Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Malwarebytes Anti Malware startet nicht

Malwarebytes Anti Malware startet nicht


Plagegeister aller Art und deren Bekämpfung: Malwarebytes Anti Malware startet nicht

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 3 1 2 3
Alt 23.08.2014, 11:18   #16
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Java lässt sich nicht updaten.
Folgende Fehlermeldung:
Miniaturansicht angehängter Grafiken
Malwarebytes Anti Malware startet nicht-java.jpg  

Alt 23.08.2014, 11:47   #17
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hier der Fixlog.txt

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:22-08-2014
Ran by Guten Tag at 2014-08-23 12:45:10 Run:1
Running from C:\Users\Guten Tag\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\Program Files\A7F8482B-1D99-4EC9-B887-8B130AB7E131
C:\ProgramData\VistaCodecs
*****************

C:\Program Files\A7F8482B-1D99-4EC9-B887-8B130AB7E131 => Moved successfully.
C:\ProgramData\VistaCodecs => Moved successfully.

==== End of Fixlog ====
__________________
Alt 24.08.2014, 06:36   #18
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


poste mal ein frisches FRST log.
__________________
__________________
Alt 24.08.2014, 13:25   #19
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2014 01
Ran by Guten Tag (administrator) on STEFAN on 24-08-2014 14:19:51
Running from C:\Users\Guten Tag\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(iSkySoft) C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2000896 2014-04-04] (iSkySoft)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall LastPass RunOnce.lnk
ShortcutTarget: Uninstall LastPass RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: No Name -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 -  No File
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\Profiles\t50h82s8.default
FF Homepage: hxxp://www.google.com
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.4.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Guten Tag\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2012-10-17]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-04-14]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-04-14]
FF HKLM\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com
FF HKCU\...\Thunderbird\Extensions: [{0E810812-F4BB-4309-942A-755587587A5E}] - C:\Program Files\BullGuard Ltd\BullGuard\antispam\tbspamfilter
FF HKCU\...\Thunderbird\Extensions: [{380AE6CB-09B9-4373-B360-D01C2462A6E7}] - C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin

