Netbook wird immer langsamer. Gmer läuft nicht.

problemchild · 27.03.2014, 00:00

Hallo liebe Forum-Mitglieder,

ich habe einen Asus Eee Pc. Betriebssystem MS Windows 7 Starter, 32-bit SP1.
Intel Atom CPU N450 @ 1.66GHz, 1,0GB RAM, Intel Graphics Media Accelerator 3150.
Ich verwende Avira (freeware) welches ich ein bis zweimal pro Woche manuell update.

Das Netbook ist knapp 3 Jahre alt. Anfangs lief es prima, aber in den letzten Monaten wird es immer langsamer (ich weiß, dass so ein Netbook nicht besonders schnell ist, aber am Anfang war es echt viel schneller als jetzt).
Internet-Seiten laden manchmal minutenlang, es dauert oft mehrere Minuten bis der Rechner hochgefahren ist und bis ich Programme öffnen kann oder bis Firefox startet. Beim E-Mail schreiben oder bei anderen Texteingaben hakt der Cursor manchmal einige Sekunden oder sogar Minuten, dann erscheint der eingegebene Text auf einmal, dann hakt es wieder. Kurz gesagt, irgendetwas bremst den "Rechner" aus.
Ich habe ein paar mal den CCleaner drüberlaufen lassen und einigen Datenmüll entfernt. Danach ging es immer etwas besser. Aber jetzt hilft das auch nicht mehr.

Auf C: sind noch knapp 50% des Speichers frei und auf D: sind unter 10% belegt, der Rest ist frei.

Hier was ich bisher getan habe:

Ich habe wie in der Anleitung zuerst den Defogger heruntergeladen und gestartet, lief einwandfrei. Dann habe ich FRST heruntergeladen und ganz normal gestartet. Ich habe nichts weiter gemacht und dann ging kurz ein Fenster auf und dann wieder zu. Ich las so etwas wie "Datei kopieren".
Ein weiteres Fenster ging auf und da stand:

"Diese Datei existiert schon."
Es gab dann drei Auswahlmöglichkeiten:
"Überschreiben. Nicht speichern. Beide Dateien behalten."
Ich habe auf letzteres geklickt. Dann ging ein neues Fenster auf und da stand:
Aufgrund eines unerwarteten Fehlers können Sie die Datei nicht kopieren. Wenn der Fehler weiterhin ausgegeben wird, können Sie mithilfe des Fehlercodes in der Hilfe nach diesem Problem suchen.
Fehler 0x80004005
unbekannter Fehler
install.rdf
Änderungsdatum: 10.12.2012 17.47
Größe: 1,43KB

Ich habe dann das Fenster geschlossen und FRST erstellte die FRST.txt und die Addition.txt (habe ich beides am Ende dieses Posts eingefügt).

Dann habe ich GMER heruntergeladen, die Internetverbindung gekappt, das W-Lan ausgeschaltet und dann Avira gestoppt, die Firewall ausgeschaltet und GMER nach Anleitung gestartet, vorher den Haken bei: IAT/EAT und Show All entfernt und den Haken bei Quickscan gesetzt und ihn bei allen anderen Laufwerken entfernt.

Dann kam wieder eine Fehlermeldung:
"Gmer19357.exe funktioniert nicht mehr. Das Programm wird aufgrund eines Problems nicht richtig ausgeführt."
Ich habe dann GMER noch einmal gestartet und dann hing sich mein Rechner komplett auf. Ich konnte noch nicht mal den Taskmanager öffnen. Ich habe den Rechner dann mit der Powertaste ausgeschaltet.
Nach dem Neustart habe ich Avira wieder eingeschaltet und auch die Firewall und mich dann direkt hier eingeloggt. Ich hoffe nun, dass mir jemand sagt was ich jetzt tun soll.
Bevor ich es vergesse: Ich habe vor einiger Zeit mal den virtuellen Speicher verdoppelt. War das ein Fehler? Falls ja, kann ich es einfach wieder rückgängig machen? Hat es überhaupt etwas mit meinem Problem zu tun?

Hier nun das, was FRST ausgespuckt hat:

Code:

ATTFilter

LastRegBack: 2014-03-20 18:27

==================== End Of Log ============================

LastRegBack: 2014-03-20 18:27

==================== End Of Log ============================

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by nightchild at 2014-03-26 11:58:11
Running from C:\Users\nightchild\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Angry Birds (HKLM\...\{910D3FB9-E341-4DD9-B52A-3B3C0C340AF6}) (Version: 1.5.3 - Rovio)
ASUS VIBE (HKLM\...\ASUS VIBE) (Version: 1.0.187 - Ecareme, Inc.)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.)
Audacity 1.3.13 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Benutzerhandbuch - Grundlagen EPSON SX230 Series (HKLM\...\EPSON SX230 Series Bog) (Version:  - )
Benutzerhandbuch EPSON SX230 Series (HKLM\...\EPSON SX230 Series Useg) (Version:  - )
Boingo Wi-Fi (HKLM\...\{84C2B80B-64A2-4B22-93EC-F30C3D6BF7D8}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr Kawashima (HKCU\...\BrainGame) (Version: 1.0 - )
ebi.BookReader3J (HKLM\...\{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}) (Version: 3.75.14 - eBOOK Initiative Japan Co., Ltd.)
E-Cam (HKLM\...\{185AFA7A-F63E-450B-94AA-011CAC18090E}) (Version: 2.0.2.5 - )
Eee Docking 3.7.0 (HKLM\...\Eee Docking_is1) (Version: 3.7.0 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (Version: 5.1.2.0011 - ASUS) Hidden
Epson Easy Photo Print 2 (HKLM\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version:  - SEIKO EPSON Corporation)
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
FontResizer (Version: 1.01.0011 - ASUSTek) Hidden
Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Notes & Office Ink (HKLM\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version:   -  )
Free YouTube to MP3 Converter version 3.12.23.219 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.23.219 - DVDVideoSoft Ltd.)
Game Park Console (HKLM\...\{D44AA979-47C2-4BC0-A860-09A54224EA44}_is1) (Version: 6.2.0.3 - Oberon Media, Inc.)
Google SketchUp 8 (HKLM\...\{5E2ABE05-B7AD-4D77-8A19-BDA0E4302190}) (Version: 3.0.11762 - Google, Inc.)
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.27 - AsusTek Computer)
ICQ7.5 (HKLM\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Join Air (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.21 - Asus)
LocaleMe (HKLM\...\{F58C1D44-4AC9-48E8-9049-7A6CDFCB415C}) (Version: 1.3 - ASUS)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Editor Free (HKLM\...\Music Editor Free) (Version:  - FAE Inc.)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Scribble Papers 2.7.1 (HKLM\...\Scribble Papers_is1) (Version:  - Jens Hoetger)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.16 - AsusTek Computer)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Times Reader (Version: 2.055 - The New York Times Company) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
USB Tablet Manager (HKLM\...\RmTablet) (Version: 4.13 - )
Verbindungsassistent (HKLM\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.5  - Nullsoft, Inc)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (HKLM\...\B41C7C96D83162A676DA7365ADEFD6C1AF62A4EE) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (HKLM\...\B5C82F3814F82FB37F1513B3185399BD88892B08) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

10-03-2014 15:10:38 Windows Update
11-03-2014 18:44:04 Windows Update
15-03-2014 13:42:32 Windows Update
18-03-2014 18:31:55 Windows Update
19-03-2014 10:36:31 Windows Update
20-03-2014 11:39:51 Windows Update
21-03-2014 12:51:21 Windows Update
23-03-2014 21:36:42 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4AD27068-9E63-4C6B-A346-E7D22DEF7D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {9F9D803D-C390-454C-9242-C861996635EA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-14 13:49 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-06-24 17:12 - 2009-08-19 01:35 - 00219136 _____ () C:\Windows\System32\AsusService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00241664 _____ () C:\Program Files\Join Air\AssistantServices.exe
2011-05-10 09:42 - 2010-02-23 10:01 - 00329168 ____N () C:\Program Files\Verbindungsassistent\WTGService.exe
2012-01-30 21:07 - 2011-07-19 13:57 - 00853504 _____ () C:\windows\system32\atwtusb.exe
2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00030032 _____ () C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00839680 _____ () C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2011-08-02 18:55 - 2011-05-28 22:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2010-03-16 02:48 - 2010-03-16 02:48 - 01754448 _____ () C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2012-01-30 21:07 - 2010-10-18 03:28 - 00733928 _____ () C:\Windows\System32\AtwtusbIcon.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00132608 _____ () C:\Program Files\Join Air\UIExec.exe
2013-06-22 11:34 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-02-15 09:58 - 2014-02-15 09:59 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-11 20:14 - 2014-03-11 20:14 - 16276872 _____ () C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: WTGService => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPSON SX230 Series => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE /FU "C:\Users\NIGHTC~1\AppData\Local\Temp\E_S38F5.tmp" /EF "HKCU"
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Speech Recognition => "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/24/2014 11:00:14 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (03/20/2014 06:34:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/17/2014 08:29:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/17/2014 07:53:15 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (03/16/2014 07:28:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/16/2014 06:43:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/15/2014 04:26:27 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/14/2014 03:19:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/14/2014 02:39:02 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/13/2014 11:16:17 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (03/26/2014 11:24:51 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:51 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:51 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:35 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:32 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:31 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:30 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:30 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/26/2014 11:24:29 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (03/24/2014 11:00:14 PM) (Source: System Restore)(User: )
Description: C:\windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (03/20/2014 06:34:34 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/17/2014 08:29:16 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/17/2014 07:53:15 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (03/16/2014 07:28:08 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/16/2014 06:43:07 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/15/2014 04:26:27 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/14/2014 03:19:55 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/14/2014 02:39:02 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/13/2014 11:16:17 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


==================== Memory info =========================== 

Percentage of memory in use: 73%
Total physical RAM: 1014.18 MB
Available physical RAM: 271.65 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 716.5 MB
Total Virtual: 2047.88 MB
Available Virtual: 1908.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:46.02 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:117.87 GB) (Free:111.39 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 29133921)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=118 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End Of Log ============================

Liebe Grüße und tausend Dank im Voraus,

problemchild

schrauber · 27.03.2014, 07:13

Hi,

FRST löschen und neu laden, dann bitte nochmal scannen lassen, die FRST.txt ist leer.

problemchild · 27.03.2014, 08:49

Hallo schrauber,

vielen Dank für deine blitzschnelle Antwort.

