Windows7, Neuinstallation, unerwünschte Programme nicht löschbar

AxelWartburg · 08.06.2014, 18:47

Halo, Schrauber,

ich hab es nicht so hinbekommen, dass ich meine Lesezeichen und Ordner wiedergefunden und wieder hergestellt habe.

Doch hoffe ich, dass ich nun, nachdem ich firefox drei Mal deinstalliert habe (beim dritten Mal mit der härtesten Lölschvariante) und es nun zum dritten Mal auch installiert habe (die ersten Male waren grundsätzlich alle meine Profile und auch das Werbepopup, wieder da), Ruhe hab.

Danke, noch einmal, für deine Hilfe!

Nächsten Monat sind wir wieder etwas flüssiger. Dann folgt auch eine Sepnde an euch! ;o)

Seit dem ich als Selbständiger in diesem wundervoll sozialen Land meine Familie nicht mehr ernähren kann und wir mit Hartz IV aufstocken, ist es echt eine Hewrausforderung selbst kleine Mengen an Geld abzuzwacken.

Herzliche Grüße
Axel

schrauber · 09.06.2014, 07:10

Hast Du auch dran gedacht FF zurückzusetzen wie im Link angegeben?

AxelWartburg · 21.06.2014, 21:01

Hallo, Schrauber,

es geht schon wieder los.

wieder websearches bei mir und bei meine Frau (selber PC), Imminent und System Speedup heißen die aktuellen Quälgeister.

Fang ich noch mal von vorne an?

Herzliche Grüße
Axel

Hier zwei Berichte van adwcleaner. Einer von meinem Konot und einer vom Konto von Beate

Mein Konto:

Code:

ATTFilter

# AdwCleaner v3.212 - Bericht erstellt am 21/06/2014 um 21:39:52
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Axel Wartburg - AXELWARTBURG-PC
# Gestartet von : C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : IePluginServices
Dienst Gelöscht : NewPlayerUpdaterService
Dienst Gelöscht : ReimageRealTimeProtection
Dienst Gelöscht : SProtection
Dienst Gelöscht : WindowsProtectManger

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\2308189059
Ordner Gelöscht : C:\ProgramData\IePluginServices
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\WindowsProtectManger
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_today
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
Ordner Gelöscht : C:\Program Files\Advanced System Protector
Ordner Gelöscht : C:\Program Files\Iminent
Ordner Gelöscht : C:\Program Files\NewPlayer
Ordner Gelöscht : C:\Program Files\Reimage
Ordner Gelöscht : C:\Program Files\SupTab
Ordner Gelöscht : C:\Program Files\System Speedup
Ordner Gelöscht : C:\Program Files\Uninstaller
Ordner Gelöscht : C:\Program Files\fst_de_53
Ordner Gelöscht : C:\Program Files\Common Files\IMGUpdater
Ordner Gelöscht : C:\Program Files\Common Files\Umbrella
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Local\NewPlayer
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Local\fst_de_53
Ordner Gelöscht : C:\Users\AXELWA~1\AppData\Local\Temp\Iminent
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\System Speedup
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\VOPackage
Ordner Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Ordner Gelöscht : C:\Users\Axel Wartburg\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\Beate\AppData\Local\fst_de_53
Ordner Gelöscht : C:\Users\Beate\AppData\Roaming\System Speedup
Ordner Gelöscht : C:\Users\Beate\AppData\Roaming\Systweak
Datei Gelöscht : C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\webbooster@iminent.com.xpi
Datei Gelöscht : C:\Users\Beate\AppData\Roaming\Mozilla\Firefox\Profiles\jepxqxna.default\Extensions\webbooster@iminent.com.xpi
Datei Gelöscht : C:\Windows\system32\roboot.exe
Datei Gelöscht : C:\Program Files\Mozilla Firefox\defaults\pref\all-iminent.js
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\StartWeb.xml
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\v9.xml
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\webssearches.xml
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\RegClean Pro
Datei Gelöscht : C:\Windows\Tasks\System Speedup_DEFAULT.job
Datei Gelöscht : C:\Windows\System32\Tasks\System Speedup_DEFAULT
Datei Gelöscht : C:\Windows\Tasks\System Speedup_UPDATES.job
Datei Gelöscht : C:\Windows\System32\Tasks\System Speedup_UPDATES

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{760F1A21-A241-4145-B379-C4B9F30D5B6A}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{760F1A21-A241-4145-B379-C4B9F30D5B6A}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3061F02-1B06-48E3-BFF0-7A36A1DF13EA}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D3061F02-1B06-48E3-BFF0-7A36A1DF13EA}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{879808CC-5B43-491A-8779-045AE7D5B144}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{879808CC-5B43-491A-8779-045AE7D5B144}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F9725741-7AFC-433D-B6A3-43BDAE9E04EE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9725741-7AFC-433D-B6A3-43BDAE9E04EE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A98FD45F-6048-4FBC-A752-04DCDACF8DB3}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A98FD45F-6048-4FBC-A752-04DCDACF8DB3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayerUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayerUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancerService_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancerService_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\webget_setup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\webget_setup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v18_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v18_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [fst_de_53]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\System Speedup
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\Free_soft_today
Schlüssel Gelöscht : HKLM\Software\SupDp
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\System Speedup
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Tutorials
Schlüssel Gelöscht : HKLM\Software\Umbrella
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\V9Software
Schlüssel Gelöscht : HKLM\Software\webssearchesSoftware
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fst_de_53_is1
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SupTab\SEARCH~1.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]

-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hp&ts=1403280084&from=tugs&uid=HitachiXHDS5C3020ALA632_ML0220F30Y1TRD0Y1TRDX");
Zeile gelöscht : user_pref("extensions.enabledAddons", "webbooster%40iminent.com:8.25.2.1,faststartff%40gmail.com:4.2.3,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:30.0");
Zeile gelöscht : user_pref("iminent.LayoutId", "1");
Zeile gelöscht : user_pref("iminent.ShowThankyouPixel", "0");
Zeile gelöscht : user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0.014707561271001684,\"s\":0,\"es\":1}");
Zeile gelöscht : user_pref("iminent.adapters", "{\"de.iminent.com\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"AdapterKey\":\"iminent\",\"v\":true,\"p\":0,\"t\":1,\"th\":0.228,\"expireTime\":\"140326450602[...]
Zeile gelöscht : user_pref("iminent.enableToolbar", "false");
Zeile gelöscht : user_pref("iminent.enabledAds", "obsolete");
Zeile gelöscht : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.iminentjs.info/imitin/javascript.js\",\"queryS[...]
Zeile gelöscht : user_pref("iminent.newtabredirect", "true");
Zeile gelöscht : user_pref("iminent.nomsi", "true");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent102", "1403378935195");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent109", "1403379001654");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent110", "1403266540954");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent111", "1403379001030");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent112", "1403379007842");
Zeile gelöscht : user_pref("iminent.registerToolbarEvent122", "1403379002037");
Zeile gelöscht : user_pref("iminent.searchindex", "1");
Zeile gelöscht : user_pref("iminent.trackingInfo", "{\"state\":0,\"samplingRate\":0}");
Zeile gelöscht : user_pref("iminent.version", "8.25.2.1");
Zeile gelöscht : user_pref("iminent.versioning", "{\"CurrentVersion\":\"8.25.2.1\",\"InstallEventCTime\":1403378912991,\"InstallEvent\":\"True\"}");

