(save , on) Links im Internet & Chrome funktioniert nicht richtig

Terrenay · 29.07.2014, 17:47

Ja, war mit einem Google Konto verbunden. War das falsch?

Auf jeden Fall ist die Erweiterung jetzt weg, nachdem ich Revo benutzt habe

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Mirjam Zanetti (administrator) on MirjamZanetti on 29-07-2014 18:44:18
Running from C:\Users\Mirjam Zanetti\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [4StoryPrePatch] => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe [327680 2013-01-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SNT -> {76F9D91C-56F3-3618-2D80-F6734BE2E498} -> C:\Program Files (x86)\SNT\5AJN.dll No File
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: Media View -> {fed65192-d64e-4d7b-91f6-37d5f033d528} -> C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ie\MediaViewV1alpha97.dll No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-02-25]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha97.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home1136.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ff

Chrome: 
=======
CHR StartupUrls: "https://www.google.com/"
CHR Extension: (Google Docs) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-29]
CHR Extension: (Google Drive) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-29]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-29]
CHR Extension: (YouTube) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-29]
CHR Extension: (Google Search) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-29]
CHR Extension: (Avira Browser Safety) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-29]
CHR Extension: (Google Wallet) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-29]
CHR Extension: (Gmail) - C:\Users\Mirjam Zanetti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-29]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2014-07-29]
CHR HKLM-x32\...\Chrome\Extension: [fgdfbnnnceningmmfememmedbfgmcpcp] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha97\ch\MediaViewV1alpha97.crx [2014-07-29]
CHR HKLM-x32\...\Chrome\Extension: [jmnjdacpgoffbagiiehfohoiadgabenc] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home1136\ch\MediaWatchV1home1136.crx [2014-07-29]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)
S3 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-07-02] (Perfect World Entertainment Inc)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-29] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-29 18:44 - 2014-07-29 18:44 - 00020003 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-29 18:40 - 2014-07-29 18:40 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-29 18:40 - 2014-07-29 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-29 18:35 - 2014-07-29 18:40 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-29 18:35 - 2014-07-29 18:40 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-29 18:35 - 2014-07-29 18:35 - 00003910 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-29 18:35 - 2014-07-29 18:35 - 00003658 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-29 18:34 - 2014-07-29 18:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Deployment
2014-07-29 18:34 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Apps\2.0
2014-07-29 14:22 - 2014-07-29 14:22 - 00000120 _____ () C:\Windows\wininit.ini
2014-07-28 13:40 - 2014-07-28 13:41 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++
2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe
2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk
2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon
2014-07-27 18:46 - 2014-07-27 18:49 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-26 21:21 - 2014-07-26 21:22 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-24 15:43 - 2014-07-24 15:42 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 09:45 - 2014-07-29 18:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 09:37 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-23 09:37 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-23 09:37 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-23 09:36 - 2014-07-23 09:37 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:14 - 2014-07-22 13:15 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-20 21:19 - 2014-07-20 21:20 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 13:32 - 2014-07-24 12:07 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 13:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 12:14 - 2014-07-24 12:06 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-10 16:48 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 15:31 - 2014-07-10 16:48 