Ich habe alles nach deiner Anleitung ausgeführt, hier das Ergebnis:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by nightchild (administrator) on NIGHTCHILD-PC on 27-03-2014 08:10:22
Running from C:\Users\nightchild\Desktop
Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
() C:\Windows\System32\AsusService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\Join Air\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ASUS) C:\Program Files\EeePC\CapsHook\CapsHook.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Boingo Wireless, Inc.) C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
() C:\Windows\System32\AtwtusbIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Join Air\UIExec.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\windows\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [EeeSplendidAgent] - C:\Program Files\ASUS\EPC\EeeSplendid\AsAgent.exe
HKLM\...\Run: [HotkeyMon] - C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe [100328 2009-09-11] (ASUSTeK Computer Inc.)
HKLM\...\Run: [HotkeyService] - C:\Program Files\EeePC\HotkeyService\HotkeyService.exe [1242544 2010-06-04] (ASUSTeK Computer Inc.)
HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\EeePC\SHE\SuperHybridEngine.exe [412600 2010-06-09] (ASUSTeK Computer Inc.)
HKLM\...\Run: [CapsHook] - C:\Program Files\EeePC\CapsHook\CapsHook.exe [445344 2010-05-29] (ASUS)
HKLM\...\Run: [Eee Docking] - C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [415920 2010-03-30] ()
HKLM\...\Run: [ASUS WebStorage] - C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-05-04] ()
HKLM\...\Run: [ASUSPRP] - C:\Program Files\ASUS\APRP\APRP.EXE [2018032 2010-06-24] (ASUSTek Computer Inc.)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [AtwtusbIcon] - C:\windows\SYSTEM32\AtwtusbIcon.exe [733928 2010-10-18] ()
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [UIExec] - C:\Program Files\Join Air\UIExec.exe [132608 2009-08-31] ()
HKLM\...\Run: [BrStsMon00] - C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKU\S-1-5-21-3485545903-2714146121-1167164138-1000\...\MountPoints2: {78a4504b-7aad-11e0-b64d-bcaec53076ed} - E:\.\Autorun.exe AUTORUN=1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hiergehtslos.de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://eeepc.asus.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: about:newtab
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Drag &amp; DropZones - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\dendzones@captaincaveman.nl.xpi [2011-10-17]
FF Extension: Dict.cc Translation - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\searchdictcc@roughael.xpi [2011-10-17]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] ()
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [156160 2012-03-07] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [125440 2012-03-07] (SEIKO EPSON CORPORATION)
R2 UI Assistant Service; C:\Program Files\Join Air\AssistantServices.exe [241664 2009-08-31] ()
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [329168 2010-02-23] ()
R2 WTService; C:\windows\system32\atwtusb.exe [853504 2011-07-19] ()

==================== Drivers (Whitelisted) ====================

R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11520 2010-06-21] ()
R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 ewsercd; C:\windows\System32\DRIVERS\ewsercd.sys [100224 2011-05-10] (Huawei Technologies Co., Ltd.)
S3 hwusbfake; C:\windows\System32\DRIVERS\ewusbfake.sys [103040 2011-05-10] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-13] ( )
R3 moufiltr; C:\windows\System32\DRIVERS\moufiltr.sys [6144 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 vhidmini; C:\windows\System32\DRIVERS\walvhid.sys [6144 2009-08-20] (Windows (R) Win 7 DDK provider)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; \SystemRoot\system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; \SystemRoot\system32\DRIVERS\btwrchid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2030-01-01 12:19 - 2010-11-20 13:40 - 00383786 __RSH () C:\bootmgr
2014-03-27 08:10 - 2014-03-27 08:11 - 00012982 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:53 - 2014-03-26 11:59 - 00026072 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-26 11:50 - 2014-03-27 08:10 - 00000000 ____D () C:\FRST
2014-03-26 11:45 - 2014-03-26 11:46 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 14:26 - 2014-03-20 17:55 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-15 14:54 - 2014-02-23 07:54 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-15 14:54 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-15 14:54 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-15 14:54 - 2014-02-23 06:35 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-15 14:53 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-15 14:53 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 08:31 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-13 08:31 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-13 08:31 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-13 08:31 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-13 08:31 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-04 00:14 - 2014-03-17 21:33 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-02 19:09 - 2014-03-02 19:13 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage

==================== One Month Modified Files and Folders =======

2030-01-01 12:19 - 2009-07-14 05:57 - 00029696 ___SH () C:\windows\system32\config\BCD-Template.LOG
2030-01-01 12:19 - 2009-07-14 05:52 - 00032768 _____ () C:\windows\system32\config\BCD-Template
2014-03-27 08:11 - 2014-03-27 08:10 - 00012982 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-27 08:10 - 2014-03-26 11:50 - 00000000 ____D () C:\FRST
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-27 07:41 - 2011-05-05 02:32 - 01262859 _____ () C:\windows\WindowsUpdate.log
2014-03-27 07:14 - 2014-02-15 10:16 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 07:11 - 2013-12-10 15:29 - 00295818 _____ () C:\windows\IE11_main.log
2014-03-26 22:53 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-26 22:53 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-26 13:53 - 2012-04-25 10:54 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-26 13:53 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-26 13:53 - 2009-07-14 05:39 - 00103740 _____ () C:\windows\setupact.log
2014-03-26 13:53 - 2009-07-14 03:04 - 00000418 _____ () C:\windows\win.ini
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:59 - 2014-03-26 11:53 - 00026072 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-26 11:46 - 2014-03-26 11:45 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:45 - 2011-05-04 11:35 - 00000000 ____D () C:\Users\nightchild
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 17:55 - 2014-03-20 14:26 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-18 19:44 - 2013-08-17 22:38 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 19:37 - 2009-07-25 08:50 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-18 19:33 - 2011-05-21 07:51 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-17 21:33 - 2014-03-04 00:14 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-15 17:16 - 2012-03-14 16:22 - 00000000 ____D () C:\Users\nightchild\Documents\Scribble Papers
2014-03-15 16:41 - 2012-01-17 07:06 - 00000000 ___RD () C:\Users\nightchild\Desktop\aktuelle ablage
2014-03-15 15:15 - 2009-07-14 05:33 - 00325536 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 15:13 - 2010-06-24 17:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 16:59 - 2014-02-10 20:17 - 00015850 _____ () C:\Users\nightchild\Desktop\Urlaub 2014.odt
2014-03-13 09:10 - 2011-05-31 09:03 - 00000000 ___RD () C:\Users\nightchild\Desktop\meins
2014-03-12 12:35 - 2013-10-28 15:23 - 00029548 _____ () C:\Users\nightchild\Desktop\skript in bearbeitung.odt
2014-03-12 10:59 - 2013-10-20 12:11 - 00000000 ____D () C:\Program Files\OXXOGames
2014-03-12 10:59 - 2011-05-10 19:59 - 00286728 _____ () C:\windows\PFRO.log
2014-03-11 20:14 - 2013-05-08 21:29 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-11 20:14 - 2013-05-08 21:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-05 21:12 - 2012-11-24 22:58 - 00000000 ___RD () C:\Program Files\Skype
2014-03-05 21:12 - 2010-06-24 17:21 - 00000000 ____D () C:\ProgramData\Skype
2014-03-04 16:10 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-03-02 19:37 - 2012-01-17 07:05 - 00000000 ____D () C:\Users\nightchild\Desktop\progs n games
2014-03-02 19:13 - 2014-03-02 19:09 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage
2014-02-25 18:00 - 2011-05-15 12:46 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\ICQ

Files to move or delete:
====================
C:\Users\nightchild\avira_free_antivirus_de.exe


Some content of TEMP:
====================
C:\Users\nightchild\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 18:27

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by nightchild at 2014-03-27 08:12:36
Running from C:\Users\nightchild\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Angry Birds (HKLM\...\{910D3FB9-E341-4DD9-B52A-3B3C0C340AF6}) (Version: 1.5.3 - Rovio)
ASUS VIBE (HKLM\...\ASUS VIBE) (Version: 1.0.187 - Ecareme, Inc.)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.)
Audacity 1.3.13 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Benutzerhandbuch - Grundlagen EPSON SX230 Series (HKLM\...\EPSON SX230 Series Bog) (Version:  - )
Benutzerhandbuch EPSON SX230 Series (HKLM\...\EPSON SX230 Series Useg) (Version:  - )
Boingo Wi-Fi (HKLM\...\{84C2B80B-64A2-4B22-93EC-F30C3D6BF7D8}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr Kawashima (HKCU\...\BrainGame) (Version: 1.0 - )
ebi.BookReader3J (HKLM\...\{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}) (Version: 3.75.14 - eBOOK Initiative Japan Co., Ltd.)
E-Cam (HKLM\...\{185AFA7A-F63E-450B-94AA-011CAC18090E}) (Version: 2.0.2.5 - )
Eee Docking 3.7.0 (HKLM\...\Eee Docking_is1) (Version: 3.7.0 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (Version: 5.1.2.0011 - ASUS) Hidden
Epson Easy Photo Print 2 (HKLM\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version:  - SEIKO EPSON Corporation)
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
FontResizer (Version: 1.01.0011 - ASUSTek) Hidden
Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Notes & Office Ink (HKLM\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version:   -  )
Free YouTube to MP3 Converter version 3.12.23.219 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.23.219 - DVDVideoSoft Ltd.)
Game Park Console (HKLM\...\{D44AA979-47C2-4BC0-A860-09A54224EA44}_is1) (Version: 6.2.0.3 - Oberon Media, Inc.)
Google SketchUp 8 (HKLM\...\{5E2ABE05-B7AD-4D77-8A19-BDA0E4302190}) (Version: 3.0.11762 - Google, Inc.)
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.27 - AsusTek Computer)
ICQ7.5 (HKLM\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Join Air (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.21 - Asus)
LocaleMe (HKLM\...\{F58C1D44-4AC9-48E8-9049-7A6CDFCB415C}) (Version: 1.3 - ASUS)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Editor Free (HKLM\...\Music Editor Free) (Version:  - FAE Inc.)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Scribble Papers 2.7.1 (HKLM\...\Scribble Papers_is1) (Version:  - Jens Hoetger)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.16 - AsusTek Computer)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Times Reader (Version: 2.055 - The New York Times Company) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
USB Tablet Manager (HKLM\...\RmTablet) (Version: 4.13 - )
Verbindungsassistent (HKLM\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.5  - Nullsoft, Inc)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (HKLM\...\B41C7C96D83162A676DA7365ADEFD6C1AF62A4EE) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (HKLM\...\B5C82F3814F82FB37F1513B3185399BD88892B08) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

15-03-2014 13:42:32 Windows Update
18-03-2014 18:31:55 Windows Update
19-03-2014 10:36:31 Windows Update
20-03-2014 11:39:51 Windows Update
21-03-2014 12:51:21 Windows Update
23-03-2014 21:36:42 Windows Update
27-03-2014 06:08:28 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4AD27068-9E63-4C6B-A346-E7D22DEF7D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {9F9D803D-C390-454C-9242-C861996635EA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-14 13:49 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-06-24 17:12 - 2009-08-19 01:35 - 00219136 _____ () C:\Windows\System32\AsusService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00241664 _____ () C:\Program Files\Join Air\AssistantServices.exe
2011-05-10 09:42 - 2010-02-23 10:01 - 00329168 ____N () C:\Program Files\Verbindungsassistent\WTGService.exe
2012-01-30 21:07 - 2011-07-19 13:57 - 00853504 _____ () C:\windows\system32\atwtusb.exe
2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00030032 _____ () C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00839680 _____ () C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2011-08-02 18:55 - 2011-05-28 22:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2010-03-16 02:48 - 2010-03-16 02:48 - 01754448 _____ () C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2012-01-30 21:07 - 2010-10-18 03:28 - 00733928 _____ () C:\Windows\System32\AtwtusbIcon.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00132608 _____ () C:\Program Files\Join Air\UIExec.exe
2013-06-22 11:34 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-02-15 09:58 - 2014-02-15 09:59 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: WTGService => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPSON SX230 Series => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE /FU "C:\Users\NIGHTC~1\AppData\Local\Temp\E_S38F5.tmp" /EF "HKCU"
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Speech Recognition => "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/26/2014 02:14:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avcenter.exe, Version: 14.0.3.332, Zeitstempel: 0x52f8ba8d
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004afb2
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xavcenter.exe0
Pfad der fehlerhaften Anwendung: avcenter.exe1
Pfad des fehlerhaften Moduls: avcenter.exe2
Berichtskennung: avcenter.exe3

Error: (03/26/2014 01:23:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00012298
ID des fehlerhaften Prozesses: 0x158c
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3

Error: (03/26/2014 00:42:10 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/24/2014 11:00:14 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (03/20/2014 06:34:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/17/2014 08:29:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/17/2014 07:53:15 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (03/16/2014 07:28:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/16/2014 06:43:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/15/2014 04:26:27 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (03/27/2014 07:11:21 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7

Error: (03/27/2014 07:08:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:11 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/27/2014 07:08:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (03/26/2014 02:14:28 PM) (Source: Application Error)(User: )
Description: avcenter.exe14.0.3.33252f8ba8dole32.dll6.1.7601.175144ce7b96fc00000050004afb2

Error: (03/26/2014 01:23:54 PM) (Source: Application Error)(User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c000000500012298158c01cf48ed8ab0c2a4C:\Users\nightchild\Desktop\Gmer-19357.exeC:\Users\nightchild\Desktop\Gmer-19357.exe7ec2be83-b4e1-11e3-bee6-bcaec53076ed

Error: (03/26/2014 00:42:10 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/24/2014 11:00:14 PM) (Source: System Restore)(User: )
Description: C:\windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (03/20/2014 06:34:34 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/17/2014 08:29:16 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/17/2014 07:53:15 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (03/16/2014 07:28:08 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/16/2014 06:43:07 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/15/2014 04:26:27 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


==================== Memory info =========================== 

Percentage of memory in use: 69%
Total physical RAM: 1014.18 MB
Available physical RAM: 307.29 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 842.67 MB
Total Virtual: 2047.88 MB
Available Virtual: 1915.09 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:46.82 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:117.87 GB) (Free:111.39 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 29133921)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=118 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End Of Log ============================

Mir ist noch etwas aufgefallen: Egal wie oft ich das Netbook am Tag an und wieder ausschalte, jedesmal ist da bei dem "Herunterfahren-Button" das Ausrufezeichen und da steht "Installiert Updates und fährt den Computer dann herunter". Das steht jedes Mal da, auch wenn ich das Netbook nach einer halben Stunde wieder anschalte und dann wieder aus.
Was mir noch auffällt: Bei dem Fähnchen in der Taskleiste ist immer ein "x". Avira will aktualisiert werden. Aber es geht nicht, ich habe es schon mehrmals versucht. Ich klicke darauf, dann öffne ich Avira und klicke auf update aber nichts tut sich.
Und noch eine Sache: Als das Netbook neu war, konnte ich es einfach herunterfahren. Aber seit einigen Monaten steht immer da: "Warten, dass Hintergrundprogramme geschlossen werden." Dann dauert es eine Weile und dann fährt er herunter.