[ Datei : C:\Users\Beate\AppData\Roaming\Mozilla\Firefox\Profiles\jepxqxna.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hppp&ts=1403375595&from=tugs&uid=HitachiXHDS5C3020ALA632_ML0220F30Y1TRD0Y1TRDX");
Zeile gelöscht : user_pref("iminent.enableToolbar", "true");
Zeile gelöscht : user_pref("iminent.newtabredirect", "true");
Zeile gelöscht : user_pref("iminent.nomsi", "true");
Zeile gelöscht : user_pref("iminent.searchindex", "1");

*************************

AdwCleaner[R0].txt - [4509 octets] - [24/05/2014 19:00:19]
AdwCleaner[R1].txt - [4630 octets] - [29/05/2014 20:48:25]
AdwCleaner[R2].txt - [1124 octets] - [30/05/2014 11:33:19]
AdwCleaner[R3].txt - [17079 octets] - [21/06/2014 21:39:13]
AdwCleaner[S0].txt - [4235 octets] - [29/05/2014 20:49:10]
AdwCleaner[S1].txt - [1186 octets] - [30/05/2014 11:35:16]
AdwCleaner[S2].txt - [15058 octets] - [21/06/2014 21:39:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [15119 octets] ##########

Beates Konto:

Code:

ATTFilter

# AdwCleaner v3.212 - Bericht erstellt am 21/06/2014 um 21:48:32
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Beate - AXELWARTBURG-PC
# Gestartet von : C:\Users\Beate\Downloads\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Beate\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\System Speedup
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Tutorials

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\prefs.js ]


[ Datei : C:\Users\Beate\AppData\Roaming\Mozilla\Firefox\Profiles\jepxqxna.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4509 octets] - [24/05/2014 19:00:19]
AdwCleaner[R1].txt - [4630 octets] - [29/05/2014 20:48:25]
AdwCleaner[R2].txt - [1124 octets] - [30/05/2014 11:33:19]
AdwCleaner[R3].txt - [17079 octets] - [21/06/2014 21:39:13]
AdwCleaner[R4].txt - [1789 octets] - [21/06/2014 21:48:04]
AdwCleaner[S0].txt - [4235 octets] - [29/05/2014 20:49:10]
AdwCleaner[S1].txt - [1186 octets] - [30/05/2014 11:35:16]
AdwCleaner[S2].txt - [15200 octets] - [21/06/2014 21:39:52]
AdwCleaner[S3].txt - [1596 octets] - [21/06/2014 21:48:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1656 octets] ##########

schrauber · 22.06.2014, 07:06

poste mal bitte ein frisches FRST log.

AxelWartburg · 22.06.2014, 08:45

Was war das noch mal?
Farbar?

Und wie geht das noch mal? Hab ich das schon mal gemacht? Kommt mir alles so fremd vor. Peinliche...

Datei auf USB Stick laden, hab ich irgendwo gelesen.
Doch wie bekomme ich die dahin? Wird doch in den Download-Ordner geladen.

Dann den Rechner im abgesicherten Modus starten, las ich auch.
Wie krieg ich das hin?

Ich hab die nu einfach in den Downloadordner gepackt und dann den scan gemacht:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-06-2014 01
Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 22-06-2014 09:58:26
Running from C:\Users\Axel Wartburg\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Spigot, Inc.) C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IObit Malware Fighter] => C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-05-23] (IObit)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [SearchProtection] => C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.EXE [847208 2014-06-18] (Spigot, Inc.)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [Browser Extensions] => C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\CouponsHelper.exe [961384 2014-06-18] (Spigot, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\Coupons.dll (Spigot, Inc.)
BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=800236&p=
FF Homepage: https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ff
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ads Removal - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\adremoveext@adremoveext.net [2014-06-22]
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\faststartff@gmail.com [2014-06-20]
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saamazon@mybrowserbar.com [2014-06-22]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saebay@mybrowserbar.com [2014-06-22]
FF Extension: Slick Savings - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\savingsslider@mybrowserbar.com [2014-06-22]
FF Extension: No Name - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\staged [2014-06-22]
FF Extension: Start Page - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-06-22]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com [2014-06-20]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S2 GlobalUpdater; C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH)
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:35 - 2014-06-22 00:36 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:45 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei
2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 10:11 - 2014-06-12 22:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-29 10:11 - 2014-06-12 22:39 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:35 - 2014-05-27 15:34 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:35 - 2014-05-27 09:46 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2012-03-06 19:14 - 00000405 _____ () C:\Users\Axel Wartburg\Documents\signatur.txt
2014-05-25 10:08 - 2014-06-01 15:53 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-25 10:08 - 2014-05-25 10:35 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:07 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 19:00 - 2014-06-21 21:48 - 00000000 ____D () C:\AdwCleaner
2014-05-24 18:25 - 2014-06-07 18:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 14:07 - 2014-05-24 14:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt
2014-05-23 10:48 - 2014-05-23 11:14 - 00000000 ____D () C:\Qoobox
2014-05-23 10:48 - 2014-05-23 11:13 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 10:48 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-05-23 10:48 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-05-23 10:48 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-05-23 10:48 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe
2014-05-23 09:43 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-05-23 09:43 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-05-23 09:43 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-05-23 09:43 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-05-23 09:43 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-05-23 09:43 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-05-23 09:43 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-05-23 09:43 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-05-23 09:42 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-05-23 09:40 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

==================== One Month Modified Files and Folders =======

2014-06-22 09:58 - 2014-06-22 09:58 - 00008518 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:58 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST
2014-06-22 09:54 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-22 09:53 - 2014-06-22 09:53 - 01070592 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 09:52 - 2009-07-14 06:39 - 00028505 _____ () C:\Windows\setupact.log
2014-06-22 09:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-22 09:29 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-22 09:21 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-22 00:56 - 2014-05-20 21:35 - 01161037 _____ () C:\Windows\WindowsUpdate.log
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:45 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:36 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:50 - 2010-11-20 23:48 - 00254310 _____ () C:\Windows\PFRO.log
2014-06-21 21:48 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg
2014-06-21 21:21 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView
2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate
2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 18:48 - 2014-05-21 00:32 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei
2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc
2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 18:09 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 15:53 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-30 11:18 - 2014-06-12 22:21 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-06-12 22:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-06-12 22:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-06-12 22:21 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-06-12 22:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-06-12 22:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 22:21 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-06-12 22:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 22:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-06-12 22:21 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-06-12 22:21 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-06-12 22:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-06-12 22:21 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-06-12 22:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-06-12 22:21 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 22:21 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 22:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-06-12 22:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 22:21 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-06-12 22:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-06-12 22:21 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-06-12 22:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 22:21 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 22:21 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-06-12 22:21 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-06-12 22:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-06-12 22:21 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-06-12 22:21 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 11:57 - 2014-05-21 17:54 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\Adobe
2014-05-27 21:22 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-27 19:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:34 - 2014-05-27 15:35 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:46 - 2014-05-27 09:35 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:08 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 14:12 - 2014-05-24 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-24 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-24 09:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-05-23 11:14 - 2014-05-23 11:14 - 00016796 _____ () C:\ComboFix.txt
2014-05-23 11:14 - 2014-05-23 10:48 - 00000000 ____D () C:\Qoobox
2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-05-23 11:14 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-05-23 11:13 - 2014-05-23 10:48 - 00000000 ____D () C:\Windows\erdnt
2014-05-23 11:11 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-05-23 10:35 - 2014-05-23 10:35 - 05200426 ____R (Swearware) C:\Users\Axel Wartburg\Desktop\ComboFix.exe

Some content of TEMP:
====================
C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe
C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\Quarantine.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe
C:\Users\Beate\AppData\Local\temp\avgnt.exe
C:\Users\Beate\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 08:42

==================== End Of Log ============================

--- --- ---

Hoffe es reicht. ;o)

Herzliche Grüße

schrauber · 23.06.2014, 07:38

So ist das korrekt, aber da fehlt noch die Addition.txt. Öffne bitte FRST, setz nen Haken bei Addition udn scanne, poste bitte noch die Addition.txt.