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 16:48 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:08 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-10 14:08 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-10 14:08 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-10 14:08 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-10 11:34 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:34 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:34 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:34 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-10 11:34 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-10 11:34 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-10 11:34 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-10 11:34 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-10 11:34 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:34 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-10 11:34 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-10 11:34 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-10 11:34 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:34 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:34 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-10 11:34 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-10 11:34 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-10 11:34 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-10 11:34 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-10 11:34 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-10 11:34 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-10 11:34 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-10 11:34 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-10 11:34 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:34 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-10 11:34 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-10 11:34 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:34 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:34 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:34 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-10 11:34 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:34 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:34 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:34 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:34 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:34 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:28 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-10 11:28 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-10 11:28 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:28 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:28 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:28 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 11:28 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-10 11:28 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-10 11:28 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:23 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 11:23 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-10 11:23 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 14:10 - 2014-07-10 14:52 - 00000000 ____D () C:\Qoobox
2014-07-09 14:09 - 2014-07-10 14:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-09 14:08 - 2014-07-10 13:55 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 13:21 - 2014-07-09 13:23 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-08 11:06 - 2014-07-08 11:07 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:25 - 2014-07-07 20:28 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 19:27 - 2014-07-29 18:44 - 00000000 ____D () C:\FRST
2014-07-07 19:27 - 2014-07-24 12:06 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-07 14:45 - 2014-07-07 14:51 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:44 - 2014-07-08 06:36 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 14:43 - 2014-07-07 14:44 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-29 18:45 - 2014-07-29 18:44 - 00020003 _____ () C:\Users\Mirjam Zanetti\Desktop\FRST.txt
2014-07-29 18:44 - 2014-07-07 19:27 - 00000000 ____D () C:\FRST
2014-07-29 18:40 - 2014-07-29 18:40 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-29 18:40 - 2014-07-29 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-29 18:40 - 2014-07-29 18:35 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-29 18:40 - 2014-07-29 18:35 - 00000910 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-29 18:40 - 2012-12-01 11:54 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Google