Chrome: 
=======
CHR HomePage: hxxp://google/
CHR StartupUrls: "https://www.google.de/"
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-16]
CHR Extension: (Google Drive) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-16]
CHR Extension: (YouTube) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-16]
CHR Extension: (Google-Suche) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-16]
CHR Extension: (Avira SafeSearch) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2014-08-17]
CHR Extension: (DivX HiQ) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2013-03-16]
CHR Extension: (Google Wallet) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-16]
CHR Extension: (Google Mail) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-16]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
S3 avmident; C:\Program Files\FRITZ!Box-Kindersicherung\avmident.exe [76288 2011-09-27] (AVM Berlin) [File not signed]
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-04-29] (CyberGhost S.R.L)
S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S3 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
S4 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [244904 2008-08-20] () [File not signed]
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware) [File not signed]
S4 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [File not signed]
S2 AllDaySavingsService; C:\Program Files\A7F8482B-1D99-4EC9-B887-8B130AB7E131\etmajyzoqm.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121464 2011-08-19] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-01-25] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [File not signed]
S3 CrystalSysInfo; C:\Program Files\MediaCoder\SysInfo.sys [15152 2007-09-25] ()
R3 DCamUSBGene; C:\Windows\System32\DRIVERS\usbgene.sys [175360 2008-10-02] ()
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 Ltn_stk7070P; C:\Windows\System32\DRIVERS\Ltn_stk7070P.sys [466048 2007-06-14] (LITEON)
S3 Ltn_stkrc; C:\Windows\System32\DRIVERS\Ltn_stkrc.sys [13440 2007-06-13] (LITEON)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [75480 2014-08-21] (Malwarebytes Corporation)
R2 MDC8021X; C:\Windows\System32\DRIVERS\mdc8021x.sys [15781 2009-01-19] (Meetinghouse Data Communications) [File not signed]
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-07-31] (NetFilterSDK.com) [File not signed]
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-12-09] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-17] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2012-03-26] (AnchorFree Inc)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\HomeCinema\PlayMovie\000.fcl [61424 2008-10-21] (Cyberlink Corp.)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files\CyberLink\PowerDVD8\000.fcl [87536 2009-08-28] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\GUTENT~1\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 14:19 - 2014-08-24 14:19 - 00018384 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-24 14:06 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-24 14:06 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-24 14:06 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-24 14:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-24 14:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 13:19 - 2014-08-23 13:20 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 12:45 - 2014-08-24 14:19 - 00000000 ____D () C:\Users\Guten Tag\Desktop\FRST-OlderVersion
2014-08-23 12:10 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-08-23 12:10 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-23 12:00 - 2014-08-23 12:00 - 00001056 _____ () C:\Windows\PFRO.log
2014-08-23 02:42 - 2014-08-23 02:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:27 - 2014-08-23 02:35 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:01 - 2014-08-23 02:03 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Downloads\adobe_creative_suite_6cleaner_tool.zip
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 00:55 - 2014-08-23 00:56 - 141015434 _____ () C:\Users\Guten Tag\Downloads\AdbeRdr11000_mui_Std.zip
2014-08-23 00:44 - 2014-08-23 00:44 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(2).exe
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:39 - 2014-08-23 00:40 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-23 00:00 - 2014-08-23 00:00 - 77426072 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Desktop\AdbeRdr11008_de_DE.exe
2014-08-22 23:57 - 2014-08-22 23:57 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih (1).exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:52 - 2014-08-23 01:04 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Adobe
2014-08-22 23:30 - 2014-08-24 13:58 - 01674162 _____ () C:\Windows\setupact.log
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:53 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-22 22:53 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-22 22:53 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-22 22:52 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-22 22:52 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-22 22:52 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-22 22:52 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-22 22:52 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-22 22:52 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-08-22 22:52 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-22 22:52 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-22 22:52 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-22 22:52 - 2013-10-01 22:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2014-08-22 22:47 - 2013-08-30 01:08 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-22 22:47 - 2013-08-30 01:08 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-22 22:46 - 2013-09-05 02:39 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 22:42 - 2014-08-22 22:48 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:39 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-08-22 22:39 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:31 - 2014-08-22 21:49 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-24 14:19 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:47 - 2014-08-22 11:48 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (6).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (5).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (4).zip
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:13 - 2014-08-21 18:14 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:59 - 2014-08-21 22:28 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-20 13:59 - 2014-08-21 22:28 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-20 13:59 - 2014-08-20 13:59 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-20 13:59 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:31 - 2014-08-20 13:32 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (3).zip
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (2).zip
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:53 - 2014-08-23 12:34 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-19 23:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-19 23:47 - 2014-08-19 23:51 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:38 - 2014-08-19 23:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Downloads\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-18 23:44 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-18 23:44 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-18 23:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-18 23:42 - 2014-08-19 00:11 - 00000000 ____D () C:\Qoobox
2014-08-18 23:42 - 2014-08-19 00:09 - 00000000 ____D () C:\Windows\erdnt
2014-08-18 10:57 - 2014-08-22 16:51 - 00000000 ____D () C:\Users\Guten Tag\Desktop\KRETA 2014
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:38 - 2014-08-24 14:20 - 00000000 ____D () C:\FRST
2014-08-17 20:38 - 2014-08-17 20:40 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 16:57 - 2014-08-17 22:55 - 00000000 ____D () C:\Program Files\005
