d-----w-	c:\users\Hupit\AppData\Local\Programs
2014-01-28 18:28 . 2014-01-28 18:28	--------	d-----w-	c:\users\Hupit\AppData\Roaming\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\users\Admin\AppData\Roaming\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\programdata\Avira
2014-01-28 18:11 . 2014-01-28 18:11	--------	d-----w-	c:\program files (x86)\Avira
2014-01-28 18:11 . 2013-12-09 10:37	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-01-28 18:11 . 2013-12-09 10:37	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2014-01-28 18:11 . 2013-12-09 10:37	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-01-28 18:11 . 2013-12-09 10:37	141376	----a-w-	c:\windows\system32\drivers\avfwot.sys
2014-01-28 18:11 . 2013-12-09 10:37	114608	----a-w-	c:\windows\system32\drivers\avfwim.sys
2014-01-28 18:11 . 2013-12-09 10:37	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-01-28 17:45 . 2014-01-28 17:45	--------	d-----w-	c:\users\Admin\AppData\Roaming\Thunderbird
2014-01-28 17:45 . 2014-01-28 17:45	--------	d-----w-	c:\users\Admin\AppData\Local\Thunderbird
2014-01-27 20:07 . 2014-02-11 15:24	--------	d-----w-	c:\users\Hupit\AppData\Roaming\HpUpdate
2014-01-25 17:40 . 2014-01-25 17:40	--------	d-----w-	c:\program files (x86)\Microsoft
2014-01-25 02:02 . 2014-01-25 02:02	--------	d-----w-	c:\users\Default\AppData\Local\Microsoft Help
2014-01-24 17:59 . 2014-01-25 02:02	--------	d-----w-	c:\program files (x86)\Microsoft Works
2014-01-24 17:59 . 2014-01-24 17:59	--------	d-----w-	c:\windows\PCHEALTH
2014-01-24 17:58 . 2014-01-24 17:58	--------	d-----w-	c:\program files\Microsoft Office
2014-01-24 17:58 . 2014-01-24 17:58	--------	d-----w-	c:\users\Admin\AppData\Local\Microsoft Help
2014-01-24 17:57 . 2014-01-25 17:28	--------	d-----w-	c:\programdata\Microsoft Help
2014-01-24 17:57 . 2014-01-24 17:57	--------	d-----r-	C:\MSOCache
2014-01-24 15:13 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F2F6A463-38D8-4985-AEC8-3FAF1A8A0A80}\mpengine.dll
2014-01-24 15:07 . 2014-01-24 15:07	--------	d-----w-	c:\users\Hupit\AppData\Roaming\AVAST Software
2014-01-23 18:08 . 2014-01-23 18:08	--------	d-----w-	c:\windows\Migration
2014-01-22 22:07 . 2014-01-22 22:07	82744	----a-w-	c:\windows\system32\drivers\aswstm.sys.1390428484
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 20:01 . 2013-08-06 19:09	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 20:01 . 2013-08-06 19:09	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-21 02:53 . 2013-10-30 19:37	1048152	----a-w-	c:\windows\SysWow64\nvspcap.dll
2014-01-21 02:53 . 2013-10-30 19:37	1179576	----a-w-	c:\windows\system32\nvspcap64.dll
2014-01-15 15:09 . 2014-01-10 12:51	1048576	----a-w-	c:\windows\PE_Rom.dll
2014-01-06 15:20 . 2013-08-06 18:37	86054176	----a-w-	c:\windows\system32\MRT.exe
2013-12-27 18:42 . 2013-08-06 19:19	35104	----a-w-	c:\windows\system32\nvaudcap64v.dll
2013-12-19 20:33 . 2014-01-09 16:01	9657464	----a-w-	c:\windows\SysWow64\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 16:01	15877216	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2013-12-19 20:33 . 2014-01-09 16:01	1242400	----a-w-	c:\windows\SysWow64\nvumdshim.dll
2013-12-19 20:33 . 2014-01-09 16:01	11554264	----a-w-	c:\windows\system32\nvopencl.dll
2013-12-19 20:33 . 2014-01-09 16:01	9700224	----a-w-	c:\windows\SysWow64\nvcuda.dll
2013-12-19 20:33 . 2014-01-09 16:01	882464	----a-w-	c:\windows\system32\NvIFR64.dll
2013-12-19 20:33 . 2014-01-09 16:01	879392	----a-w-	c:\windows\system32\NvFBC64.dll
2013-12-19 20:33 . 2014-01-09 16:01	852768	----a-w-	c:\windows\SysWow64\NvIFR.dll
2013-12-19 20:33 . 2014-01-09 16:01	847648	----a-w-	c:\windows\SysWow64\NvFBC.dll
2013-12-19 20:33 . 2014-01-09 16:01	479520	----a-w-	c:\windows\system32\nvEncodeAPI64.dll
2013-12-19 20:33 . 2014-01-09 16:01	405280	----a-w-	c:\windows\SysWow64\nvEncodeAPI.dll