2014-07-29 18:40 - 2012-12-01 11:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-29 18:35 - 2014-07-29 18:35 - 00003910 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-29 18:35 - 2014-07-29 18:35 - 00003658 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-29 18:35 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Deployment
2014-07-29 18:34 - 2014-07-29 18:34 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\Apps\2.0
2014-07-29 18:33 - 2014-07-23 09:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-29 18:23 - 2013-02-28 23:35 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2014-07-29 18:21 - 2014-04-16 22:09 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-29 18:21 - 2014-01-26 18:18 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA.job
2014-07-29 18:20 - 2014-05-11 09:07 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\uTorrent
2014-07-29 18:20 - 2014-01-23 13:44 - 00000320 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job
2014-07-29 18:16 - 2012-12-29 18:45 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype
2014-07-29 14:30 - 2014-01-26 18:18 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2014-07-29 14:24 - 2013-01-14 21:16 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Mozilla
2014-07-29 14:22 - 2014-07-29 14:22 - 00000120 _____ () C:\Windows\wininit.ini
2014-07-29 14:22 - 2014-01-09 13:11 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-07-29 14:22 - 2012-12-02 21:30 - 00000000 ____D () C:\Users\Tim\AppData\Local\Google
2014-07-29 14:16 - 2014-01-26 18:18 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002UA
2014-07-29 14:16 - 2014-01-26 18:18 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core
2014-07-29 14:12 - 2013-03-01 12:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi
2014-07-29 14:03 - 2012-06-29 12:21 - 01350079 _____ () C:\Windows\WindowsUpdate.log
2014-07-29 10:28 - 2013-03-03 20:30 - 00000000 ____D () C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2014-07-29 10:23 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-29 10:23 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-29 10:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-29 10:14 - 2009-07-14 06:51 - 00103044 _____ () C:\Windows\setupact.log
2014-07-28 20:02 - 2013-09-19 11:55 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\.minecraft
2014-07-28 13:41 - 2014-07-28 13:40 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Notepad++
2014-07-28 13:28 - 2014-07-28 13:28 - 00854390 _____ () C:\Users\Mirjam Zanetti\Desktop\SecurityCheck.exe
2014-07-28 08:34 - 2010-11-21 05:47 - 01759436 _____ () C:\Windows\PFRO.log
2014-07-27 19:38 - 2014-04-25 20:59 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-27 19:05 - 2012-12-21 13:42 - 00000000 ____D () C:\Users\Sven\AppData\Local\CrashDumps
2014-07-27 19:03 - 2014-07-27 19:03 - 00000803 _____ () C:\Users\Sven\Desktop\Super Hexagon.exe - Verknüpfung.lnk
2014-07-27 19:03 - 2014-07-27 19:03 - 00000000 ____D () C:\Users\Sven\Desktop\Super Hexagon
2014-07-27 18:49 - 2014-07-27 18:46 - 23940629 _____ () C:\Users\Sven\Downloads\Super Hexagon by Andy Wale.rar
2014-07-27 15:20 - 2014-07-27 15:20 - 01016261 _____ (Thisisu) C:\Users\Mirjam Zanetti\Desktop\JRT.exe
2014-07-27 15:04 - 2013-12-22 10:49 - 00000000 ____D () C:\AdwCleaner
2014-07-27 15:03 - 2013-03-30 16:36 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Online Weather
2014-07-27 14:52 - 2014-07-27 14:52 - 01354223 _____ () C:\Users\Mirjam Zanetti\Desktop\adwcleaner_3.216.exe
2014-07-27 13:55 - 2014-07-27 13:55 - 00001272 _____ () C:\Users\Mirjam Zanetti\Desktop\Revo Uninstaller.lnk
2014-07-27 13:54 - 2014-07-27 13:54 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Mirjam Zanetti\Desktop\revosetup95.exe
2014-07-27 13:54 - 2014-01-02 14:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-26 21:22 - 2014-07-26 21:21 - 02093568 _____ (Farbar) C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
2014-07-25 22:34 - 2012-12-02 21:28 - 00000008 __RSH () C:\Users\Tim\ntuser.pol
2014-07-25 22:34 - 2012-12-02 21:28 - 00000000 ____D () C:\Users\Tim
2014-07-25 19:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-25 19:13 - 2012-12-01 11:20 - 00000326 __RSH () C:\Users\Sven\ntuser.pol
2014-07-25 19:13 - 2012-12-01 11:20 - 00000000 ____D () C:\Users\Sven
2014-07-25 19:09 - 2014-02-24 18:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-07-25 19:09 - 2012-12-01 11:05 - 00000008 __RSH () C:\Users\Mirjam Zanetti\ntuser.pol
2014-07-25 19:09 - 2012-11-07 11:27 - 00000000 ____D () C:\Users\Mirjam Zanetti
2014-07-25 19:07 - 2014-01-07 00:07 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-07-25 19:05 - 2014-07-25 19:05 - 00000000 ____D () C:\ProgramData\VS