Lieben Gruß,

problemchild

schrauber · 28.03.2014, 08:17

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

problemchild · 28.03.2014, 14:35

Hallo Schrauber,

erst mal vielen Dank für den Downloadlink, du bist wirklich sehr engagiert. Das finde ich klasse!
Hier der Log:

Combofix Logfile:

Code:

ATTFilter

ComboFix 14-03-24.01 - nightchild 28.03.2014   9:46.1.2 - x86
Microsoft Windows 7 Starter   6.1.7601.1.1252.49.1031.18.1014.257 [GMT 1:00]
ausgeführt von:: c:\users\nightchild\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\nightchild\AppData\Roaming\Microsoft\Windows\Recent\Comfy Cakes.pif
c:\users\nightchild\avira_free_antivirus_de.exe
c:\windows\IsUn0407.exe
c:\windows\system32\Thumbs.db
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-28 bis 2014-03-28  ))))))))))))))))))))))))))))))
.
.
2030-01-01 11:19 . 2011-05-21 08:49	--------	d-----w-	C:\Boot
2014-03-28 09:06 . 2014-03-28 09:07	--------	d-----w-	c:\users\nightchild\AppData\Local\temp
2014-03-28 09:06 . 2014-03-28 09:06	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-03-28 08:31 . 2014-03-07 04:35	7969936	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{046146C8-988F-4DDC-9839-F9E9B51C60ED}\mpengine.dll
2014-03-26 10:50 . 2014-03-27 07:14	--------	d-----w-	C:\FRST
2014-03-20 13:26 . 2014-03-20 16:55	--------	d-----w-	c:\program files\Mozilla Thunderbird
2014-03-15 13:53 . 2014-02-23 06:54	817664	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-03-15 13:53 . 2014-02-23 06:54	1767936	----a-w-	c:\windows\system32\wininet.dll
2014-03-15 13:53 . 2014-02-23 07:07	770736	----a-w-	c:\program files\Internet Explorer\iexplore.exe
2014-03-13 07:31 . 2014-02-04 02:04	509440	----a-w-	c:\windows\system32\qedit.dll
2014-03-13 07:31 . 2014-01-28 02:07	185344	----a-w-	c:\windows\system32\wwansvc.dll
2014-03-13 07:31 . 2014-01-29 02:06	381440	----a-w-	c:\windows\system32\wer.dll
2014-03-13 07:31 . 2014-02-04 02:04	1230336	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-03-13 07:31 . 2014-02-07 01:07	2349056	----a-w-	c:\windows\system32\win32k.sys
2014-03-02 11:26 . 2014-03-02 11:26	--------	d-----w-	c:\windows\Migration
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-11 19:14 . 2013-05-08 20:29	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-03-11 19:14 . 2013-05-08 20:29	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"HotkeyMon"="AsusSender.exe" [2010-03-03 29184]
"HotkeyService"="AsusSender.exe" [2010-03-03 29184]
"SuperHybridEngine"="AsusSender.exe" [2010-03-03 29184]
"CapsHook"="AsusSender.exe" [2010-03-03 29184]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-03-29 415920]
"ASUS WebStorage"="c:\program files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-06-22 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-06-22 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-06-22 150552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-06-22 9177632]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-04-13 1594664]
"Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-05-04 2429]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-06-24 2018032]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2010-04-13 83240]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-02-22 689744]
"UIExec"="c:\program files\Join Air\UIExec.exe" [2009-08-31 132608]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2010-06-10 2621440]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1425208]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2011-8-18 110592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57	959904	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtwtusbIcon]
2010-10-18 02:28	733928	----a-w-	c:\windows\System32\AtwtusbIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
2010-10-12 12:56	979328	----a-w-	c:\program files\Epson Software\Event Manager\EEventManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX230 Series]
2012-03-07 18:28	212480	----a-w-	c:\windows\System32\spool\drivers\w32x86\3\E_FATIHKE.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
2010-03-03 05:21	29184	----a-w-	c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2012-09-12 15:07	4272640	----a-w-	c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Speech Recognition]
2009-07-14 01:14	51712	----a-w-	c:\windows\Speech\Common\sapisvr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16	254336	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2007-10-10 05:28	36352	----a-w-	c:\program files\Winamp\winampa.exe
.
R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R2 UI Assistant Service;UI Assistant Service;c:\program files\Join Air\AssistantServices.exe [2009-08-31 241664]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-13 43944]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 ewsercd;Huawei DataCard USB Serial Port;c:\windows\system32\DRIVERS\ewsercd.sys [2011-05-10 100224]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [2011-05-10 103040]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2009-04-22 9728]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-06-21 11520]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-19 37352]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-02-22 440400]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [2012-03-07 156160]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [2012-03-07 125440]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
S2 WTGService;WTGService;c:\program files\Verbindungsassistent\WTGService.exe [2010-02-23 329168]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2011-07-19 853504]
S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2010-04-13 51712]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-08 19:14]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.hiergehtslos.de
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\
FF - prefs.js: browser.search.selectedEngine - 
FF - prefs.js: browser.startup.homepage - about:newtab
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-EeeSplendidAgent - c:\program files\ASUS\EPC\EeeSplendid\AsAgent.exe
AddRemove-Adobe Photoshop 7.0 - c:\windows\ISUN0407.EXE
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-03-28  10:14:28
ComboFix-quarantined-files.txt  2014-03-28 09:14
.
Vor Suchlauf: 8 Verzeichnis(se), 49.670.447.104 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 49.449.426.944 Bytes frei
.
- - End Of File - - 2D0599849CC4134D29C5E0D501F2B918

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
Combofix Logfile:

Code:

ATTFilter

ComboFix 14-03-24.01 - nightchild 28.03.2014   9:46.1.2 - x86
Microsoft Windows 7 Starter   6.1.7601.1.1252.49.1031.18.1014.257 [GMT 1:00]
ausgeführt von:: c:\users\nightchild\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\nightchild\AppData\Roaming\Microsoft\Windows\Recent\Comfy Cakes.pif
c:\users\nightchild\avira_free_antivirus_de.exe
c:\windows\IsUn0407.exe
c:\windows\system32\Thumbs.db
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-02-28 bis 2014-03-28  ))))))))))))))))))))))))))))))
.
.
2030-01-01 11:19 . 2011-05-21 08:49	--------	d-----w-	C:\Boot
2014-03-28 09:06 . 2014-03-28 09:07	--------	d-----w-	c:\users\nightchild\AppData\Local\temp
2014-03-28 09:06 . 2014-03-28 09:06	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-03-28 08:31 . 2014-03-07 04:35	7969936	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{046146C8-988F-4DDC-9839-F9E9B51C60ED}\mpengine.dll
2014-03-26 10:50 . 2014-03-27 07:14	--------	d-----w-	C:\FRST
2014-03-20 13:26 . 2014-03-20 16:55	--------	d-----w-	c:\program files\Mozilla Thunderbird
2014-03-15 13:53 . 2014-02-23 06:54	817664	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-03-15 13:53 . 2014-02-23 06:54	1767936	----a-w-	c:\windows\system32\wininet.dll
2014-03-15 13:53 . 2014-02-23 07:07	770736	----a-w-	c:\program files\Internet Explorer\iexplore.exe
2014-03-13 07:31 . 2014-02-04 02:04	509440	----a-w-	c:\windows\system32\qedit.dll
2014-03-13 07:31 . 2014-01-28 02:07	185344	----a-w-	c:\windows\system32\wwansvc.dll
2014-03-13 07:31 . 2014-01-29 02:06	381440	----a-w-	c:\windows\system32\wer.dll
2014-03-13 07:31 . 2014-02-04 02:04	1230336	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-03-13 07:31 . 2014-02-07 01:07	2349056	----a-w-	c:\windows\system32\win32k.sys
2014-03-02 11:26 . 2014-03-02 11:26	--------	d-----w-	c:\windows\Migration
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-03-11 19:14 . 2013-05-08 20:29	692616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-03-11 19:14 . 2013-05-08 20:29	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"HotkeyMon"="AsusSender.exe" [2010-03-03 29184]
"HotkeyService"="AsusSender.exe" [2010-03-03 29184]
"SuperHybridEngine"="AsusSender.exe" [2010-03-03 29184]
"CapsHook"="AsusSender.exe" [2010-03-03 29184]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-03-29 415920]
"ASUS WebStorage"="c:\program files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-06-22 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-06-22 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-06-22 150552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-06-22 9177632]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-04-13 1594664]
"Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-05-04 2429]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-06-24 2018032]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2010-04-13 83240]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-02-22 689744]
"UIExec"="c:\program files\Join Air\UIExec.exe" [2009-08-31 132608]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2010-06-10 2621440]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1425208]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2011-8-18 110592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57	959904	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtwtusbIcon]
2010-10-18 02:28	733928	----a-w-	c:\windows\System32\AtwtusbIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
2010-10-12 12:56	979328	----a-w-	c:\program files\Epson Software\Event Manager\EEventManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX230 Series]
2012-03-07 18:28	212480	----a-w-	c:\windows\System32\spool\drivers\w32x86\3\E_FATIHKE.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
2010-03-03 05:21	29184	----a-w-	c:\windows\System32\AsusSender.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2012-09-12 15:07	4272640	----a-w-	c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Speech Recognition]
2009-07-14 01:14	51712	----a-w-	c:\windows\Speech\Common\sapisvr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 07:16	254336	----a-w-	c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2007-10-10 05:28	36352	----a-w-	c:\program files\Winamp\winampa.exe
.
R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R2 UI Assistant Service;UI Assistant Service;c:\program files\Join Air\AssistantServices.exe [2009-08-31 241664]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-13 43944]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 ewsercd;Huawei DataCard USB Serial Port;c:\windows\system32\DRIVERS\ewsercd.sys [2011-05-10 100224]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [2011-05-10 103040]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2009-04-22 9728]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-06-21 11520]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-19 37352]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-02-22 440400]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [2012-03-07 156160]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [2012-03-07 125440]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
S2 WTGService;WTGService;c:\program files\Verbindungsassistent\WTGService.exe [2010-02-23 329168]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2011-07-19 853504]
S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2010-01-25 245760]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2010-04-13 51712]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
.
Inhalt des "geplante Tasks" Ordners
.
2014-03-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-08 19:14]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.hiergehtslos.de
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\
FF - prefs.js: browser.search.selectedEngine - 
FF - prefs.js: browser.startup.homepage - about:newtab
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-EeeSplendidAgent - c:\program files\ASUS\EPC\EeeSplendid\AsAgent.exe
AddRemove-Adobe Photoshop 7.0 - c:\windows\ISUN0407.EXE
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-03-28  10:14:28
ComboFix-quarantined-files.txt  2014-03-28 09:14
.
Vor Suchlauf: 8 Verzeichnis(se), 49.670.447.104 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 49.449.426.944 Bytes frei
.
- - End Of File - - 2D0599849CC4134D29C5E0D501F2B918