AxelWartburg · 23.06.2014, 11:44

also noch mal:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:22-06-2014
Ran by Axel Wartburg at 2014-06-23 12:42:03
Running from C:\Users\Axel Wartburg\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Avira (HKLM\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Browser Extensions (HKCU\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 1.8 - Spigot, Inc.) <==== ATTENTION
Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.4 - IObit)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
IObit Malware Fighter (HKLM\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
OpenOffice 4.1.0 (HKLM\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Search Protection (HKCU\...\Search Protection) (Version: 9.4.0.2 - Spigot, Inc.) <==== ATTENTION
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WindowsProtectManger20.0.0.401 (HKLM\...\WindowsProtectManger) (Version: 20.0.0.401 - Fuyu LIMITED) <==== ATTENTION

==================== Restore Points  =========================

08-06-2014 13:29:43 Revo Uninstaller's restore point - Mozilla Firefox 29.0.1 (x86 de)
08-06-2014 14:27:11 Revo Uninstaller's restore point - Mozilla Firefox 29.0.1 (x86 de)
08-06-2014 17:21:11 Revo Uninstaller's restore point - Mozilla Firefox 29.0.1 (x86 de)
10-06-2014 07:14:28 Windows Update
12-06-2014 20:37:51 Windows Update
17-06-2014 09:53:00 Windows Update
20-06-2014 11:42:01 Revo Uninstaller's restore point - System Speedup
20-06-2014 11:52:57 Revo Uninstaller's restore point - Iminent
20-06-2014 11:58:12 Revo Uninstaller's restore point - Advanced System Protector
20-06-2014 15:53:38 Uniblue SpeedUpMyPC installation
20-06-2014 16:01:41 Revo Uninstaller's restore point - Installer
20-06-2014 16:03:16 Revo Uninstaller's restore point - Reimage Repair
20-06-2014 16:05:10 Revo Uninstaller's restore point - SpeedUpMyPC
20-06-2014 16:14:49 Revo Uninstaller's restore point - JFileManager
20-06-2014 16:16:15 Revo Uninstaller's restore point - McAfee Security Scan Plus
20-06-2014 16:23:26 Revo Uninstaller's restore point - MyPC Backup 
20-06-2014 16:26:32 Revo Uninstaller's restore point - NewPlayer
20-06-2014 16:30:29 Revo Uninstaller's restore point - Optimizer Pro v3.2
20-06-2014 16:32:23 Revo Uninstaller's restore point - RegClean Pro
20-06-2014 16:35:05 Revo Uninstaller's restore point - ViewPassword
20-06-2014 16:38:12 Revo Uninstaller's restore point - webssearches uninstaller
20-06-2014 16:41:36 Revo Uninstaller's restore point - Avira
21-06-2014 09:33:57 Windows Update
22-06-2014 08:04:01 Driver Booster : ATI E/A-Kommunikationsprozessor-SMBus-Controller

==================== Hosts content: ==========================

2009-07-14 04:04 - 2014-05-23 10:57 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {00D9975B-7946-4891-AE37-CC7E25701DCF} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {1794341D-ED1F-47E9-AB69-F9C1AFDE897D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-21] (Adobe Systems Incorporated)
Task: {22108C28-074B-41A6-915E-5FFF29FC0873} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe [2014-05-09] (IObit)
Task: {4480E566-4C46-4B62-9AAF-35E9583D8658} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {85B9D478-1534-483A-9246-4B650E2831B4} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe
Task: {AB063ACC-6726-4FE4-AE1D-3F38BE85A714} - System32\Tasks\Driver Booster SkipUAC (Axel Wartburg) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {CE0DCFD0-10CE-4B9F-9AC7-2880A5B71064} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe [2014-03-07] (IObit)
Task: {EA1DE977-FCB1-4B8F-BE23-604AECB27F31} - System32\Tasks\System Speedup => C:\Program Files\System Speedup\SystemSpeedup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-05-23 11:28 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-22 00:34 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\IObit Malware Fighter\madExcept_.bpl
2014-06-22 00:34 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\IObit Malware Fighter\madBasic_.bpl
2014-06-22 00:34 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\IObit Malware Fighter\madDisAsm_.bpl
2014-06-22 00:34 - 2013-12-12 18:46 - 08001344 _____ () C:\Program Files\IObit\IObit Malware Fighter\WebUI.dll
2014-06-22 00:34 - 2013-05-16 19:26 - 00182080 _____ () C:\Program Files\IObit\IObit Malware Fighter\unrar.dll
2014-06-22 00:34 - 2013-10-16 22:17 - 00185168 _____ () C:\Program Files\IObit\IObit Malware Fighter\libcurl-4.dll
2014-06-22 00:34 - 2013-05-16 19:26 - 00145216 _____ () C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll
2014-06-18 07:49 - 2014-06-18 07:50 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-05-21 08:44 - 2014-05-21 08:44 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/23/2014 11:17:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 10:24:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 00:03:46 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (06/22/2014 10:03:59 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b010db1f-7eb6-43be-afbf-2bf7a75e50e2}

Error: (06/22/2014 09:22:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 00:55:55 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files\IObit\Driver Booster\DriverBooster.exe Files\IObit\Driver Booster\DriverBooster.exe"; Beschreibung = Driver Booster : ATI E/A-Kommunikationsprozessor-SMBus-Controller; Fehler = 0x800706be).

Error: (06/22/2014 00:52:23 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {d0a050ae-c81b-472b-97c2-f77ae4f3e9ba}

Error: (06/22/2014 00:29:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 30.0.0.5269, Zeitstempel: 0x53914233
Name des fehlerhaften Moduls: mozalloc.dll, Version: 30.0.0.5269, Zeitstempel: 0x53911393
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0xc0c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (06/22/2014 00:04:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2014 09:51:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/23/2014 11:17:35 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (06/23/2014 11:16:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/22/2014 10:23:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/22/2014 01:31:00 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (06/22/2014 09:21:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/22/2014 00:03:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/21/2014 09:50:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/21/2014 09:42:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/21/2014 11:24:26 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/20/2014 06:46:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NewPlayer Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (06/23/2014 11:17:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 10:24:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 00:03:46 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (06/22/2014 10:03:59 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {b010db1f-7eb6-43be-afbf-2bf7a75e50e2}

Error: (06/22/2014 09:22:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2014 00:55:55 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Program Files\IObit\Driver Booster\DriverBooster.exe Files\IObit\Driver Booster\DriverBooster.exe"Driver Booster : ATI E/A-Kommunikationsprozessor-SMBus-Controller0x800706be

Error: (06/22/2014 00:52:23 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {d0a050ae-c81b-472b-97c2-f77ae4f3e9ba}

Error: (06/22/2014 00:29:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141bc0c01cf8d9d76fb2bf2C:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll90a4d2d2-f993-11e3-b134-0019213e58c0