2014-07-25 19:01 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-24 15:42 - 2014-07-24 15:43 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-24 12:07 - 2014-07-11 13:32 - 00049756 _____ () C:\Users\Sven\Desktop\FRST.txt
2014-07-24 12:06 - 2014-07-11 12:14 - 00000000 ____D () C:\Users\Sven\Desktop\FRST-OlderVersion
2014-07-24 12:06 - 2014-07-07 19:27 - 02093568 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2014-07-24 11:58 - 2014-07-24 11:58 - 00002255 _____ () C:\Users\Sven\Desktop\Google Chrome.lnk
2014-07-24 11:58 - 2014-07-24 11:58 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-24 11:51 - 2014-07-24 11:51 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Deployment
2014-07-24 11:51 - 2012-12-02 19:53 - 00000000 ____D () C:\Users\Sven\AppData\Local\Apps\2.0
2014-07-23 20:58 - 2014-07-23 20:58 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Avira
2014-07-23 14:30 - 2014-03-02 13:27 - 00000000 ____D () C:\Program Files (x86)\NextCouuP
2014-07-23 14:30 - 2013-12-16 13:29 - 00000000 ____D () C:\Program Files (x86)\SK Supporter
2014-07-23 09:45 - 2014-07-23 09:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-23 09:45 - 2012-03-23 02:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-23 09:45 - 2012-03-23 02:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-23 09:38 - 2013-12-21 11:39 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-23 09:37 - 2014-07-23 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-23 09:37 - 2014-07-23 09:36 - 00004652 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-23 09:37 - 2013-12-21 11:38 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-23 09:34 - 2014-07-23 09:34 - 00918952 _____ (Oracle Corporation) C:\Users\Sven\Downloads\chromeinstall-7u65.exe
2014-07-22 13:15 - 2014-07-22 13:15 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-22 13:15 - 2014-07-22 13:14 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu (1).exe
2014-07-22 10:37 - 2014-07-22 10:37 - 00854390 _____ () C:\Users\Sven\Desktop\SecurityCheck.exe
2014-07-22 10:33 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-21 15:17 - 2014-01-07 02:06 - 00000000 ____D () C:\Users\Sven\Documents\Visual Studio 2012
2014-07-20 21:20 - 2014-07-20 21:19 - 02347384 _____ (ESET) C:\Users\Sven\Downloads\esetsmartinstaller_deu.exe
2014-07-19 19:28 - 2012-06-24 20:13 - 00742794 _____ () C:\Windows\system32\perfh010.dat
2014-07-19 19:28 - 2012-06-24 20:13 - 00152352 _____ () C:\Windows\system32\perfc010.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00748104 _____ () C:\Windows\system32\perfh00C.dat
2014-07-19 19:28 - 2012-06-24 20:06 - 00154994 _____ () C:\Windows\system32\perfc00C.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00710502 _____ () C:\Windows\system32\perfh007.dat
2014-07-19 19:28 - 2012-06-24 19:58 - 00154832 _____ () C:\Windows\system32\perfc007.dat
2014-07-19 19:28 - 2009-07-14 07:13 - 03450454 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 21:13 - 2014-07-11 21:13 - 00000000 ____D () C:\Users\Mirjam Zanetti\AppData\Roaming\Avira
2014-07-11 14:27 - 2009-07-14 06:45 - 00435760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 14:26 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-11 14:20 - 2014-05-25 14:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 14:20 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 14:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 13:30 - 2014-07-11 13:30 - 00002831 _____ () C:\Users\Sven\Desktop\JRT.txt
2014-07-11 13:22 - 2014-01-05 15:48 - 00000000 ____D () C:\Windows\ERUNT
2014-07-11 13:16 - 2014-07-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Sven\Desktop\JRT.exe
2014-07-11 13:15 - 2014-07-11 13:15 - 00040111 _____ () C:\Users\Sven\Desktop\AdwCleaner[S1].txt
2014-07-11 13:12 - 2014-07-11 13:12 - 00040111 _____ () C:\Users\Sven\Downloads\AdwCleaner[S1].txt
2014-07-11 12:58 - 2014-07-11 12:58 - 01348263 _____ () C:\Users\Sven\Desktop\adwcleaner_3.215.exe
2014-07-11 12:56 - 2014-07-11 12:56 - 00001149 _____ () C:\Users\Sven\Desktop\mwb.txt
2014-07-11 03:02 - 2014-07-23 09:37 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-11 02:56 - 2014-07-23 09:37 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-11 02:56 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-11 02:55 - 2014-07-23 09:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-10 21:29 - 2013-10-08 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-07-10 17:54 - 2014-07-10 17:54 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-10 16:48 - 2014-07-10 15:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-10 16:48 - 2014-07-10 15:30 - 00000000 ____D () C:\ProgramData\Avira