2013-12-19 20:33 . 2014-01-09 16:01	357152	----a-w-	c:\windows\system32\NvIFROpenGL.dll
2013-12-19 20:33 . 2014-01-09 16:01	317472	----a-w-	c:\windows\system32\nvoglshim64.dll
2013-12-19 20:33 . 2014-01-09 16:01	314656	----a-w-	c:\windows\SysWow64\NvIFROpenGL.dll
2013-12-19 20:33 . 2014-01-09 16:01	3132704	----a-w-	c:\windows\system32\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 16:01	3125024	----a-w-	c:\windows\system32\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 16:01	2947872	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2013-12-19 20:33 . 2014-01-09 16:01	2747680	----a-w-	c:\windows\SysWow64\nvcuvenc.dll
2013-12-19 20:33 . 2014-01-09 16:01	266984	----a-w-	c:\windows\SysWow64\nvoglshim32.dll
2013-12-19 20:33 . 2014-01-09 16:01	25257248	----a-w-	c:\windows\system32\nvcompiler.dll
2013-12-19 20:33 . 2014-01-09 16:01	22960416	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2013-12-19 20:33 . 2014-01-09 16:01	1884448	----a-w-	c:\windows\system32\nvdispco6433221.dll
2013-12-19 20:33 . 2014-01-09 16:01	18222008	----a-w-	c:\windows\system32\nvd3dumx.dll
2013-12-19 20:33 . 2014-01-09 16:01	17560352	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2013-12-19 20:33 . 2014-01-09 16:01	168616	----a-w-	c:\windows\system32\nvinitx.dll
2013-12-19 20:33 . 2014-01-09 16:01	1511712	----a-w-	c:\windows\system32\nvdispgenco6433221.dll
2013-12-19 20:33 . 2014-01-09 16:01	141336	----a-w-	c:\windows\SysWow64\nvinit.dll
2013-12-19 20:33 . 2014-01-09 16:01	12645664	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2013-12-19 20:33 . 2014-01-09 16:01	11605752	----a-w-	c:\windows\system32\nvcuda.dll
2013-12-19 20:33 . 2013-08-06 19:15	30372640	----a-w-	c:\windows\system32\nvoglv64.dll
2013-12-19 20:33 . 2013-08-06 19:15	18310112	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-12-19 20:33 . 2013-08-06 19:15	15230352	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2013-12-19 20:33 . 2013-08-06 19:15	2698272	----a-w-	c:\windows\SysWow64\nvapi.dll
2013-12-19 20:33 . 2013-02-25 22:32	3071656	----a-w-	c:\windows\system32\nvapi64.dll
2013-12-19 20:33 . 2013-02-25 22:32	1436528	----a-w-	c:\windows\system32\nvumdshimx.dll
2013-12-19 18:53 . 2013-08-06 18:49	6671648	----a-w-	c:\windows\system32\nvcpl.dll
2013-12-19 18:53 . 2013-08-06 18:49	3490080	----a-w-	c:\windows\system32\nvsvc64.dll
2013-12-19 18:53 . 2013-08-06 18:49	922912	----a-w-	c:\windows\system32\nvvsvc.exe
2013-12-19 18:53 . 2013-08-06 18:49	63776	----a-w-	c:\windows\system32\nvshext.dll
2013-12-19 18:53 . 2013-08-06 18:49	386336	----a-w-	c:\windows\system32\nvmctray.dll
2013-12-19 18:53 . 2013-08-06 18:49	2559776	----a-w-	c:\windows\system32\nvsvcr.dll
2013-12-19 11:20 . 2013-12-19 11:20	590112	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2013-12-19 05:01 . 2013-08-06 18:49	3539040	----a-w-	c:\windows\system32\nvcoproc.bin
2013-12-18 05:13 . 2013-11-15 15:50	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-11-28 13:38 . 2014-01-09 16:01	31520	----a-w-	c:\windows\system32\nvhdap64.dll
2013-11-28 13:38 . 2014-01-09 16:01	197408	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2013-11-27 01:41 . 2014-01-15 20:07	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:41 . 2014-01-15 20:07	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:41 . 2014-01-15 20:07	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:41 . 2014-01-15 20:07	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2013-11-27 01:41 . 2014-01-15 20:07	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:41 . 2014-01-15 20:07	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:41 . 2014-01-15 20:07	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2013-11-26 11:40 . 2014-01-15 20:07	376768	----a-w-	c:\windows\system32\drivers\netio.sys
2013-11-26 10:32 . 2014-01-15 20:07	3156480	----a-w-	c:\windows\system32\win32k.sys