Error: (06/22/2014 00:04:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2014 09:51:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 1918.49 MB
Available physical RAM: 1359.77 MB
Total Pagefile: 3836.98 MB
Available Pagefile: 2881.16 MB
Total Virtual: 2047.88 MB
Available Virtual: 1924.25 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1862.92 GB) (Free:1779.94 GB) NTFS
Drive f: (Elements) (Fixed) (Total:1397.26 GB) (Free:1258.57 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00029257)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-198731366400) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1397 GB) (Disk ID: 00025AEE)
Partition 1: (Not Active) - (Size=-698724909056) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-06-2014
Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 23-06-2014 12:41:14
Running from C:\Users\Axel Wartburg\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Spigot, Inc.) C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IObit Malware Fighter] => C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-05-23] (IObit)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [SearchProtection] => C:\Users\Axel Wartburg\AppData\Roaming\Search Protection\SearchProtection.EXE [847208 2014-06-18] (Spigot, Inc.)
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Run: [Browser Extensions] => C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\CouponsHelper.exe [961384 2014-06-18] (Spigot, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
BHO: Browser Extensions - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\Coupons.dll (Spigot, Inc.)
BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=800236&p=
FF Homepage: https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ff
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ads Removal - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\adremoveext@adremoveext.net [2014-06-22]
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\faststartff@gmail.com [2014-06-20]
FF Extension: Slick Savings - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\savingsslider@mybrowserbar.com [2014-06-22]
FF Extension: Start Page - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-06-22]
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saamazon@mybrowserbar.com.xpi [2014-06-22]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saebay@mybrowserbar.com.xpi [2014-06-22]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com [2014-06-20]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S2 GlobalUpdater; C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH)
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 12:41 - 2014-06-23 12:41 - 00000000 ____D () C:\Users\Axel Wartburg\Downloads\FRST-OlderVersion
2014-06-22 09:58 - 2014-06-23 12:41 - 00008637 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:53 - 2014-06-23 12:41 - 01073152 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:35 - 2014-06-22 00:36 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:45 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei
2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 10:11 - 2014-06-12 22:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-29 10:11 - 2014-06-12 22:39 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:35 - 2014-05-27 15:34 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:35 - 2014-05-27 09:46 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2012-03-06 19:14 - 00000405 _____ () C:\Users\Axel Wartburg\Documents\signatur.txt
2014-05-25 10:08 - 2014-06-01 15:53 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-25 10:08 - 2014-05-25 10:35 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:07 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 19:00 - 2014-06-21 21:48 - 00000000 ____D () C:\AdwCleaner
2014-05-24 18:25 - 2014-06-07 18:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-24 18:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-24 14:07 - 2014-05-24 14:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe

==================== One Month Modified Files and Folders =======

2014-06-23 12:41 - 2014-06-23 12:41 - 00000000 ____D () C:\Users\Axel Wartburg\Downloads\FRST-OlderVersion
2014-06-23 12:41 - 2014-06-22 09:58 - 00008637 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-23 12:41 - 2014-06-22 09:53 - 01073152 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-23 12:41 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST
2014-06-23 11:57 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 11:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-23 11:27 - 2014-05-20 21:35 - 01187214 _____ () C:\Windows\WindowsUpdate.log
2014-06-23 11:24 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 11:24 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 11:16 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 11:16 - 2009-07-14 06:39 - 00028617 _____ () C:\Windows\setupact.log
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:45 - 2014-06-22 00:45 - 00001056 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-22 00:45 - 2014-06-22 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-22 00:45 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:36 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions
2014-06-22 00:35 - 2014-06-22 00:35 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Search Protection
2014-06-22 00:34 - 2014-06-22 00:34 - 00001131 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:51 - 2014-06-21 21:51 - 00001736 _____ () C:\Users\Beate\Desktop\AdwCleaner[S3]_beate.txt
2014-06-21 21:50 - 2010-11-20 23:48 - 00254310 _____ () C:\Windows\PFRO.log
2014-06-21 21:48 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg
2014-06-21 21:21 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView
2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate
2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 18:48 - 2014-05-21 00:32 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei
2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00290240 _____ () C:\Users\Axel Wartburg\Downloads\jvlsetup.exe
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:28 - 2014-06-20 17:28 - 01390848 _____ () C:\Users\Axel Wartburg\Downloads\Setup.exe
2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc
2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 18:09 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 15:53 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-05-30 11:18 - 2014-06-12 22:21 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-06-12 22:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-06-12 22:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-06-12 22:21 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-06-12 22:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-06-12 22:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 22:21 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-06-12 22:21 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 22:21 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-06-12 22:21 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-06-12 22:21 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-06-12 22:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-06-12 22:21 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-06-12 22:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-06-12 22:21 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 22:21 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 22:21 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-06-12 22:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 22:21 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-06-12 22:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-06-12 22:21 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-06-12 22:21 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 22:21 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 22:21 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-06-12 22:21 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-06-12 22:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-06-12 22:21 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-06-12 22:21 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-29 11:58 - 2014-05-29 11:58 - 00000000 ___RD () C:\Users\Beate\AppData\Roaming\Brother
2014-05-29 11:57 - 2014-05-29 11:57 - 00000000 ____D () C:\Users\Beate\AppData\Local\Adobe
2014-05-29 11:57 - 2014-05-21 17:54 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\Adobe
2014-05-27 21:22 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-27 19:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieUserList
2014-05-27 18:44 - 2014-05-27 18:44 - 00000000 __SHD () C:\Users\Axel Wartburg\AppData\Local\EmieSiteList
2014-05-27 18:07 - 2014-05-27 18:07 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2014-05-27 18:05 - 2014-05-27 18:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer13x32_mssa_aaa_aih.exe
2014-05-27 15:34 - 2014-05-27 15:35 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-05-27 11:46 - 2014-05-27 11:46 - 00000000 ___RD () C:\Users\Axel Wartburg\AppData\Roaming\Brother
2014-05-27 10:12 - 2014-05-27 10:12 - 00000000 ____D () C:\Program Files\ESET
2014-05-27 09:46 - 2014-05-27 09:35 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu.exe
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Zeitungsartikel
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Wissenschaft
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Updater5
2014-05-25 10:35 - 2014-05-25 10:35 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\the work
2014-05-25 10:35 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Selbstständigkeit
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ___RD () C:\Users\Axel Wartburg\Documents\Privat
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Politik
2014-05-25 10:08 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\pdf24
2014-05-25 10:08 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\GTaktiv
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Gedichte
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Erklärungen PC
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\CyberLink
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aquarium
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Aktive-Emails-Thunderbird
2014-05-25 10:07 - 2014-05-25 10:07 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\2014
2014-05-24 19:12 - 2014-05-24 19:12 - 00000000 ____D () C:\Windows\ERUNT
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-24 18:24 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-05-24 14:12 - 2014-05-24 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Axel Wartburg\Downloads\mbam-setup-2.0.2.1012.exe
2014-05-24 12:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-24 09:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

Some content of TEMP:
====================
C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe
C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\Quarantine.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe
C:\Users\Beate\AppData\Local\temp\avgnt.exe
C:\Users\Beate\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 08:42

==================== End Of Log ============================

--- --- ---

--- --- ---

Hab noch nie so viel Werbepopups gehabt. ;o)

schrauber · 23.06.2014, 18:55

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

AxelWartburg · 23.06.2014, 21:30

Hallo Schrauber!