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
[/CODE]

Beste Grüße,

problemchild

schrauber · 29.03.2014, 09:41

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

problemchild · 29.03.2014, 23:09

Hallo Schrauber,

hier die Protokolle:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 29.03.2014
Suchlauf-Zeit: 20:57:24
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.03.29.04
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: nightchild

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 231926
Verstrichene Zeit: 2 Std, 18 Min, 46 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 25
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\Themes, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 

Dateien: 126
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSiTunes.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSVideoDownloader.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.MediaTagsEditor.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Presets.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.TaskbarManager.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.TroubleShooter.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.VideoFileToIPOD.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.YouTubeResources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.YTConverterAppExt.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfile.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfileD.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\Newtonsoft.Json.Net20.Merged.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\taglib-sharp.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ytgroovlc.exe, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\FreeYouTubeToMP3ConverterProfile.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\History.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\History_tmp.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\Lynyrd Skynyrd-Free bird(1).png, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.022 - Bericht erstellt am 29/03/2014 um 21:39:13
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)
# Benutzername : nightchild - NIGHTCHILD-PC
# Gestartet von : C:\Users\nightchild\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\Common Files\Plasmoo
Datei Gelöscht : C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\searchplugins\ask-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_badges_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_badges_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_music-editor-free_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_music-editor-free_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{0C58B7D1-D415-492B-A149-E976156BD3B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16843

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [3345 octets] - [29/03/2014 21:34:23]
AdwCleaner[S0].txt - [3248 octets] - [29/03/2014 21:39:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3308 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Starter x86
Ran by nightchild on 29.03.2014 at 22:18:37,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\windows\system32\sho2E4.tmp
Successfully deleted: [File] C:\windows\system32\sho9165.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{521B71AA-3AC0-409D-8494-4775208ABB97}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{54C4BE78-A1E3-4C23-97D3-F786917F4198}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{6E2E368D-07C2-4261-8699-C506C485E228}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{87D25FC0-AD61-4365-8032-1BF6078C7988}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{C2CB48DF-17B2-42FF-A30E-A25EAA479143}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{C5EF80A2-3B07-43EB-953A-2CDC31C53854}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{D6F6D8B0-95EE-45B8-9A38-5FD9B4A03A2C}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{EE8B5BD4-6A3A-4FF5-9A63-44FA6E1C1262}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{F1341FC4-9B6C-484E-B0F9-1DC8A10D1B13}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{FA54688D-4C1D-422E-973B-7D998715C7AC}



~~~ FireFox

Emptied folder: C:\Users\nightchild\AppData\Roaming\mozilla\firefox\profiles\0aj5mbj8.default\minidumps [128 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.03.2014 at 22:28:29,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by nightchild (administrator) on NIGHTCHILD-PC on 29-03-2014 22:35:48
Running from C:\Users\nightchild\Desktop
Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Boingo Wireless, Inc.) C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Join Air\UIExec.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\System32\AsusService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(ASUS) C:\Program Files\EeePC\CapsHook\CapsHook.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\Join Air\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\windows\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [HotkeyMon] - C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe [100328 2009-09-11] (ASUSTeK Computer Inc.)
HKLM\...\Run: [HotkeyService] - C:\Program Files\EeePC\HotkeyService\HotkeyService.exe [1242544 2010-06-04] (ASUSTeK Computer Inc.)
HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\EeePC\SHE\SuperHybridEngine.exe [412600 2010-06-09] (ASUSTeK Computer Inc.)
HKLM\...\Run: [CapsHook] - C:\Program Files\EeePC\CapsHook\CapsHook.exe [445344 2010-05-29] (ASUS)
HKLM\...\Run: [Eee Docking] - C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [415920 2010-03-30] ()
HKLM\...\Run: [ASUS WebStorage] - C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-05-04] ()
HKLM\...\Run: [ASUSPRP] - C:\Program Files\ASUS\APRP\APRP.EXE [2018032 2010-06-24] (ASUSTek Computer Inc.)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [UIExec] - C:\Program Files\Join Air\UIExec.exe [132608 2009-08-31] ()
HKLM\...\Run: [BrStsMon00] - C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: about:newtab
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Drag &amp; DropZones - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\dendzones@captaincaveman.nl.xpi [2011-10-17]
FF Extension: Dict.cc Translation - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\searchdictcc@roughael.xpi [2011-10-17]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: Adblock Edge - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-03-29]

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] ()
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [156160 2012-03-07] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [125440 2012-03-07] (SEIKO EPSON CORPORATION)
R2 UI Assistant Service; C:\Program Files\Join Air\AssistantServices.exe [241664 2009-08-31] ()
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [329168 2010-02-23] ()
R2 WTService; C:\windows\system32\atwtusb.exe [853504 2011-07-19] ()

==================== Drivers (Whitelisted) ====================

R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11520 2010-06-21] ()
R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 ewsercd; C:\windows\System32\DRIVERS\ewsercd.sys [100224 2011-05-10] (Huawei Technologies Co., Ltd.)
S3 hwusbfake; C:\windows\System32\DRIVERS\ewusbfake.sys [103040 2011-05-10] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-13] ( )
R3 moufiltr; C:\windows\System32\DRIVERS\moufiltr.sys [6144 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 vhidmini; C:\windows\System32\DRIVERS\walvhid.sys [6144 2009-08-20] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; \SystemRoot\system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; \SystemRoot\system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\NIGHTC~1\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2030-01-01 12:19 - 2010-11-20 13:40 - 00383786 __RSH () C:\bootmgr
2014-03-29 22:28 - 2014-03-29 22:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 22:18 - 2014-03-29 22:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 22:05 - 2014-03-29 22:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 21:44 - 2014-03-29 21:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 21:34 - 2014-03-29 21:39 - 00000000 ____D () C:\AdwCleaner
2014-03-29 21:26 - 2014-03-29 21:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 21:20 - 2014-03-29 21:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 18:34 - 2014-03-29 21:12 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 18:33 - 2014-03-29 18:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 18:33 - 2014-03-29 18:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 18:33 - 2014-03-05 09:26 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-29 18:33 - 2014-03-05 09:26 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-29 18:33 - 2014-03-05 09:26 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-29 07:24 - 2014-03-29 07:23 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 10:14 - 2014-03-28 10:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 09:41 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-28 09:41 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-28 09:41 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-28 09:40 - 2014-03-28 10:14 - 00000000 ____D () C:\Qoobox
2014-03-28 09:39 - 2014-03-28 10:09 - 00000000 ____D () C:\windows\erdnt
2014-03-28 09:24 - 2014-03-28 09:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 09:33 - 2014-03-27 11:45 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 08:10 - 2014-03-29 22:36 - 00012320 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:53 - 2014-03-27 08:14 - 00026134 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-26 11:50 - 2014-03-29 22:35 - 00000000 ____D () C:\FRST
2014-03-26 11:45 - 2014-03-26 11:46 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 14:26 - 2014-03-20 17:55 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-15 14:54 - 2014-02-23 07:54 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-15 14:54 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-15 14:54 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-15 14:54 - 2014-02-23 06:35 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-15 14:53 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-15 14:53 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 08:31 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-13 08:31 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-13 08:31 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-13 08:31 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-13 08:31 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-04 00:14 - 2014-03-17 21:33 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-02 19:09 - 2014-03-29 21:46 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage

==================== One Month Modified Files and Folders =======

2030-01-01 12:19 - 2009-07-14 05:57 - 00029696 ___SH () C:\windows\system32\config\BCD-Template.LOG
2030-01-01 12:19 - 2009-07-14 05:52 - 00032768 _____ () C:\windows\system32\config\BCD-Template
2014-03-29 22:36 - 2014-03-27 08:10 - 00012320 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-29 22:35 - 2014-03-26 11:50 - 00000000 ____D () C:\FRST
2014-03-29 22:28 - 2014-03-29 22:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 22:18 - 2014-03-29 22:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 22:16 - 2011-05-05 02:32 - 01447760 _____ () C:\windows\WindowsUpdate.log
2014-03-29 22:05 - 2014-03-29 22:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 21:51 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-29 21:51 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-29 21:46 - 2014-03-02 19:09 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage
2014-03-29 21:44 - 2014-03-29 21:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 21:42 - 2009-07-14 03:04 - 00000418 _____ () C:\windows\win.ini
2014-03-29 21:41 - 2011-05-10 19:59 - 00338236 _____ () C:\windows\PFRO.log
2014-03-29 21:41 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-29 21:41 - 2009-07-14 05:39 - 00104188 _____ () C:\windows\setupact.log
2014-03-29 21:39 - 2014-03-29 21:34 - 00000000 ____D () C:\AdwCleaner
2014-03-29 21:26 - 2014-03-29 21:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 21:20 - 2014-03-29 21:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 21:12 - 2014-03-29 18:34 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 20:57 - 2014-02-20 15:46 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-03-29 20:57 - 2011-10-19 23:24 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\DVDVideoSoft
2014-03-29 18:33 - 2014-03-29 18:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 18:33 - 2014-03-29 18:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 18:33 - 2012-11-14 00:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 18:33 - 2012-01-17 07:05 - 00000000 ____D () C:\Users\nightchild\Desktop\progs n games
2014-03-29 08:43 - 2013-12-10 15:29 - 00317848 _____ () C:\windows\IE11_main.log
2014-03-29 08:40 - 2014-02-10 20:17 - 00021363 _____ () C:\Users\nightchild\Desktop\Urlaub 2014.odt
2014-03-29 07:23 - 2014-03-29 07:24 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 16:00 - 2014-02-15 10:16 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-28 15:51 - 2011-08-02 21:45 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\vlc
2014-03-28 15:04 - 2012-03-14 16:22 - 00000000 ____D () C:\Users\nightchild\Documents\Scribble Papers
2014-03-28 10:14 - 2014-03-28 10:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 10:14 - 2014-03-28 09:40 - 00000000 ____D () C:\Qoobox
2014-03-28 10:14 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-28 10:09 - 2014-03-28 09:39 - 00000000 ____D () C:\windows\erdnt
2014-03-28 10:07 - 2009-07-14 03:04 - 00000215 _____ () C:\windows\system.ini
2014-03-28 10:04 - 2011-05-04 11:35 - 00000000 ____D () C:\Users\nightchild
2014-03-28 09:24 - 2014-03-28 09:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 11:45 - 2014-03-27 09:33 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 08:14 - 2014-03-26 11:53 - 00026134 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 13:53 - 2012-04-25 10:54 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:46 - 2014-03-26 11:45 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 17:55 - 2014-03-20 14:26 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-18 19:44 - 2013-08-17 22:38 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 19:37 - 2009-07-25 08:50 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-18 19:33 - 2011-05-21 07:51 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-17 21:33 - 2014-03-04 00:14 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-15 16:41 - 2012-01-17 07:06 - 00000000 ___RD () C:\Users\nightchild\Desktop\aktuelle ablage
2014-03-15 15:15 - 2009-07-14 05:33 - 00325536 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 15:13 - 2010-06-24 17:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 09:10 - 2011-05-31 09:03 - 00000000 ___RD () C:\Users\nightchild\Desktop\meins
2014-03-12 12:35 - 2013-10-28 15:23 - 00029548 _____ () C:\Users\nightchild\Desktop\skript in bearbeitung.odt
2014-03-12 10:59 - 2013-10-20 12:11 - 00000000 ____D () C:\Program Files\OXXOGames
2014-03-11 20:14 - 2013-05-08 21:29 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-11 20:14 - 2013-05-08 21:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-05 21:12 - 2012-11-24 22:58 - 00000000 ___RD () C:\Program Files\Skype
2014-03-05 21:12 - 2010-06-24 17:21 - 00000000 ____D () C:\ProgramData\Skype
2014-03-05 09:26 - 2014-03-29 18:33 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-29 18:33 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-29 18:33 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-04 16:10 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET

Some content of TEMP:
====================
C:\Users\nightchild\AppData\Local\temp\avgnt.exe
C:\Users\nightchild\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 18:27

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by nightchild at 2014-03-29 22:39:28
Running from C:\Users\nightchild\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Angry Birds (HKLM\...\{910D3FB9-E341-4DD9-B52A-3B3C0C340AF6}) (Version: 1.5.3 - Rovio)
ASUS VIBE (HKLM\...\ASUS VIBE) (Version: 1.0.187 - Ecareme, Inc.)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.)
Audacity 1.3.13 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Benutzerhandbuch - Grundlagen EPSON SX230 Series (HKLM\...\EPSON SX230 Series Bog) (Version:  - )
Benutzerhandbuch EPSON SX230 Series (HKLM\...\EPSON SX230 Series Useg) (Version:  - )
Boingo Wi-Fi (HKLM\...\{84C2B80B-64A2-4B22-93EC-F30C3D6BF7D8}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr Kawashima (HKCU\...\BrainGame) (Version: 1.0 - )
ebi.BookReader3J (HKLM\...\{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}) (Version: 3.75.14 - eBOOK Initiative Japan Co., Ltd.)
E-Cam (HKLM\...\{185AFA7A-F63E-450B-94AA-011CAC18090E}) (Version: 2.0.2.5 - )
Eee Docking 3.7.0 (HKLM\...\Eee Docking_is1) (Version: 3.7.0 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (Version: 5.1.2.0011 - ASUS) Hidden
Epson Easy Photo Print 2 (HKLM\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version:  - SEIKO EPSON Corporation)
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
FontResizer (Version: 1.01.0011 - ASUSTek) Hidden
Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Notes & Office Ink (HKLM\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version:   -  )
Free YouTube to MP3 Converter version 3.12.23.219 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.23.219 - DVDVideoSoft Ltd.)
Game Park Console (HKLM\...\{D44AA979-47C2-4BC0-A860-09A54224EA44}_is1) (Version: 6.2.0.3 - Oberon Media, Inc.)
Google SketchUp 8 (HKLM\...\{5E2ABE05-B7AD-4D77-8A19-BDA0E4302190}) (Version: 3.0.11762 - Google, Inc.)
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.27 - AsusTek Computer)
ICQ7.5 (HKLM\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Join Air (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.21 - Asus)
LocaleMe (HKLM\...\{F58C1D44-4AC9-48E8-9049-7A6CDFCB415C}) (Version: 1.3 - ASUS)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Editor Free (HKLM\...\Music Editor Free) (Version:  - FAE Inc.)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Scribble Papers 2.7.1 (HKLM\...\Scribble Papers_is1) (Version:  - Jens Hoetger)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.16 - AsusTek Computer)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Times Reader (Version: 2.055 - The New York Times Company) Hidden
USB Tablet Manager (HKLM\...\RmTablet) (Version: 4.13 - )
Verbindungsassistent (HKLM\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.5  - Nullsoft, Inc)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (HKLM\...\B41C7C96D83162A676DA7365ADEFD6C1AF62A4EE) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (HKLM\...\B5C82F3814F82FB37F1513B3185399BD88892B08) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

15-03-2014 13:42:32 Windows Update
18-03-2014 18:31:55 Windows Update
19-03-2014 10:36:31 Windows Update
20-03-2014 11:39:51 Windows Update
21-03-2014 12:51:21 Windows Update
23-03-2014 21:36:42 Windows Update
27-03-2014 06:08:28 Windows Update
27-03-2014 11:08:00 Windows Update
28-03-2014 08:20:14 Windows Update
28-03-2014 14:55:32 Windows Update
29-03-2014 05:24:07 Windows Update
29-03-2014 07:41:14 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2014-03-28 10:06 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {4AD27068-9E63-4C6B-A346-E7D22DEF7D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {9F9D803D-C390-454C-9242-C861996635EA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-14 13:49 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-03-16 02:48 - 2010-03-16 02:48 - 01754448 _____ () C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00132608 _____ () C:\Program Files\Join Air\UIExec.exe
2013-06-22 11:34 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2010-06-24 17:12 - 2009-08-19 01:35 - 00219136 _____ () C:\Windows\System32\AsusService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00241664 _____ () C:\Program Files\Join Air\AssistantServices.exe
2011-05-10 09:42 - 2010-02-23 10:01 - 00329168 ____N () C:\Program Files\Verbindungsassistent\WTGService.exe
2012-01-30 21:07 - 2011-07-19 13:57 - 00853504 _____ () C:\windows\system32\atwtusb.exe
2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00030032 _____ () C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00839680 _____ () C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: WTGService => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AtwtusbIcon => AtwtusbIcon.exe
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPSON SX230 Series => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE /FU "C:\Users\NIGHTC~1\AppData\Local\Temp\E_S38F5.tmp" /EF "HKCU"
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Speech Recognition => "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 65%
Total physical RAM: 1014.18 MB
Available physical RAM: 350.13 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 1057.08 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:44.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:117.87 GB) (Free:111.39 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 29133921)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=118 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End Of Log ============================

Fleißige Grüße :-)

problemchild

problemchild · 29.03.2014, 23:19

Hallo Schrauber,

hier die Protokolle:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 29.03.2014
Suchlauf-Zeit: 20:57:24
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.03.29.04
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: nightchild

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 231926
Verstrichene Zeit: 2 Std, 18 Min, 46 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 25
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\Themes, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 

Dateien: 126
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSiTunes.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSVideoDownloader.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.MediaTagsEditor.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Presets.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.TaskbarManager.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.TroubleShooter.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.VideoFileToIPOD.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.YouTubeResources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.YTConverterAppExt.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfile.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfileD.xml, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\Newtonsoft.Json.Net20.Merged.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\taglib-sharp.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ytgroovlc.exe, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fi-FI\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sk-SK\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sl-SI\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\vi-VN\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CN\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.AppFx.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.DialogForms.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.Resources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\DVDVideoSoft.YouTubeResources.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\zh-TW\FreeYouTubeToMP3Converter.resources.dll, In Quarantäne, [09f71ce446ba8c74d99cb6a1a2607888], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\FreeYouTubeToMP3ConverterProfile.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\History.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\History_tmp.xml, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 
PUP.Optional.DVDVideoSoft.A, C:\Users\nightchild\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter\History\Lynyrd Skynyrd-Free bird(1).png, In Quarantäne, [0df3dc24f20e44bc53243a1de51d11ef], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.022 - Bericht erstellt am 29/03/2014 um 21:39:13
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)
# Benutzername : nightchild - NIGHTCHILD-PC
# Gestartet von : C:\Users\nightchild\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files\Common Files\Plasmoo
Datei Gelöscht : C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\searchplugins\ask-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_badges_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_badges_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_music-editor-free_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_music-editor-free_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_winrar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{0C58B7D1-D415-492B-A149-E976156BD3B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16843

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [3345 octets] - [29/03/2014 21:34:23]
AdwCleaner[S0].txt - [3248 octets] - [29/03/2014 21:39:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3308 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Starter x86
Ran by nightchild on 29.03.2014 at 22:18:37,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\windows\system32\sho2E4.tmp
Successfully deleted: [File] C:\windows\system32\sho9165.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{521B71AA-3AC0-409D-8494-4775208ABB97}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{54C4BE78-A1E3-4C23-97D3-F786917F4198}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{6E2E368D-07C2-4261-8699-C506C485E228}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{87D25FC0-AD61-4365-8032-1BF6078C7988}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{C2CB48DF-17B2-42FF-A30E-A25EAA479143}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{C5EF80A2-3B07-43EB-953A-2CDC31C53854}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{D6F6D8B0-95EE-45B8-9A38-5FD9B4A03A2C}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{EE8B5BD4-6A3A-4FF5-9A63-44FA6E1C1262}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{F1341FC4-9B6C-484E-B0F9-1DC8A10D1B13}
Successfully deleted: [Empty Folder] C:\Users\nightchild\appdata\local\{FA54688D-4C1D-422E-973B-7D998715C7AC}