2013-11-26 02:01 . 2013-11-26 02:01	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-26 02:01 . 2013-11-26 02:01	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-11-26 02:01 . 2013-11-26 02:01	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-26 02:01 . 2013-11-26 02:01	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-11-26 02:01 . 2013-11-26 02:01	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-11-26 02:01 . 2013-11-26 02:01	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-11-26 02:01 . 2013-11-26 02:01	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-11-26 02:01 . 2013-11-26 02:01	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-11-26 02:01 . 2013-11-26 02:01	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-11-26 02:01 . 2013-11-26 02:01	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-26 02:01 . 2013-11-26 02:01	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-11-26 02:01 . 2013-11-26 02:01	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-11-26 02:01 . 2013-11-26 02:01	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-11-26 02:01 . 2013-11-26 02:01	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-11-26 02:01 . 2013-11-26 02:01	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-11-26 02:01 . 2013-11-26 02:01	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-26 02:01 . 2013-11-26 02:01	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-11-26 02:01 . 2013-11-26 02:01	247808	----a-w-	c:\windows\system32\msls31.dll
2013-11-26 02:01 . 2013-11-26 02:01	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-11-26 02:01 . 2013-11-26 02:01	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-11-26 02:01 . 2013-11-26 02:01	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-11-26 02:01 . 2013-11-26 02:01	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-11-26 02:01 . 2013-11-26 02:01	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-11-26 02:01 . 2013-11-26 02:01	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-11-26 02:01 . 2013-11-26 02:01	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-11-26 02:01 . 2013-11-26 02:01	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-11-26 02:01 . 2013-11-26 02:01	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-11-26 02:01 . 2013-11-26 02:01	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-11-26 02:01 . 2013-11-26 02:01	81408	----a-w-	c:\windows\system32\icardie.dll
2013-11-26 02:01 . 2013-11-26 02:01	774144	----a-w-	c:\windows\system32\jscript.dll
2013-11-26 02:01 . 2013-11-26 02:01	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-11-26 02:01 . 2013-11-26 02:01	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-11-26 02:01 . 2013-11-26 02:01	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-11-26 02:01 . 2013-11-26 02:01	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-11-26 02:01 . 2013-11-26 02:01	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-11-26 02:01 . 2013-11-26 02:01	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-11-26 02:01 . 2013-11-26 02:01	413696	----a-w-	c:\windows\system32\html.iec
2013-11-26 02:01 . 2013-11-26 02:01	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"="c:\program files (x86)\Overwolf\Overwolf.exe" [2013-12-09 35768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]
.
c:\users\Hupit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
2;2 AsusFanControlService;AsusFanControlService;c:\program files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe;c:\program files (x86)\ASUS\AsusFanControlService\1.01.15\AsusFanControlService.exe [x]
R2 ASGT;ASGT;c:\windows\SysWOW64\ASGT.exe;c:\windows\SysWOW64\ASGT.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BRDriver64;BRDriver64;c:\programdata\BitRaider\BRDriver64.sys;c:\programdata\BitRaider\BRDriver64.sys [x]