Herzlichen Dank, mal wieder! ♥

Hier die erwünschten Protokolle:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 23.06.2014
Suchlauf-Zeit: 21:56:07
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.23.12
Rootkit Datenbank: v2014.06.20.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Axel Wartburg

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 285184
Verstrichene Zeit: 12 Min, 0 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 3
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [a93f94e7ec8f25116d791d2a709207f9], 
PUP.Optional.IMGUpdater.A, HKLM\SOFTWARE\IMGUPDATER, In Quarantäne, [8365fd7ee09bb2841e0dd1dae022db25], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-2484145685-346988029-2140834265-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, Löschen bei Neustart, [9256710ab8c386b002d2a51161a17888], 

Registrierungswerte: 4
PUP.Optional.IMGUpdater.A, HKLM\SOFTWARE\IMGUPDATER|ConfigBlockJSN, {
   "MAIN_SWITCH" : true,
   "UPDATABLE" : {
      "064A36CC-4404-42F9-B26E-3BFD515F2447" : {
         "lastupdated" : 0,
         "mindeltatime" : 259200
      },
      "2C200CBA-D536-40C8-902D-9C34FD10AD85" : {
         "lastupdated" : 0,
         "localversion" : "0",
         "mindeltatime" : 259200
      },
      "4C973056-22D8-488C-A358-AEA00CC2EC7D" : {
         "lastupdated" : 0,
         "mindeltatime" : 259200
      }
   }
}
, In Quarantäne, [8365fd7ee09bb2841e0dd1dae022db25]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com, In Quarantäne, [aa3ea1da6b108aac0c4fb64b7094db25]
PUP.Optional.IMGUpdater.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GLOBALUPDATER|ImagePath, C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe, In Quarantäne, [0ddb3645e2990135df1d812a34ce5ba5]
PUP.Optional.Spigot.A, HKU\S-1-5-21-2484145685-346988029-2140834265-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Extensions, "C:\Users\Axel Wartburg\AppData\Roaming\Browser Extensions\CouponsHelper.exe", Löschen bei Neustart, [2fb9ef8c7209ee483dab619ad92a0000]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 39
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\tools, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\lib, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\pack, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\en, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\en-US, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\es, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\es-419, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\it, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\pl, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\ru, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\tr, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\vi, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\defaults, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\defaults\preferences, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 

Dateien: 101
PUP.Optional.RegCleanPro, C:\$RECYCLE.BIN\S-1-5-21-2484145685-346988029-2140834265-1001\$RIQKUUX.exe, In Quarantäne, [47a13645592279bd821dfe36ff014bb5], 
PUP.Optional.Solimba, C:\$RECYCLE.BIN\S-1-5-21-2484145685-346988029-2140834265-1001\$RDUTVIY.exe, In Quarantäne, [1eca2e4ddba08caaae01c9afe3217e82], 
PUP.Optional.Skytech.A, C:\$RECYCLE.BIN\S-1-5-21-2484145685-346988029-2140834265-1001\$R9MGTE3\UninstallManager.exe, In Quarantäne, [1bcd502bc8b3cb6b47958801a35e14ec], 
PUP.Optional.IePluginService.A, C:\Users\Axel Wartburg\AppData\Local\temp\2403343\2403343.zipDir\tmp\SupTab_Setup302.exe, In Quarantäne, [6880daa12a5142f4c702d4866c958c74], 
PUP.Optional.IePluginService.A, C:\Users\Axel Wartburg\AppData\Local\temp\2917375\2917375.zipDir\tmp\SupTab_Setup302.exe, In Quarantäne, [d711057698e3df57775298c28978d12f], 
PUP.Optional.WPM.A, C:\Users\Axel Wartburg\AppData\Local\temp\2917375\2917375.zipDir\tmp\wpm_v20.0.0.401.exe, In Quarantäne, [0eda94e7f6855bdbfe88c5c824dde41c], 
PUP.Optional.NewPlayer.A, C:\Users\Axel Wartburg\AppData\Local\temp\4BD7tmp\newvideoplayersetup.exe, In Quarantäne, [30b8d5a66714290d9d47364cb0518c74], 
PUP.Optional.Elex.A, C:\Users\Axel Wartburg\AppData\Local\temp\4BE9tmp\lly_v9.exe, In Quarantäne, [0eda611ad1aab77f5b3689bf709026da], 
PUP.Optional.FreeSoftToday.A, C:\Users\Axel Wartburg\AppData\Local\temp\abfaaa79-9c5d-4e12-993c-f3fcbf8f1ce3\software\Freesofttoday.exe, In Quarantäne, [6b7daecd9edd50e651c4711b2bd6837d], 
PUP.Optional.BundleInstaller, C:\Users\Axel Wartburg\AppData\Local\temp\abfaaa79-9c5d-4e12-993c-f3fcbf8f1ce3\software\JFileManager.exe, In Quarantäne, [c721dc9f146747ef4494651544bd4fb1], 
PUP.Optional.CrossRider.A, C:\Users\Axel Wartburg\AppData\Local\temp\abfaaa79-9c5d-4e12-993c-f3fcbf8f1ce3\software\setup.exe, In Quarantäne, [3bad4c2f27546cca055f0e3a6f9159a7], 
PUP.Optional.GenericExt.A, C:\Users\Axel Wartburg\AppData\Local\temp\igdhbblpcellaljokkpfhcjlagemhgjl1aac2\minibarchrome.exe, In Quarantäne, [7771c3b8a1daa096b395300d67992cd4], 
PUP.Optional.Iminent.A, C:\Users\Axel Wartburg\AppData\Local\temp\n9563\Iminent_1712-b2fcad5e.exe, In Quarantäne, [ab3d87f4fe7d4aeccbb071d7e21f4db3], 
PUP.Optional.BundleInstaller.A, C:\Users\Axel Wartburg\AppData\Local\temp\n9563\s9563.exe, In Quarantäne, [f8f0c8b34a312115a43fcc7df20e936d], 
PUP.Optional.DomaIQ, C:\Users\Axel Wartburg\Downloads\jvlsetup.exe, In Quarantäne, [5b8d04779cdf74c2d77eafde6d942dd3], 
PUP.Optional.Downloader, C:\Users\Axel Wartburg\Downloads\Setup.exe, In Quarantäne, [18d02b5090eb49edef01404efd04d828], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome.manifest, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\icon.png, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\install.rdf, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\config.json, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\main.js, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\prefs.txt, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.js, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.xul, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.SavingsSlider.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\savingsslider@mybrowserbar.com\chrome\content\spigot.js, In Quarantäne, [7e6aff7c3b4080b653672372b74be51b], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome.manifest, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\icon.png, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\install.rdf, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\config.json, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\main.js, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\main.xul, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\newtab.xul, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\prefs.txt, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\redirects.js, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\spigot.js, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.Spigot.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}\chrome\content\startpage.js, In Quarantäne, [74740e6d95e64aec892b91093ac8be42], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome.manifest, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\install.rdf, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\index.html, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module\other.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\logo.ico, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\chrome\skin\style.css, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\addonmanager.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\aes.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\config.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\dialogs.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\last_tab.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\misc.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\properties.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\remoterequest.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 
PUP.Optional.FastStart.A, C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\extensions\faststartff@gmail.com\modules\settings.js, In Quarantäne, [fcece596bebd0b2b5ba9792e887aba46], 

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x86
Ran by Axel Wartburg on 23.06.2014 at 22:23:28,12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Axel Wartburg\AppData\Roaming\mozilla\firefox\profiles\qpoy22qo.default\minidumps [11 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.06.2014 at 22:27:48,96
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Herzliche Grüße
Axel

schrauber · 24.06.2014, 17:14

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

AxelWartburg · 24.06.2014, 19:33

Da gibt es eine Herausforderung:

Wollte gerade die Avira Firewall ausschalten und bekam gesagt, dass ich die Rechte dazu nicht habe. Versteh ich zwar nicht, weil ich der "PC-Admin" bin, aber so stand es da.

Und die PC-Sicherheit bekomme ich nun auch nicht mehr eingeschaltet.

Was nu?

schrauber · 25.06.2014, 18:04

poste mal ein frisches FRST log.