~~~ FireFox

Emptied folder: C:\Users\nightchild\AppData\Roaming\mozilla\firefox\profiles\0aj5mbj8.default\minidumps [128 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.03.2014 at 22:28:29,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by nightchild (administrator) on NIGHTCHILD-PC on 29-03-2014 22:35:48
Running from C:\Users\nightchild\Desktop
Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Boingo Wireless, Inc.) C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Join Air\UIExec.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\System32\AsusService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(ASUS) C:\Program Files\EeePC\CapsHook\CapsHook.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\Join Air\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\windows\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [HotkeyMon] - C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe [100328 2009-09-11] (ASUSTeK Computer Inc.)
HKLM\...\Run: [HotkeyService] - C:\Program Files\EeePC\HotkeyService\HotkeyService.exe [1242544 2010-06-04] (ASUSTeK Computer Inc.)
HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\EeePC\SHE\SuperHybridEngine.exe [412600 2010-06-09] (ASUSTeK Computer Inc.)
HKLM\...\Run: [CapsHook] - C:\Program Files\EeePC\CapsHook\CapsHook.exe [445344 2010-05-29] (ASUS)
HKLM\...\Run: [Eee Docking] - C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [415920 2010-03-30] ()
HKLM\...\Run: [ASUS WebStorage] - C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-05-04] ()
HKLM\...\Run: [ASUSPRP] - C:\Program Files\ASUS\APRP\APRP.EXE [2018032 2010-06-24] (ASUSTek Computer Inc.)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [UIExec] - C:\Program Files\Join Air\UIExec.exe [132608 2009-08-31] ()
HKLM\...\Run: [BrStsMon00] - C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: about:newtab
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Drag &amp; DropZones - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\dendzones@captaincaveman.nl.xpi [2011-10-17]
FF Extension: Dict.cc Translation - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\searchdictcc@roughael.xpi [2011-10-17]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: Adblock Edge - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-03-29]

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] ()
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [156160 2012-03-07] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [125440 2012-03-07] (SEIKO EPSON CORPORATION)
R2 UI Assistant Service; C:\Program Files\Join Air\AssistantServices.exe [241664 2009-08-31] ()
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [329168 2010-02-23] ()
R2 WTService; C:\windows\system32\atwtusb.exe [853504 2011-07-19] ()

==================== Drivers (Whitelisted) ====================

R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11520 2010-06-21] ()
R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 ewsercd; C:\windows\System32\DRIVERS\ewsercd.sys [100224 2011-05-10] (Huawei Technologies Co., Ltd.)
S3 hwusbfake; C:\windows\System32\DRIVERS\ewusbfake.sys [103040 2011-05-10] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-13] ( )
R3 moufiltr; C:\windows\System32\DRIVERS\moufiltr.sys [6144 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 vhidmini; C:\windows\System32\DRIVERS\walvhid.sys [6144 2009-08-20] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; \SystemRoot\system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; \SystemRoot\system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\NIGHTC~1\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2030-01-01 12:19 - 2010-11-20 13:40 - 00383786 __RSH () C:\bootmgr
2014-03-29 22:28 - 2014-03-29 22:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 22:18 - 2014-03-29 22:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 22:05 - 2014-03-29 22:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 21:44 - 2014-03-29 21:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 21:34 - 2014-03-29 21:39 - 00000000 ____D () C:\AdwCleaner
2014-03-29 21:26 - 2014-03-29 21:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 21:20 - 2014-03-29 21:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 18:34 - 2014-03-29 21:12 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 18:33 - 2014-03-29 18:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 18:33 - 2014-03-29 18:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 18:33 - 2014-03-05 09:26 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-29 18:33 - 2014-03-05 09:26 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-29 18:33 - 2014-03-05 09:26 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-29 07:24 - 2014-03-29 07:23 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 10:14 - 2014-03-28 10:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 09:41 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-28 09:41 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-28 09:41 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-28 09:41 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-28 09:40 - 2014-03-28 10:14 - 00000000 ____D () C:\Qoobox
2014-03-28 09:39 - 2014-03-28 10:09 - 00000000 ____D () C:\windows\erdnt
2014-03-28 09:24 - 2014-03-28 09:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 09:33 - 2014-03-27 11:45 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 08:10 - 2014-03-29 22:36 - 00012320 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:53 - 2014-03-27 08:14 - 00026134 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-26 11:50 - 2014-03-29 22:35 - 00000000 ____D () C:\FRST
2014-03-26 11:45 - 2014-03-26 11:46 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 14:26 - 2014-03-20 17:55 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-15 14:54 - 2014-02-23 07:54 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-15 14:54 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-15 14:54 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-15 14:54 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-15 14:54 - 2014-02-23 06:35 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-15 14:53 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-15 14:53 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-15 14:53 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 08:31 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-13 08:31 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-13 08:31 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-13 08:31 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-13 08:31 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-04 00:14 - 2014-03-17 21:33 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-02 19:09 - 2014-03-29 21:46 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage

==================== One Month Modified Files and Folders =======

2030-01-01 12:19 - 2009-07-14 05:57 - 00029696 ___SH () C:\windows\system32\config\BCD-Template.LOG
2030-01-01 12:19 - 2009-07-14 05:52 - 00032768 _____ () C:\windows\system32\config\BCD-Template
2014-03-29 22:36 - 2014-03-27 08:10 - 00012320 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-29 22:35 - 2014-03-26 11:50 - 00000000 ____D () C:\FRST
2014-03-29 22:28 - 2014-03-29 22:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 22:18 - 2014-03-29 22:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 22:16 - 2011-05-05 02:32 - 01447760 _____ () C:\windows\WindowsUpdate.log
2014-03-29 22:05 - 2014-03-29 22:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 21:51 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-29 21:51 - 2009-07-14 05:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-29 21:46 - 2014-03-02 19:09 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage
2014-03-29 21:44 - 2014-03-29 21:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 21:42 - 2009-07-14 03:04 - 00000418 _____ () C:\windows\win.ini
2014-03-29 21:41 - 2011-05-10 19:59 - 00338236 _____ () C:\windows\PFRO.log
2014-03-29 21:41 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-29 21:41 - 2009-07-14 05:39 - 00104188 _____ () C:\windows\setupact.log
2014-03-29 21:39 - 2014-03-29 21:34 - 00000000 ____D () C:\AdwCleaner
2014-03-29 21:26 - 2014-03-29 21:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 21:20 - 2014-03-29 21:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 21:12 - 2014-03-29 18:34 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 20:57 - 2014-02-20 15:46 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-03-29 20:57 - 2011-10-19 23:24 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\DVDVideoSoft
2014-03-29 18:33 - 2014-03-29 18:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 18:33 - 2014-03-29 18:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 18:33 - 2012-11-14 00:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 18:33 - 2012-01-17 07:05 - 00000000 ____D () C:\Users\nightchild\Desktop\progs n games
2014-03-29 08:43 - 2013-12-10 15:29 - 00317848 _____ () C:\windows\IE11_main.log
2014-03-29 08:40 - 2014-02-10 20:17 - 00021363 _____ () C:\Users\nightchild\Desktop\Urlaub 2014.odt
2014-03-29 07:23 - 2014-03-29 07:24 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 16:00 - 2014-02-15 10:16 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-28 15:51 - 2011-08-02 21:45 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\vlc
2014-03-28 15:04 - 2012-03-14 16:22 - 00000000 ____D () C:\Users\nightchild\Documents\Scribble Papers
2014-03-28 10:14 - 2014-03-28 10:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 10:14 - 2014-03-28 09:40 - 00000000 ____D () C:\Qoobox
2014-03-28 10:14 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-28 10:09 - 2014-03-28 09:39 - 00000000 ____D () C:\windows\erdnt
2014-03-28 10:07 - 2009-07-14 03:04 - 00000215 _____ () C:\windows\system.ini
2014-03-28 10:04 - 2011-05-04 11:35 - 00000000 ____D () C:\Users\nightchild
2014-03-28 09:24 - 2014-03-28 09:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 11:45 - 2014-03-27 09:33 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 08:14 - 2014-03-26 11:53 - 00026134 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-27 07:58 - 2014-03-27 07:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 13:53 - 2012-04-25 10:54 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-26 12:17 - 2014-03-26 12:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 11:46 - 2014-03-26 11:45 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 11:45 - 2014-03-26 11:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 11:44 - 2014-03-26 11:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 17:55 - 2014-03-20 14:26 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-18 19:44 - 2013-08-17 22:38 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 19:37 - 2009-07-25 08:50 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-18 19:33 - 2011-05-21 07:51 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-17 21:33 - 2014-03-04 00:14 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-15 16:41 - 2012-01-17 07:06 - 00000000 ___RD () C:\Users\nightchild\Desktop\aktuelle ablage
2014-03-15 15:15 - 2009-07-14 05:33 - 00325536 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 15:13 - 2010-06-24 17:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 09:10 - 2011-05-31 09:03 - 00000000 ___RD () C:\Users\nightchild\Desktop\meins
2014-03-12 12:35 - 2013-10-28 15:23 - 00029548 _____ () C:\Users\nightchild\Desktop\skript in bearbeitung.odt
2014-03-12 10:59 - 2013-10-20 12:11 - 00000000 ____D () C:\Program Files\OXXOGames
2014-03-11 20:14 - 2013-05-08 21:29 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-11 20:14 - 2013-05-08 21:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-05 21:12 - 2012-11-24 22:58 - 00000000 ___RD () C:\Program Files\Skype
2014-03-05 21:12 - 2010-06-24 17:21 - 00000000 ____D () C:\ProgramData\Skype
2014-03-05 09:26 - 2014-03-29 18:33 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-03-29 18:33 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-03-29 18:33 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-04 16:10 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET

Some content of TEMP:
====================
C:\Users\nightchild\AppData\Local\temp\avgnt.exe
C:\Users\nightchild\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 18:27

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by nightchild at 2014-03-29 22:39:28
Running from C:\Users\nightchild\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Angry Birds (HKLM\...\{910D3FB9-E341-4DD9-B52A-3B3C0C340AF6}) (Version: 1.5.3 - Rovio)
ASUS VIBE (HKLM\...\ASUS VIBE) (Version: 1.0.187 - Ecareme, Inc.)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.)
Audacity 1.3.13 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Benutzerhandbuch - Grundlagen EPSON SX230 Series (HKLM\...\EPSON SX230 Series Bog) (Version:  - )
Benutzerhandbuch EPSON SX230 Series (HKLM\...\EPSON SX230 Series Useg) (Version:  - )
Boingo Wi-Fi (HKLM\...\{84C2B80B-64A2-4B22-93EC-F30C3D6BF7D8}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr Kawashima (HKCU\...\BrainGame) (Version: 1.0 - )
ebi.BookReader3J (HKLM\...\{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}) (Version: 3.75.14 - eBOOK Initiative Japan Co., Ltd.)
E-Cam (HKLM\...\{185AFA7A-F63E-450B-94AA-011CAC18090E}) (Version: 2.0.2.5 - )
Eee Docking 3.7.0 (HKLM\...\Eee Docking_is1) (Version: 3.7.0 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (Version: 5.1.2.0011 - ASUS) Hidden
Epson Easy Photo Print 2 (HKLM\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version:  - SEIKO EPSON Corporation)
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
FontResizer (Version: 1.01.0011 - ASUSTek) Hidden
Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Notes & Office Ink (HKLM\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version:   -  )
Free YouTube to MP3 Converter version 3.12.23.219 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.23.219 - DVDVideoSoft Ltd.)
Game Park Console (HKLM\...\{D44AA979-47C2-4BC0-A860-09A54224EA44}_is1) (Version: 6.2.0.3 - Oberon Media, Inc.)
Google SketchUp 8 (HKLM\...\{5E2ABE05-B7AD-4D77-8A19-BDA0E4302190}) (Version: 3.0.11762 - Google, Inc.)
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.27 - AsusTek Computer)
ICQ7.5 (HKLM\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Join Air (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.21 - Asus)
LocaleMe (HKLM\...\{F58C1D44-4AC9-48E8-9049-7A6CDFCB415C}) (Version: 1.3 - ASUS)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Editor Free (HKLM\...\Music Editor Free) (Version:  - FAE Inc.)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Scribble Papers 2.7.1 (HKLM\...\Scribble Papers_is1) (Version:  - Jens Hoetger)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.16 - AsusTek Computer)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Times Reader (Version: 2.055 - The New York Times Company) Hidden
USB Tablet Manager (HKLM\...\RmTablet) (Version: 4.13 - )
Verbindungsassistent (HKLM\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.5  - Nullsoft, Inc)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (HKLM\...\B41C7C96D83162A676DA7365ADEFD6C1AF62A4EE) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (HKLM\...\B5C82F3814F82FB37F1513B3185399BD88892B08) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

15-03-2014 13:42:32 Windows Update
18-03-2014 18:31:55 Windows Update
19-03-2014 10:36:31 Windows Update
20-03-2014 11:39:51 Windows Update
21-03-2014 12:51:21 Windows Update
23-03-2014 21:36:42 Windows Update
27-03-2014 06:08:28 Windows Update
27-03-2014 11:08:00 Windows Update
28-03-2014 08:20:14 Windows Update
28-03-2014 14:55:32 Windows Update
29-03-2014 05:24:07 Windows Update
29-03-2014 07:41:14 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2014-03-28 10:06 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {4AD27068-9E63-4C6B-A346-E7D22DEF7D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {9F9D803D-C390-454C-9242-C861996635EA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-14 13:49 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-03-16 02:48 - 2010-03-16 02:48 - 01754448 _____ () C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00132608 _____ () C:\Program Files\Join Air\UIExec.exe
2013-06-22 11:34 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2010-06-24 17:12 - 2009-08-19 01:35 - 00219136 _____ () C:\Windows\System32\AsusService.exe
2013-06-09 11:13 - 2009-08-31 09:43 - 00241664 _____ () C:\Program Files\Join Air\AssistantServices.exe
2011-05-10 09:42 - 2010-02-23 10:01 - 00329168 ____N () C:\Program Files\Verbindungsassistent\WTGService.exe
2012-01-30 21:07 - 2011-07-19 13:57 - 00853504 _____ () C:\windows\system32\atwtusb.exe
2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00030032 _____ () C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-06-24 17:31 - 2010-06-24 17:31 - 00839680 _____ () C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: WTGService => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AtwtusbIcon => AtwtusbIcon.exe
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPSON SX230 Series => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE /FU "C:\Users\NIGHTC~1\AppData\Local\Temp\E_S38F5.tmp" /EF "HKCU"
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Speech Recognition => "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 65%
Total physical RAM: 1014.18 MB
Available physical RAM: 350.13 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 1057.08 MB
Total Virtual: 2047.88 MB
Available Virtual: 1919.14 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:44.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:117.87 GB) (Free:111.39 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 29133921)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=118 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End Of Log ============================

Fleißige Grüße,

problemchild

schrauber · 30.03.2014, 12:50

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

problemchild · 31.03.2014, 22:44

Hallo Schrauber,

ich hab da eine kurze Zwischenfrage:
Ist es normal, dass nach knapp 2 Stunden Scan-Zeit erst 30% vom ESET-Scan fertig sind?

Gruß,

problemchild

schrauber · 01.04.2014, 12:57

kurze Antwort: Ja

problemchild · 02.04.2014, 06:38

Hallo Schrauber,

oki, dann lass ich die Maschine heute nacht mal laufen. Ich dachte schon, der Rechner hätte sich aufgehangen, weil sich da nichts mehr tat.

Gruß,

problemchild

Hallo Schrauber,

hier schon mal ESET-log, der Rest folgt später.

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=05a5623462e5084091ee0a81063e5a96
# engine=17715
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-02 12:24:36
# local_time=2014-04-02 02:24:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 97 92677 261821566 85364 0
# compatibility_mode=5893 16776573 100 94 34031 148029467 0 0
# scanned=122986
# found=0
# cleaned=0
# scan_time=10310

Gruß,

problemchild

Hups, wieso kommt das jetzt in der alten Antwort? Ich hoffe das ist für dich sichtbar, dass ich dir geantwortet habe, weil ja kein neuer Beitrag erstellt wurde.