2014-07-10 15:31 - 2014-07-10 15:31 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-10 15:30 - 2014-07-10 15:30 - 04621032 _____ (Avira Operations GmbH & Co. KG) C:\Users\Sven\Downloads\avira_de_av___ws2.exe
2014-07-10 15:30 - 2013-02-18 22:07 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-10 14:52 - 2014-07-10 14:52 - 00048619 _____ () C:\ComboFix.txt
2014-07-10 14:52 - 2014-07-09 14:10 - 00000000 ____D () C:\Qoobox
2014-07-10 14:52 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-10 14:48 - 2014-07-09 14:09 - 00000000 ____D () C:\Windows\erdnt
2014-07-10 14:47 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-07-10 14:40 - 2014-01-24 17:54 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\convert
2014-07-10 14:40 - 2013-12-02 21:20 - 00000000 ____D () C:\Program Files (x86)\PSupport
2014-07-10 14:18 - 2013-12-19 21:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 14:10 - 2012-11-07 14:34 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 14:08 - 2013-01-24 20:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-10 13:55 - 2014-07-09 14:08 - 05217324 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2014-07-09 21:57 - 2014-07-09 21:57 - 00001429 _____ () C:\Users\Mirjam Zanetti\Desktop\Internet Explorer.lnk
2014-07-09 19:15 - 2014-03-02 17:33 - 00000000 ____D () C:\Users\Sven\AppData\Local\Paint.NET
2014-07-09 13:23 - 2014-07-09 13:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Sven\Downloads\revosetup95 (1).exe
2014-07-09 13:23 - 2014-01-02 14:48 - 00001272 _____ () C:\Users\Sven\Desktop\Revo Uninstaller.lnk
2014-07-08 11:07 - 2014-07-08 11:06 - 00000000 ____D () C:\Users\Sven\Documents\Raiderz
2014-07-08 10:31 - 2014-07-08 10:31 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-08 06:40 - 2013-09-19 19:37 - 00000000 ____D () C:\ArcTemp
2014-07-08 06:36 - 2014-07-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Perfect World Entertainment
2014-07-07 22:05 - 2013-01-09 15:28 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Skype
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MonoGame
2014-07-07 20:29 - 2014-07-07 20:29 - 00000000 ____D () C:\Program Files (x86)\MonoGame
2014-07-07 20:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-07 20:28 - 2014-07-07 20:25 - 10392897 _____ (MonoGame) C:\Users\Sven\Downloads\MonoGameInstaller-3.2.exe
2014-07-07 19:28 - 2014-07-07 19:28 - 02084352 _____ (Farbar) C:\Users\Sven\Downloads\FRST64 (1).exe
2014-07-07 14:51 - 2014-07-07 14:45 - 00000000 ____D () C:\Users\Sven\AppData\Roaming\Arc
2014-07-07 14:45 - 2014-07-07 14:45 - 00001846 _____ () C:\Users\Public\Desktop\Arc.lnk
2014-07-07 14:45 - 2014-07-07 14:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2014-07-07 14:45 - 2012-03-23 01:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-07 14:44 - 2014-07-07 14:43 - 09686176 _____ (Perfect World Entertainment) C:\Users\Sven\Downloads\ArcInstall_v20140625a.exe
2014-07-02 13:06 - 2014-07-10 16:48 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-02 13:06 - 2014-07-10 16:48 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-01 15:46 - 2014-07-01 15:46 - 00000748 _____ () C:\Users\Tim\Downloads\Download
2014-06-30 18:34 - 2014-06-30 18:34 - 00000628 _____ () C:\Users\Sven\Downloads\Download
2014-06-30 04:09 - 2014-07-10 11:28 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-10 11:28 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Mirjam Zanetti\AppData\Local\temp\avgnt.exe
C:\Users\Mirjam Zanetti\AppData\Local\temp\Quarantine.exe
C:\Users\Sven\AppData\Local\temp\avgnt.exe
C:\Users\Sven\AppData\Local\temp\Quarantine.exe
C:\Users\Tim\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-03-25 09:03

==================== End Of Log ============================

--- --- ---

schrauber · 30.07.2014, 12:34

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Terrenay · 31.07.2014, 15:13

Hui,
vielen, vielen Dank für die Hilfe! Läuft alles wieder viel schneller und ich kann endlich wieder beruhigt ins Internet :P
Die Programme, die du vorschlägst, lade ich gerade herunter.

Respect übrigens an dich, dass du es schaffst, so vielen Leuten gleichzeitig zu helfen! Die (Computer-)Menschheit wäre aufgeschmissen ohne euch

Auf Wiedersehen! (Naja, hoffentlich nicht, aber man weiss ja nie ^^)

schrauber · 01.08.2014, 11:44

Gern Geschehen

01.08.2014, 11:44	#34
schrauber /// the machine /// TB-Ausbilder	(save , on) Links im Internet & Chrome funktioniert nicht richtig Gern Geschehen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

(save , on) Links im Internet & Chrome funktioniert nicht richtig

Log-Analyse und Auswertung: (save , on) Links im Internet & Chrome funktioniert nicht richtig