AxelWartburg · 25.06.2014, 22:40

Büdde sehr:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:22-06-2014
Ran by Axel Wartburg at 2014-06-25 23:38:40
Running from C:\Users\Axel Wartburg\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Advanced SystemCare 7 (HKLM\...\Advanced SystemCare 7_is1) (Version: 7.3.1 - IObit)
Avira (HKLM\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.4 - IObit)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
IObit Malware Fighter (HKLM\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.2.10.2466 - IObit)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
OpenOffice 4.1.0 (HKLM\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Smart Defrag 3 (HKLM\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

==================== Restore Points  =========================

08-06-2014 14:27:11 Revo Uninstaller's restore point - Mozilla Firefox 29.0.1 (x86 de)
08-06-2014 17:21:11 Revo Uninstaller's restore point - Mozilla Firefox 29.0.1 (x86 de)
10-06-2014 07:14:28 Windows Update
12-06-2014 20:37:51 Windows Update
17-06-2014 09:53:00 Windows Update
20-06-2014 11:42:01 Revo Uninstaller's restore point - System Speedup
20-06-2014 11:52:57 Revo Uninstaller's restore point - Iminent
20-06-2014 11:58:12 Revo Uninstaller's restore point - Advanced System Protector
20-06-2014 15:53:38 Uniblue SpeedUpMyPC installation
20-06-2014 16:01:41 Revo Uninstaller's restore point - Installer
20-06-2014 16:03:16 Revo Uninstaller's restore point - Reimage Repair
20-06-2014 16:05:10 Revo Uninstaller's restore point - SpeedUpMyPC
20-06-2014 16:14:49 Revo Uninstaller's restore point - JFileManager
20-06-2014 16:16:15 Revo Uninstaller's restore point - McAfee Security Scan Plus
20-06-2014 16:23:26 Revo Uninstaller's restore point - MyPC Backup 
20-06-2014 16:26:32 Revo Uninstaller's restore point - NewPlayer
20-06-2014 16:30:29 Revo Uninstaller's restore point - Optimizer Pro v3.2
20-06-2014 16:32:23 Revo Uninstaller's restore point - RegClean Pro
20-06-2014 16:35:05 Revo Uninstaller's restore point - ViewPassword
20-06-2014 16:38:12 Revo Uninstaller's restore point - webssearches uninstaller
20-06-2014 16:41:36 Revo Uninstaller's restore point - Avira
21-06-2014 09:33:57 Windows Update
22-06-2014 08:04:01 Driver Booster : ATI E/A-Kommunikationsprozessor-SMBus-Controller
23-06-2014 19:36:00 Revo Uninstaller's restore point - Browser Extensions
23-06-2014 19:40:02 Revo Uninstaller's restore point - Search Protection
23-06-2014 19:41:49 Revo Uninstaller's restore point - WindowsProtectManger20.0.0.401

==================== Hosts content: ==========================

2009-07-14 04:04 - 2014-05-23 10:57 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {00D9975B-7946-4891-AE37-CC7E25701DCF} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {0745026C-55BE-49F0-8FA8-8D80CD300549} - System32\Tasks\SmartDefrag3_Update => C:\Program Files\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {11B166D6-C5B3-4DAB-A79F-DAD80D40E7BC} - System32\Tasks\ASC7_SkipUac_Axel Wartburg => C:\Program Files\IObit\Advanced SystemCare 7\ASC.exe [2014-05-29] (IObit)
Task: {1794341D-ED1F-47E9-AB69-F9C1AFDE897D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-21] (Adobe Systems Incorporated)
Task: {22108C28-074B-41A6-915E-5FFF29FC0873} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe [2014-05-09] (IObit)
Task: {4480E566-4C46-4B62-9AAF-35E9583D8658} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {626BEB78-BC76-45F8-A4E6-C4AF82297C27} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-05-06] (IObit)
Task: {85B9D478-1534-483A-9246-4B650E2831B4} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe
Task: {AB063ACC-6726-4FE4-AE1D-3F38BE85A714} - System32\Tasks\Driver Booster SkipUAC (Axel Wartburg) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-05-09] (IObit)
Task: {CE0DCFD0-10CE-4B9F-9AC7-2880A5B71064} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe [2014-03-07] (IObit)
Task: {EA1DE977-FCB1-4B8F-BE23-604AECB27F31} - System32\Tasks\System Speedup => C:\Program Files\System Speedup\SystemSpeedup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-05-23 11:28 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-22 00:34 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\IObit Malware Fighter\madExcept_.bpl
2014-06-22 00:34 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\IObit Malware Fighter\madBasic_.bpl
2014-06-22 00:34 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\IObit Malware Fighter\madDisAsm_.bpl
2014-06-22 00:34 - 2013-12-12 18:46 - 08001344 _____ () C:\Program Files\IObit\IObit Malware Fighter\WebUI.dll
2014-06-22 00:34 - 2013-05-16 19:26 - 00182080 _____ () C:\Program Files\IObit\IObit Malware Fighter\unrar.dll
2014-06-22 00:34 - 2013-10-16 22:17 - 00185168 _____ () C:\Program Files\IObit\IObit Malware Fighter\libcurl-4.dll
2014-06-22 00:34 - 2013-05-16 19:26 - 00145216 _____ () C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll
2014-06-25 17:21 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 7\sqlite3.dll
2014-06-25 17:21 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files\IObit\Advanced SystemCare 7\webres.dll
2014-06-25 17:21 - 2013-12-02 19:06 - 01281312 _____ () C:\Program Files\IObit\Advanced SystemCare 7\Scan.dll
2014-06-25 17:23 - 2012-09-05 18:55 - 00892288 _____ () C:\Program Files\IObit\Smart Defrag 3\webres.dll

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/25/2014 10:27:25 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (06/25/2014 08:24:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/24/2014 09:36:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/24/2014 11:57:07 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (06/24/2014 09:06:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/25/2014 05:23:08 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/25/2014 05:22:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/25/2014 08:25:06 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (06/25/2014 08:23:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/24/2014 09:35:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/24/2014 09:07:06 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (06/24/2014 09:05:34 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3


Microsoft Office Sessions:
=========================
Error: (06/25/2014 10:27:25 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (06/25/2014 08:24:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/24/2014 09:36:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/24/2014 11:57:07 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\IObit\driver booster\DpInst\x64\dpinst.exe

Error: (06/24/2014 09:06:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 1918.49 MB
Available physical RAM: 1286.66 MB
Total Pagefile: 3836.98 MB
Available Pagefile: 2649.79 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.26 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1862.92 GB) (Free:1778.15 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00029257)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-198731366400) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 27.06.2014, 07:08

Das ist aber kein FRST log

AxelWartburg · 30.06.2014, 12:18

Na, dann hoff ich mal, dass dies eine ist:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:28-06-2014 02
Ran by Axel Wartburg at 2014-06-30 12:58:10
Running from C:\Users\Axel Wartburg\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Avira (HKLM\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
OpenOffice 4.1.0 (HKLM\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