Hallo Schrauber,

da funktioniert was nicht:

Code:

ATTFilter

 UNSUPPORTED OPERATING SYSTEM! ABORTED!

Gruß,

problemchild

schrauber · 02.04.2014, 14:03

Ignorier Securitycheck und poste bitte das frische FRST log. Noch Probleme?

problemchild · 02.04.2014, 23:36

Hallo Schrauber,

hier die Logs:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by nightchild (administrator) on NIGHTCHILD-PC on 03-04-2014 00:04:32
Running from C:\Users\nightchild\Desktop
Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Boingo Wireless, Inc.) C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Join Air\UIExec.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\System32\AsusService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(ASUS) C:\Program Files\EeePC\CapsHook\CapsHook.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
(ASUSTeK Computer Inc.) C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files\Join Air\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\Verbindungsassistent\WTGService.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\windows\system32\atwtusb.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Avira Operations GmbH & Co. KG) C:\program files\avira\antivir desktop\ipmGui.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [HotkeyMon] - C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe [100328 2009-09-11] (ASUSTeK Computer Inc.)
HKLM\...\Run: [HotkeyService] - C:\Program Files\EeePC\HotkeyService\HotkeyService.exe [1242544 2010-06-04] (ASUSTeK Computer Inc.)
HKLM\...\Run: [SuperHybridEngine] - C:\Program Files\EeePC\SHE\SuperHybridEngine.exe [412600 2010-06-09] (ASUSTeK Computer Inc.)
HKLM\...\Run: [CapsHook] - C:\Program Files\EeePC\CapsHook\CapsHook.exe [445344 2010-05-29] (ASUS)
HKLM\...\Run: [Eee Docking] - C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [415920 2010-03-30] ()
HKLM\...\Run: [ASUS WebStorage] - C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9177632 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [Boingo Wi-Fi] - C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2011-05-04] ()
HKLM\...\Run: [ASUSPRP] - C:\Program Files\ASUS\APRP\APRP.EXE [2018032 2010-06-24] (ASUSTek Computer Inc.)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2010-04-13] (Synaptics Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [UIExec] - C:\Program Files\Join Air\UIExec.exe [132608 2009-08-31] ()
HKLM\...\Run: [BrStsMon00] - C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default
FF SearchEngineOrder.1: Ask Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: about:newtab
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Drag &amp; DropZones - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\dendzones@captaincaveman.nl.xpi [2011-10-17]
FF Extension: Dict.cc Translation - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\searchdictcc@roughael.xpi [2011-10-17]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: Adblock Edge - C:\Users\nightchild\AppData\Roaming\Mozilla\Firefox\Profiles\0aj5mbj8.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-03-29]

========================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] ()
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [156160 2012-03-07] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [125440 2012-03-07] (SEIKO EPSON CORPORATION)
R2 UI Assistant Service; C:\Program Files\Join Air\AssistantServices.exe [241664 2009-08-31] ()
R2 WTGService; C:\Program Files\Verbindungsassistent\WTGService.exe [329168 2010-02-23] ()
R2 WTService; C:\windows\system32\atwtusb.exe [853504 2011-07-19] ()

==================== Drivers (Whitelisted) ====================

R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11520 2010-06-21] ()
R2 avgntflt; C:\windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\windows\System32\DRIVERS\avipbb.sys [135648 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 ewsercd; C:\windows\System32\DRIVERS\ewsercd.sys [100224 2011-05-10] (Huawei Technologies Co., Ltd.)
S3 hwusbfake; C:\windows\System32\DRIVERS\ewusbfake.sys [103040 2011-05-10] (Huawei Technologies Co., Ltd.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-13] ( )
R3 moufiltr; C:\windows\System32\DRIVERS\moufiltr.sys [6144 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
R1 ssmdrv; C:\windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 vhidmini; C:\windows\System32\DRIVERS\walvhid.sys [6144 2009-08-20] (Windows (R) Win 7 DDK provider)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; \SystemRoot\system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; \SystemRoot\system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\NIGHTC~1\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2030-01-01 13:19 - 2010-11-20 14:40 - 00383786 __RSH () C:\bootmgr
2014-04-02 13:49 - 2014-04-02 14:00 - 00000573 _____ () C:\Users\nightchild\Desktop\*****.txt
2014-04-02 09:01 - 2014-04-02 09:02 - 00000581 _____ () C:\Users\nightchild\Desktop\*****.txt
2014-04-02 07:20 - 2014-04-02 07:21 - 00003147 _____ () C:\Users\nightchild\Desktop\cleaners.txt
2014-04-02 07:07 - 2014-04-02 07:08 - 00003623 _____ () C:\Users\nightchild\Desktop\fritzbox security check anleitung.txt
2014-04-02 07:01 - 2014-04-02 07:01 - 00987442 _____ () C:\Users\nightchild\Desktop\SecurityCheck.exe
2014-04-01 01:26 - 2014-04-01 02:05 - 00003258 _____ () C:\Users\nightchild\Desktop\aprilapril.txt
2014-04-01 00:10 - 2014-04-01 00:10 - 00000000 ____D () C:\Users\nightchild\Desktop\angenommen bei icq
2014-03-31 19:35 - 2014-04-02 06:37 - 00000000 ____D () C:\Program Files\ESET
2014-03-30 19:05 - 2014-03-30 19:06 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-29 23:28 - 2014-03-29 23:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 23:18 - 2014-03-29 23:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 23:05 - 2014-03-29 23:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 22:44 - 2014-03-29 22:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 22:34 - 2014-03-29 22:39 - 00000000 ____D () C:\AdwCleaner
2014-03-29 22:26 - 2014-03-29 22:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 22:20 - 2014-03-29 22:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 19:34 - 2014-03-29 22:12 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 19:33 - 2014-03-29 19:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 19:33 - 2014-03-29 19:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 19:33 - 2014-03-05 10:26 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-29 19:33 - 2014-03-05 10:26 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-29 19:33 - 2014-03-05 10:26 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-29 08:24 - 2014-03-29 08:23 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 11:14 - 2014-03-28 11:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 10:41 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-28 10:41 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-28 10:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-28 10:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-28 10:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-28 10:41 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-28 10:41 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-28 10:41 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-28 10:40 - 2014-03-28 11:14 - 00000000 ____D () C:\Qoobox
2014-03-28 10:39 - 2014-03-28 11:09 - 00000000 ____D () C:\windows\erdnt
2014-03-28 10:24 - 2014-03-28 10:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 10:33 - 2014-03-27 12:45 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 09:10 - 2014-04-03 00:05 - 00012315 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-03-27 08:58 - 2014-03-27 08:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 13:17 - 2014-03-26 13:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 12:53 - 2014-03-29 23:40 - 00017442 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-26 12:50 - 2014-04-03 00:04 - 00000000 ____D () C:\FRST
2014-03-26 12:45 - 2014-03-26 12:46 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 12:45 - 2014-03-26 12:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 12:44 - 2014-03-26 12:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 15:26 - 2014-03-20 18:55 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-15 15:54 - 2014-02-23 08:54 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-15 15:54 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-15 15:54 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-15 15:54 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-15 15:54 - 2014-02-23 07:35 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-15 15:53 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-15 15:53 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-15 15:53 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-15 15:53 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-15 15:53 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 09:31 - 2014-02-07 03:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-13 09:31 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-13 09:31 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-13 09:31 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-13 09:31 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-04 01:14 - 2014-03-17 22:33 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt

==================== One Month Modified Files and Folders =======

2030-01-01 13:19 - 2009-07-14 06:57 - 00029696 ___SH () C:\windows\system32\config\BCD-Template.LOG
2030-01-01 13:19 - 2009-07-14 06:52 - 00032768 _____ () C:\windows\system32\config\BCD-Template
2014-04-03 00:05 - 2014-03-27 09:10 - 00012315 _____ () C:\Users\nightchild\Desktop\FRST.txt
2014-04-03 00:05 - 2011-05-05 03:32 - 01370325 _____ () C:\windows\WindowsUpdate.log
2014-04-03 00:04 - 2014-03-26 12:50 - 00000000 ____D () C:\FRST
2014-04-02 14:00 - 2014-04-02 13:49 - 00000573 _____ () C:\Users\nightchild\Desktop\*****.txt
2014-04-02 09:24 - 2012-01-17 08:06 - 00000000 ___RD () C:\Users\nightchild\Desktop\aktuelle ablage
2014-04-02 09:02 - 2014-04-02 09:01 - 00000581 _____ () C:\Users\nightchild\Desktop\*****.txt
2014-04-02 07:21 - 2014-04-02 07:20 - 00003147 _____ () C:\Users\nightchild\Desktop\cleaners.txt
2014-04-02 07:08 - 2014-04-02 07:07 - 00003623 _____ () C:\Users\nightchild\Desktop\fritzbox security check anleitung.txt
2014-04-02 07:01 - 2014-04-02 07:01 - 00987442 _____ () C:\Users\nightchild\Desktop\SecurityCheck.exe
2014-04-02 06:37 - 2014-03-31 19:35 - 00000000 ____D () C:\Program Files\ESET
2014-04-02 03:02 - 2013-12-10 16:29 - 00335472 _____ () C:\windows\IE11_main.log
2014-04-01 18:11 - 2013-10-28 16:23 - 00029654 _____ () C:\Users\nightchild\Desktop\skript fertig.odt
2014-04-01 14:36 - 2011-08-02 22:45 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\vlc
2014-04-01 02:39 - 2012-03-14 17:22 - 00000000 ____D () C:\Users\nightchild\Documents\Scribble Papers
2014-04-01 02:05 - 2014-04-01 01:26 - 00003258 _____ () C:\Users\nightchild\Desktop\aprilapril.txt
2014-04-01 00:24 - 2011-05-15 13:46 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\ICQ
2014-04-01 00:10 - 2014-04-01 00:10 - 00000000 ____D () C:\Users\nightchild\Desktop\angenommen bei icq
2014-03-31 23:54 - 2009-07-14 06:39 - 00104300 _____ () C:\windows\setupact.log
2014-03-31 23:38 - 2009-07-14 06:52 - 00000000 ____D () C:\windows\twain_32
2014-03-31 23:37 - 2012-03-07 20:43 - 00000000 ____D () C:\Program Files\Epson Software
2014-03-31 23:37 - 2012-03-07 20:33 - 00000000 ____D () C:\Program Files\epson
2014-03-31 23:36 - 2010-06-24 18:00 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-03-31 18:48 - 2009-07-14 06:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-31 18:48 - 2009-07-14 06:34 - 00009696 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-30 19:06 - 2014-03-30 19:05 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-30 19:06 - 2012-04-25 11:54 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-29 23:40 - 2014-03-26 12:53 - 00017442 _____ () C:\Users\nightchild\Desktop\Addition.txt
2014-03-29 23:28 - 2014-03-29 23:28 - 00002053 _____ () C:\Users\nightchild\Desktop\JRT.txt
2014-03-29 23:18 - 2014-03-29 23:18 - 00000000 ____D () C:\windows\ERUNT
2014-03-29 23:05 - 2014-03-29 23:05 - 01038974 _____ (Thisisu) C:\Users\nightchild\Desktop\JRT.exe
2014-03-29 22:46 - 2014-03-02 20:09 - 00000000 ____D () C:\Users\nightchild\Desktop\Desktop Ablage
2014-03-29 22:44 - 2014-03-29 22:44 - 00003388 _____ () C:\Users\nightchild\Desktop\AdwCleaner[S0].txt
2014-03-29 22:42 - 2009-07-14 04:04 - 00000418 _____ () C:\windows\win.ini
2014-03-29 22:41 - 2011-05-10 20:59 - 00338236 _____ () C:\windows\PFRO.log
2014-03-29 22:41 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-29 22:39 - 2014-03-29 22:34 - 00000000 ____D () C:\AdwCleaner
2014-03-29 22:26 - 2014-03-29 22:26 - 01950720 _____ () C:\Users\nightchild\Desktop\adwcleaner.exe
2014-03-29 22:20 - 2014-03-29 22:20 - 00028258 _____ () C:\Users\nightchild\Desktop\mbam.txt.txt
2014-03-29 22:12 - 2014-03-29 19:34 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-29 21:57 - 2014-02-20 16:46 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-03-29 21:57 - 2011-10-20 00:24 - 00000000 ____D () C:\Users\nightchild\AppData\Roaming\DVDVideoSoft
2014-03-29 19:33 - 2014-03-29 19:33 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-29 19:33 - 2014-03-29 19:33 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-03-29 19:33 - 2012-11-14 01:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-29 19:33 - 2012-01-17 08:05 - 00000000 ____D () C:\Users\nightchild\Desktop\progs n games
2014-03-29 09:40 - 2014-02-10 21:17 - 00021363 _____ () C:\Users\nightchild\Desktop\Urlaub 2014.odt
2014-03-29 08:23 - 2014-03-29 08:24 - 00700980 _____ () C:\Users\nightchild\Desktop\adblock_edge-2.0.7-sm+an+tb+fx-windows.xpi
2014-03-28 17:00 - 2014-02-15 11:16 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-28 11:14 - 2014-03-28 11:14 - 00012716 _____ () C:\Users\nightchild\Desktop\ComboFix.txt
2014-03-28 11:14 - 2014-03-28 10:40 - 00000000 ____D () C:\Qoobox
2014-03-28 11:14 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-03-28 11:09 - 2014-03-28 10:39 - 00000000 ____D () C:\windows\erdnt
2014-03-28 11:07 - 2009-07-14 04:04 - 00000215 _____ () C:\windows\system.ini
2014-03-28 11:04 - 2011-05-04 12:35 - 00000000 ____D () C:\Users\nightchild
2014-03-28 10:24 - 2014-03-28 10:24 - 05192353 ____R (Swearware) C:\Users\nightchild\Desktop\ComboFix.exe
2014-03-27 12:45 - 2014-03-27 10:33 - 00002779 _____ () C:\Users\nightchild\Desktop\decide with dice.txt
2014-03-27 08:58 - 2014-03-27 08:58 - 01145856 _____ (Farbar) C:\Users\nightchild\Desktop\FRST.exe
2014-03-26 13:17 - 2014-03-26 13:17 - 00380416 _____ () C:\Users\nightchild\Desktop\Gmer-19357.exe
2014-03-26 12:46 - 2014-03-26 12:45 - 00000482 _____ () C:\Users\nightchild\Desktop\defogger_disable.log
2014-03-26 12:45 - 2014-03-26 12:45 - 00000000 _____ () C:\Users\nightchild\defogger_reenable
2014-03-26 12:44 - 2014-03-26 12:44 - 00050477 _____ () C:\Users\nightchild\Desktop\Defogger.exe
2014-03-20 18:55 - 2014-03-20 15:26 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-03-18 20:44 - 2013-08-17 23:38 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 20:37 - 2009-07-25 09:50 - 01622236 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-18 20:33 - 2011-05-21 08:51 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-17 22:33 - 2014-03-04 01:14 - 00003520 _____ () C:\Users\nightchild\Desktop\Urlaubsplanung 2014.txt
2014-03-15 16:15 - 2009-07-14 06:33 - 00325536 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 16:13 - 2010-06-24 18:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 10:10 - 2011-05-31 10:03 - 00000000 ___RD () C:\Users\nightchild\Desktop\meins
2014-03-12 11:59 - 2013-10-20 13:11 - 00000000 ____D () C:\Program Files\OXXOGames
2014-03-11 21:14 - 2013-05-08 22:29 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-11 21:14 - 2013-05-08 22:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-05 22:12 - 2012-11-24 23:58 - 00000000 ___RD () C:\Program Files\Skype
2014-03-05 22:12 - 2010-06-24 18:21 - 00000000 ____D () C:\ProgramData\Skype
2014-03-05 10:26 - 2014-03-29 19:33 - 00073432 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-03-05 10:26 - 2014-03-29 19:33 - 00051416 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-03-05 10:26 - 2014-03-29 19:33 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-04 17:10 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET

Some content of TEMP:
====================
C:\Users\nightchild\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 20:29

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by nightchild at 2014-04-03 00:07:34
Running from C:\Users\nightchild\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.1.0 - Hewlett-Packard) Hidden
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Angry Birds (HKLM\...\{910D3FB9-E341-4DD9-B52A-3B3C0C340AF6}) (Version: 1.5.3 - Rovio)
ASUS VIBE (HKLM\...\ASUS VIBE) (Version: 1.0.187 - Ecareme, Inc.)
ASUS WebStorage (HKLM\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.)
Audacity 1.3.13 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version:  - Audacity Team)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Benutzerhandbuch - Grundlagen EPSON SX230 Series (HKLM\...\EPSON SX230 Series Bog) (Version:  - )
Benutzerhandbuch EPSON SX230 Series (HKLM\...\EPSON SX230 Series Useg) (Version:  - )
Boingo Wi-Fi (HKLM\...\{84C2B80B-64A2-4B22-93EC-F30C3D6BF7D8}) (Version: 1.7.0048 - Boingo Wireless, Inc.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dr Kawashima (HKCU\...\BrainGame) (Version: 1.0 - )
ebi.BookReader3J (HKLM\...\{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}) (Version: 3.75.14 - eBOOK Initiative Japan Co., Ltd.)
E-Cam (HKLM\...\{185AFA7A-F63E-450B-94AA-011CAC18090E}) (Version: 2.0.2.5 - )
Eee Docking 3.7.0 (HKLM\...\Eee Docking_is1) (Version: 3.7.0 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (Version: 5.1.2.0011 - ASUS) Hidden
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version:  - SEIKO EPSON Corporation)
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
FontResizer (Version: 1.01.0011 - ASUSTek) Hidden
Fotogalerie (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Free Notes & Office Ink (HKLM\...\{556F2137-B772-43BB-9A45-E0275234DD16}) (Version:   -  )
Free YouTube to MP3 Converter version 3.12.23.219 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.23.219 - DVDVideoSoft Ltd.)
Game Park Console (HKLM\...\{D44AA979-47C2-4BC0-A860-09A54224EA44}_is1) (Version: 6.2.0.3 - Oberon Media, Inc.)
Google SketchUp 8 (HKLM\...\{5E2ABE05-B7AD-4D77-8A19-BDA0E4302190}) (Version: 3.0.11762 - Google, Inc.)
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.27 - AsusTek Computer)
ICQ7.5 (HKLM\...\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}) (Version: 7.5 - ICQ)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Join Air (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.21 - Asus)
LocaleMe (HKLM\...\{F58C1D44-4AC9-48E8-9049-7A6CDFCB415C}) (Version: 1.3 - ASUS)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Editor Free (HKLM\...\Music Editor Free) (Version:  - FAE Inc.)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.1 - Ralink)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Scribble Papers 2.7.1 (HKLM\...\Scribble Papers_is1) (Version:  - Jens Hoetger)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.16 - AsusTek Computer)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.055 - The New York Times Company)
Times Reader (Version: 2.055 - The New York Times Company) Hidden
USB Tablet Manager (HKLM\...\RmTablet) (Version: 4.13 - )
Verbindungsassistent (HKLM\...\Verbindungsassistent) (Version: 2.1 - Verbindungsassistent)
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.5  - Nullsoft, Inc)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (HKLM\...\B41C7C96D83162A676DA7365ADEFD6C1AF62A4EE) (Version: 07/17/2009 6.2.0.9403 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (HKLM\...\B5C82F3814F82FB37F1513B3185399BD88892B08) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Restore Points  =========================

28-03-2014 14:55:32 Windows Update
29-03-2014 05:24:07 Windows Update
29-03-2014 07:41:14 Windows Update
30-03-2014 16:57:58 Windows Update
31-03-2014 16:43:43 Windows Update
31-03-2014 21:29:43 Entfernt Easy Photo Print Plug-in for PMB(Picture Motion Browser©$áX
31-03-2014 21:33:16 Removed Epson Event Manager
31-03-2014 21:35:57 Removed Epson Event Manager
01-04-2014 12:31:50 Windows Update
02-04-2014 01:00:14 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2014-03-28 11:06 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {4AD27068-9E63-4C6B-A346-E7D22DEF7D83} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {9F9D803D-C390-454C-9242-C861996635EA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-11-14 14:49 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2010-03-16 03:48 - 2010-03-16 03:48 - 01754448 _____ () C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
2013-06-09 12:13 - 2009-08-31 10:43 - 00132608 _____ () C:\Program Files\Join Air\UIExec.exe
2013-06-22 12:34 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2010-06-24 18:12 - 2009-08-19 02:35 - 00219136 _____ () C:\Windows\System32\AsusService.exe
2013-06-09 12:13 - 2009-08-31 10:43 - 00241664 _____ () C:\Program Files\Join Air\AssistantServices.exe
2011-05-10 10:42 - 2010-02-23 11:01 - 00329168 ____N () C:\Program Files\Verbindungsassistent\WTGService.exe
2012-01-30 22:07 - 2011-07-19 14:57 - 00853504 _____ () C:\windows\system32\atwtusb.exe
2010-03-16 03:48 - 2010-03-16 03:48 - 00148816 _____ () C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
2010-06-24 18:31 - 2010-06-24 18:31 - 00030032 _____ () C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
2010-06-24 18:31 - 2010-06-24 18:31 - 00839680 _____ () C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
2011-08-18 16:52 - 2002-04-22 03:15 - 00139264 ____N () C:\Program Files\Common Files\Adobe\Shell\psicon.dll
2011-08-02 19:55 - 2011-05-28 23:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: WTGService => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AtwtusbIcon => AtwtusbIcon.exe
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPSON SX230 Series => C:\windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE /FU "C:\Users\NIGHTC~1\AppData\Local\Temp\E_S38F5.tmp" /EF "HKCU"
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Speech Recognition => "C:\windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\winampa.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/02/2014 02:50:18 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (04/01/2014 05:01:18 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (03/30/2014 08:37:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.


System errors:
=============
Error: (04/02/2014 11:38:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (04/02/2014 11:38:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (04/02/2014 02:50:18 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (04/01/2014 05:01:18 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (03/30/2014 08:37:28 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 1014.18 MB
Available physical RAM: 375.88 MB
Total Pagefile: 2038.18 MB
Available Pagefile: 909.48 MB
Total Virtual: 2047.88 MB
Available Virtual: 1913 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:46.08 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:117.87 GB) (Free:111.39 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 29133921)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=118 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End Of Log ============================

Das Netbook läuft seltsamerweise wieder einwandfrei. Woran liegt das? Wir haben doch nichts repariert oder gelöscht, oder doch?

Seit kurzem ist auf meinem Desktop übrigens ein Ordner aufgetaucht, den ich ganz woanders gespeichert hatte. Ich habe den Ordner ewig nicht benutzt und ihn nicht dorthin verschoben. Wie kommt er da hin?

Viele Grüße,

problemchild

schrauber · 03.04.2014, 12:14

Wir haben jede Menge Adware gelöscht. Welcher Ordner? Wo war er vorher?

27.03.2014, 07:13	#2
schrauber /// the machine /// TB-Ausbilder	Netbook wird immer langsamer. Gmer läuft nicht. Hi, FRST löschen und neu laden, dann bitte nochmal scannen lassen, die FRST.txt ist leer. __________________ __________________

01.04.2014, 12:57	#11
schrauber /// the machine /// TB-Ausbilder	Netbook wird immer langsamer. Gmer läuft nicht. kurze Antwort: Ja __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

02.04.2014, 14:03	#13
schrauber /// the machine /// TB-Ausbilder	Netbook wird immer langsamer. Gmer läuft nicht. Ignorier Securitycheck und poste bitte das frische FRST log. Noch Probleme? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

03.04.2014, 12:14	#15
schrauber /// the machine /// TB-Ausbilder	Netbook wird immer langsamer. Gmer läuft nicht. Wir haben jede Menge Adware gelöscht. Welcher Ordner? Wo war er vorher? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Netbook wird immer langsamer. Gmer läuft nicht.

Plagegeister aller Art und deren Bekämpfung: Netbook wird immer langsamer. Gmer läuft nicht.