R3 BRSptSvc;BitRaider Mini-Support Service;c:\programdata\BitRaider\BRSptSvc.exe;c:\programdata\BitRaider\BRSptSvc.exe [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NVFLASH;NVFLASH;c:\windows\system32\drivers\nvflash.sys;c:\windows\SYSNATIVE\drivers\nvflash.sys [x]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys;c:\windows\SYSNATIVE\DRIVERS\asahci64.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys;c:\windows\SYSNATIVE\DRIVERS\avfwot.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirFirewallService;Avira FireWall;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [x]
S2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [x]
S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 DTSAudioSvc;DTSAudioSvc;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;d:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 AiChargerPlus;AiChargerPlus;SysWow64\drivers\AiChargerPlus.sys;SysWow64\drivers\AiChargerPlus.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x]
S3 ASUSstpt;ASUS USB 3.0 Boost Storage Driver (Storage Driver);c:\windows\system32\DRIVERS\ASUSstpt.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSstpt.sys [x]
S3 ASUSumsc;ASUS USB 3.0 Boost Storage Driver (WDM);c:\windows\system32\DRIVERS\ASUSumsc.sys;c:\windows\SYSNATIVE\DRIVERS\ASUSumsc.sys [x]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys;c:\windows\SYSNATIVE\DRIVERS\avfwim.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-06 20:01]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-13 19:29]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-13 19:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-08-07 6827664]
"RtHDVBg_DTS"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-08-06 1215632]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2013-04-24 7477016]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-01-21 1179576]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-01-21 2234144]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - 
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{46EDCFA5-7EDB-46A9-B093-1C6237470CEC} - c:\program files (x86)\InstallShield Installation Information\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}\setup.exe
AddRemove-{7F3AD00A-1819-4B15-BB7D-08B3586336D7} - c:\program files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe
AddRemove-{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF} - c:\program files (x86)\InstallShield Installation Information\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}\setup.exe
AddRemove-{BEE64C14-BEF1-4610-8A68-A16EAA47B882} - c:\program files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe
AddRemove-{C9D8A041-2963-4B31-8FFC-1500F3DB9293} - c:\program files (x86)\InstallShield Installation Information\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}\Setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-21  21:46:04
ComboFix-quarantined-files.txt  2014-02-21 20:46
ComboFix2.txt  2014-02-21 20:16
.
Vor Suchlauf: 13 Verzeichnis(se), 60.761.001.984 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 60.808.011.776 Bytes frei
.
- - End Of File - - 88D13BBB0123F656F5D85E394062C163
A36C5E4F47E84449FF07ED3517B43A31

schrauber · 22.02.2014, 17:20

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hupit · 23.02.2014, 18:45

Die Programme haben bis auf Reste von der AVG Tool bar (2 Einträge) in der registry nix gefunden. Habe das sys jetzt aber neu aufgesetzt. Lief sowiso nicht mehr richtig. Dennoch danke für die Hilfe.

schrauber · 24.02.2014, 18:23

ok

24.02.2014, 18:23	#6
schrauber /// the machine /// TB-Ausbilder	Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet) ok __________________ --> Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet)

Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet)

Plagegeister aller Art und deren Bekämpfung: Auf Spam Mail Geklickt (Browser Fenster Hat sich Geöffnet)