==================== Restore Points  =========================

20-06-2014 15:53:38 Uniblue SpeedUpMyPC installation
20-06-2014 16:01:41 Revo Uninstaller's restore point - Installer
20-06-2014 16:03:16 Revo Uninstaller's restore point - Reimage Repair
20-06-2014 16:05:10 Revo Uninstaller's restore point - SpeedUpMyPC
20-06-2014 16:14:49 Revo Uninstaller's restore point - JFileManager
20-06-2014 16:16:15 Revo Uninstaller's restore point - McAfee Security Scan Plus
20-06-2014 16:23:26 Revo Uninstaller's restore point - MyPC Backup 
20-06-2014 16:26:32 Revo Uninstaller's restore point - NewPlayer
20-06-2014 16:30:29 Revo Uninstaller's restore point - Optimizer Pro v3.2
20-06-2014 16:32:23 Revo Uninstaller's restore point - RegClean Pro
20-06-2014 16:35:05 Revo Uninstaller's restore point - ViewPassword
20-06-2014 16:38:12 Revo Uninstaller's restore point - webssearches uninstaller
20-06-2014 16:41:36 Revo Uninstaller's restore point - Avira
21-06-2014 09:33:57 Windows Update
22-06-2014 08:04:01 Driver Booster : ATI E/A-Kommunikationsprozessor-SMBus-Controller
23-06-2014 19:36:00 Revo Uninstaller's restore point - Browser Extensions
23-06-2014 19:40:02 Revo Uninstaller's restore point - Search Protection
23-06-2014 19:41:49 Revo Uninstaller's restore point - WindowsProtectManger20.0.0.401
25-06-2014 21:41:54 Revo Uninstaller's restore point - Smart Defrag 3
25-06-2014 21:46:08 Revo Uninstaller's restore point - Surfing Protection
25-06-2014 21:49:40 Revo Uninstaller's restore point - Surfing Protection
25-06-2014 21:51:08 Revo Uninstaller's restore point - Surfing Protection
25-06-2014 21:53:45 Revo Uninstaller's restore point - Driver Booster
25-06-2014 21:56:00 Revo Uninstaller's restore point - IObit Malware Fighter
25-06-2014 21:59:07 Revo Uninstaller's restore point - IObit Uninstaller
25-06-2014 22:02:40 Revo Uninstaller's restore point - Advanced SystemCare 7
25-06-2014 22:07:47 Revo Uninstaller's restore point - McAfee SiteAdvisor
27-06-2014 17:37:14 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2014-05-23 10:57 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {00D9975B-7946-4891-AE37-CC7E25701DCF} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe <==== ATTENTION
Task: {1794341D-ED1F-47E9-AB69-F9C1AFDE897D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-21] (Adobe Systems Incorporated)
Task: {4480E566-4C46-4B62-9AAF-35E9583D8658} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {85B9D478-1534-483A-9246-4B650E2831B4} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe
Task: {AB063ACC-6726-4FE4-AE1D-3F38BE85A714} - System32\Tasks\Driver Booster SkipUAC (Axel Wartburg) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe <==== ATTENTION
Task: {EA1DE977-FCB1-4B8F-BE23-604AECB27F31} - System32\Tasks\System Speedup => C:\Program Files\System Speedup\SystemSpeedup.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-05-23 11:28 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-18 07:49 - 2014-06-18 07:50 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-05-21 08:44 - 2014-05-21 08:44 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
2014-06-11 16:03 - 2014-06-11 16:03 - 03022960 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll
2014-06-11 16:03 - 2014-06-11 16:03 - 00158832 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll
2014-06-11 16:03 - 2014-06-11 16:03 - 00023152 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/30/2014 08:15:53 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2014 05:22:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2014 09:35:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.13.24202, Zeitstempel: 0x53736104
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000812f
ID des fehlerhaften Prozesses: 0xea0
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3

Error: (06/28/2014 09:35:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.Systray.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.Runtime.CallbackException
Stapel:
   bei System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   bei System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (06/28/2014 09:35:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.13.24161, Zeitstempel: 0x537360b2
Name des fehlerhaften Moduls: MSVCR120.dll, Version: 12.0.21005.1, Zeitstempel: 0x524f7ce6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00011e2e
ID des fehlerhaften Prozesses: 0x764
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2
Berichtskennung: Avira.OE.ServiceHost.exe3

Error: (06/28/2014 09:34:59 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei Avira.OE.AvConnector.Interface.IGeneralPlugin.GetGeneralInfo()
   bei Avira.OE.AvConnector.AvStatusReporter.GetGeneralInfo(Avira.OE.AvConnector.Interface.IGeneralPlugin)
   bei Avira.OE.AvConnector.AvStatusReporter.GetStatus()
   bei Avira.OE.AvConnector.AvConnector.GetAvStatusData()
   bei Avira.OE.AvConnector.AvConnector.RefreshDeviceState()
   bei Avira.OE.AvConnector.AvConnector.OnEventDatabaseFileChanged(System.Object, System.EventArgs)
   bei Avira.OE.AvConnector.AvFileMonitor.FileWatcher_Changed(System.Object, System.IO.FileSystemEventArgs)
   bei System.IO.FileSystemWatcher.OnChanged(System.IO.FileSystemEventArgs)
   bei System.IO.FileSystemWatcher.NotifyFileSystemEventArgs(Int32, System.String)
   bei System.IO.FileSystemWatcher.CompletionStatusChanged(UInt32, UInt32, System.Threading.NativeOverlapped*)
   bei System.Threading._IOCompletionCallback.IOCompletionCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (06/28/2014 09:30:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/27/2014 02:30:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2014 09:50:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/25/2014 11:41:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {0a4361f8-3f9b-45ea-8484-256ea9690ebb}


System errors:
=============
Error: (06/30/2014 08:14:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/29/2014 05:21:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/29/2014 05:21:12 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎28.‎06.‎2014 um 11:23:51 unerwartet heruntergefahren.

Error: (06/28/2014 09:35:34 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/28/2014 09:29:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/27/2014 02:29:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/26/2014 09:49:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "GlobalUpdater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/26/2014 00:03:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Advanced SystemCare Service 7" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/25/2014 05:23:08 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Advanced SystemCare Service 7" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/25/2014 05:22:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (06/30/2014 08:15:53 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/29/2014 05:22:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/28/2014 09:35:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.Systray.exe1.1.13.2420253736104KERNELBASE.dll6.1.7601.18409531599f6e04343520000812fea001cf92a321db8402C:\Program Files\Avira\My Avira\Avira.OE.Systray.exeC:\Windows\system32\KERNELBASE.dllcd330aaf-fe96-11e3-afb2-0019213e58c0

Error: (06/28/2014 09:35:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.Systray.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.Runtime.CallbackException
Stapel:
   bei System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   bei System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (06/28/2014 09:35:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.ServiceHost.exe1.1.13.24161537360b2MSVCR120.dll12.0.21005.1524f7ce6c000000500011e2e76401cf92a2c0d55db9C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exeC:\Windows\system32\MSVCR120.dllb6a75ffe-fe96-11e3-afb2-0019213e58c0

Error: (06/28/2014 09:34:59 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.OE.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei Avira.OE.AvConnector.Interface.IGeneralPlugin.GetGeneralInfo()
   bei Avira.OE.AvConnector.AvStatusReporter.GetGeneralInfo(Avira.OE.AvConnector.Interface.IGeneralPlugin)
   bei Avira.OE.AvConnector.AvStatusReporter.GetStatus()
   bei Avira.OE.AvConnector.AvConnector.GetAvStatusData()
   bei Avira.OE.AvConnector.AvConnector.RefreshDeviceState()
   bei Avira.OE.AvConnector.AvConnector.OnEventDatabaseFileChanged(System.Object, System.EventArgs)
   bei Avira.OE.AvConnector.AvFileMonitor.FileWatcher_Changed(System.Object, System.IO.FileSystemEventArgs)
   bei System.IO.FileSystemWatcher.OnChanged(System.IO.FileSystemEventArgs)
   bei System.IO.FileSystemWatcher.NotifyFileSystemEventArgs(Int32, System.String)
   bei System.IO.FileSystemWatcher.CompletionStatusChanged(UInt32, UInt32, System.Threading.NativeOverlapped*)
   bei System.Threading._IOCompletionCallback.IOCompletionCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (06/28/2014 09:30:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/27/2014 02:30:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/26/2014 09:50:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/25/2014 11:41:54 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {0a4361f8-3f9b-45ea-8484-256ea9690ebb}


==================== Memory info =========================== 

Percentage of memory in use: 48%
Total physical RAM: 1918.49 MB
Available physical RAM: 987.75 MB
Total Pagefile: 3836.98 MB
Available Pagefile: 2694.58 MB
Total Virtual: 2047.88 MB
Available Virtual: 1924.26 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1862.92 GB) (Free:1779.61 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00029257)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-198731366400) - (Type=07 NTFS)

==================== End Of Log ============================

oder die hier

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02
Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 30-06-2014 13:17:15
Running from C:\Users\Axel Wartburg\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] => "C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {77FE92FC-4266-43CB-BEB8-1BEA085DF78A} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A010DE0&p={SearchTerms}
SearchScopes: HKCU - {77FE92FC-4266-43CB-BEB8-1BEA085DF78A} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A010DE0&p={SearchTerms}
SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Homepage: https://www.ecosia.org/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A110DE0&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saamazon@mybrowserbar.com.xpi [2014-06-22]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\Extensions\saebay@mybrowserbar.com.xpi [2014-06-22]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S2 GlobalUpdater; No ImagePath

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-27 21:10 - 2014-06-27 21:10 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\ProductData
2014-06-25 23:54 - 2014-06-25 23:54 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-06-25 17:26 - 2013-11-19 16:52 - 00031008 _____ (IObit) C:\Windows\system32\SmartDefragBootTime.exe
2014-06-25 17:25 - 2014-06-25 17:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\ProductData
2014-06-25 17:23 - 2014-06-25 17:25 - 10462488 _____ () C:\Users\Axel Wartburg\Downloads\saSetup-3.7.0.exe
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Apple Computer
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-24 21:48 - 2014-06-25 21:45 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\IObit
2014-06-24 20:29 - 2014-06-24 20:31 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu(1).exe
2014-06-23 22:17 - 2014-06-23 22:17 - 01016261 _____ (Thisisu) C:\Users\Axel Wartburg\Downloads\JRT.exe
2014-06-23 21:52 - 2014-06-23 21:52 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-23 19:58 - 2014-06-23 18:38 - 00216943 _____ () C:\Users\Axel Wartburg\Documents\Info-Abend%202014.doc_0.odt
2014-06-23 14:45 - 2014-06-23 14:35 - 07822461 _____ () C:\Users\Axel Wartburg\Documents\Briefbogen,%20Axel.doc_0.odt
2014-06-23 12:42 - 2014-06-30 12:58 - 00021001 _____ () C:\Users\Axel Wartburg\Downloads\Addition.txt
2014-06-23 12:41 - 2014-06-30 12:57 - 00000000 ____D () C:\Users\Axel Wartburg\Downloads\FRST-OlderVersion
2014-06-22 09:58 - 2014-06-30 13:17 - 00006602 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:53 - 2014-06-30 12:57 - 01073664 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 00:34 - 2014-06-26 00:04 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:34 - 2014-06-25 17:23 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei
2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe

==================== One Month Modified Files and Folders =======

2014-06-30 13:17 - 2014-06-22 09:58 - 00006602 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-30 13:17 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST
2014-06-30 12:58 - 2014-06-23 12:42 - 00021001 _____ () C:\Users\Axel Wartburg\Downloads\Addition.txt
2014-06-30 12:57 - 2014-06-23 12:41 - 00000000 ____D () C:\Users\Axel Wartburg\Downloads\FRST-OlderVersion
2014-06-30 12:57 - 2014-06-22 09:53 - 01073664 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-30 12:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-30 08:22 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-30 08:22 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-30 08:18 - 2014-05-20 21:35 - 01347504 _____ () C:\Windows\WindowsUpdate.log
2014-06-30 08:14 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-30 08:14 - 2009-07-14 06:39 - 00029177 _____ () C:\Windows\setupact.log
2014-06-27 21:10 - 2014-06-27 21:10 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\ProductData
2014-06-26 09:49 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-26 09:48 - 2010-11-20 23:48 - 00314694 _____ () C:\Windows\PFRO.log
2014-06-26 00:04 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit
2014-06-25 23:54 - 2014-06-25 23:54 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-06-25 21:45 - 2014-06-24 21:48 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\IObit
2014-06-25 17:25 - 2014-06-25 17:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\ProductData
2014-06-25 17:25 - 2014-06-25 17:23 - 10462488 _____ () C:\Users\Axel Wartburg\Downloads\saSetup-3.7.0.exe
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Apple Computer
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 17:23 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-24 22:25 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-24 20:31 - 2014-06-24 20:29 - 02347384 _____ (ESET) C:\Users\Axel Wartburg\Downloads\esetsmartinstaller_deu(1).exe
2014-06-23 22:17 - 2014-06-23 22:17 - 01016261 _____ (Thisisu) C:\Users\Axel Wartburg\Downloads\JRT.exe
2014-06-23 22:13 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-23 21:52 - 2014-06-23 21:52 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-23 21:52 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-23 21:52 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-23 18:38 - 2014-06-23 19:58 - 00216943 _____ () C:\Users\Axel Wartburg\Documents\Info-Abend%202014.doc_0.odt
2014-06-23 14:35 - 2014-06-23 14:45 - 07822461 _____ () C:\Users\Axel Wartburg\Documents\Briefbogen,%20Axel.doc_0.odt
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:48 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-21 21:29 - 2014-06-21 21:29 - 01333465 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.212.exe
2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg
2014-06-21 21:21 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView
2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate
2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 18:48 - 2014-05-21 00:32 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
2014-06-20 18:10 - 2014-06-20 18:10 - 00000000 ____D () C:\Program Files\JFileManager
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei
2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc
2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-01 15:53 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln

Some content of TEMP:
====================
C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe
C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\Quarantine.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe
C:\Users\Beate\AppData\Local\temp\avgnt.exe
C:\Users\Beate\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-28 10:54

==================== End Of Log ============================

--- --- ---

...

09.06.2014, 07:10	#17
schrauber /// the machine /// TB-Ausbilder	Windows7, Neuinstallation, unerwünschte Programme nicht löschbar Hast Du auch dran gedacht FF zurückzusetzen wie im Link angegeben? __________________ __________________

22.06.2014, 07:06	#19
schrauber /// the machine /// TB-Ausbilder	Windows7, Neuinstallation, unerwünschte Programme nicht löschbar poste mal bitte ein frisches FRST log. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

23.06.2014, 07:38	#21
schrauber /// the machine /// TB-Ausbilder	Windows7, Neuinstallation, unerwünschte Programme nicht löschbar So ist das korrekt, aber da fehlt noch die Addition.txt. Öffne bitte FRST, setz nen Haken bei Addition udn scanne, poste bitte noch die Addition.txt. __________________ --> Windows7, Neuinstallation, unerwünschte Programme nicht löschbar

25.06.2014, 18:04	#27
schrauber /// the machine /// TB-Ausbilder	Windows7, Neuinstallation, unerwünschte Programme nicht löschbar poste mal ein frisches FRST log. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

27.06.2014, 07:08	#29
schrauber /// the machine /// TB-Ausbilder	Windows7, Neuinstallation, unerwünschte Programme nicht löschbar Das ist aber kein FRST log __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows7, Neuinstallation, unerwünschte Programme nicht löschbar

Log-Analyse und Auswertung: Windows7, Neuinstallation, unerwünschte Programme nicht löschbar