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:07 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-17 15:07 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-17 14:59 - 2014-08-19 17:49 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-17 14:59 - 2014-08-19 17:48 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-17 14:44 - 2014-08-17 17:13 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-17 14:20 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-17 14:20 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-17 14:20 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-17 14:20 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-17 14:20 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-17 14:20 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-17 14:20 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-17 14:20 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-17 14:20 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-17 14:20 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-17 14:20 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-17 14:20 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-17 14:20 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-17 14:20 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-17 14:20 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-17 14:20 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-17 14:20 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-17 14:20 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-17 14:20 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-17 14:20 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-17 14:20 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-17 14:19 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-17 14:19 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-17 14:19 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-17 14:19 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-17 14:19 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-17 14:19 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-17 14:19 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-17 14:19 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-17 14:19 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-17 14:19 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-17 14:19 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-17 14:19 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-17 14:19 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-17 14:19 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-17 14:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-17 14:19 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-17 14:19 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-17 14:19 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-17 14:19 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-01 20:39 - 2014-08-22 16:53 - 00000000 ____D () C:\Users\Guten Tag\Desktop\DCIM
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 14:21 - 2014-08-24 14:19 - 00018384 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-24 14:20 - 2014-08-17 20:38 - 00000000 ____D () C:\FRST
2014-08-24 14:19 - 2014-08-23 12:45 - 00000000 ____D () C:\Users\Guten Tag\Desktop\FRST-OlderVersion
2014-08-24 14:19 - 2014-08-22 20:45 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-24 14:18 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-24 14:18 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-24 14:07 - 2011-08-28 19:26 - 01246666 _____ () C:\Windows\WindowsUpdate.log
2014-08-24 14:07 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-24 13:58 - 2014-08-22 23:30 - 01674162 _____ () C:\Windows\setupact.log
2014-08-24 13:58 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-24 13:58 - 2008-12-09 09:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-23 18:37 - 2012-11-27 13:17 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001UA.job
2014-08-23 18:13 - 2010-11-30 16:38 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DVDVideoSoft
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 15:36 - 2012-03-13 15:26 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\CrashDumps
2014-08-23 13:20 - 2014-08-23 13:19 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 13:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-23 12:34 - 2014-08-19 23:53 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-23 12:00 - 2014-08-23 12:00 - 00001056 _____ () C:\Windows\PFRO.log
2014-08-23 02:42 - 2014-08-23 02:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 02:41 - 2008-12-09 14:25 - 00000000 ____D () C:\Program Files\Java
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:35 - 2014-08-23 02:27 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:16 - 2011-04-14 16:51 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 02:03 - 2014-08-23 02:01 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:03 - 2011-04-04 20:29 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-08-23 02:01 - 2011-04-14 15:49 - 00000000 ____D () C:\Users\Guten Tag
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Downloads\adobe_creative_suite_6cleaner_tool.zip
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 01:04 - 2014-08-22 23:52 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Adobe
2014-08-23 00:56 - 2014-08-23 00:55 - 141015434 _____ () C:\Users\Guten Tag\Downloads\AdbeRdr11000_mui_Std.zip
2014-08-23 00:46 - 2013-07-22 20:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-23 00:44 - 2014-08-23 00:44 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(2).exe
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:40 - 2014-08-23 00:39 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:37 - 2012-11-27 13:17 - 00001084 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001Core.job
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-23 00:00 - 2014-08-23 00:00 - 77426072 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Desktop\AdbeRdr11008_de_DE.exe
2014-08-22 23:57 - 2014-08-22 23:57 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih (1).exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:32 - 2014-03-01 18:46 - 00027648 ___SH () C:\Users\Guten Tag\Thumbs.db
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:57 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:54 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2014-08-22 22:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:51 - 2011-04-14 18:39 - 00272653 _____ () C:\ProgramData\nvModes.001
2014-08-22 21:51 - 2011-04-14 17:11 - 00272629 _____ () C:\ProgramData\nvModes.dat
2014-08-22 21:49 - 2014-08-22 21:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 16:53 - 2014-08-01 20:39 - 00000000 ____D () C:\Users\Guten Tag\Desktop\DCIM
2014-08-22 16:53 - 2014-05-16 22:47 - 00000000 ____D () C:\Users\Guten Tag\Desktop\Zaunbau 2014
2014-08-22 16:51 - 2014-08-18 10:57 - 00000000 ____D () C:\Users\Guten Tag\Desktop\KRETA 2014
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:48 - 2014-08-22 11:47 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 11:41 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (6).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (5).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (4).zip
2014-08-21 22:28 - 2014-08-20 13:59 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-21 22:28 - 2014-08-20 13:59 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:14 - 2014-08-21 18:13 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:59 - 2014-08-20 13:59 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:32 - 2014-08-20 13:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (3).zip
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (2).zip
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:51 - 2014-08-19 23:47 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:51 - 2009-01-23 11:58 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:39 - 2014-08-19 23:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Downloads\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 17:49 - 2014-08-17 14:59 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-19 17:48 - 2014-08-17 14:59 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\Program Files\Avira
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-19 00:11 - 2014-08-18 23:42 - 00000000 ____D () C:\Qoobox
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-08-19 00:09 - 2014-08-18 23:42 - 00000000 ____D () C:\Windows\erdnt
2014-08-19 00:04 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2014-08-18 19:17 - 2013-09-19 19:22 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\Nikon
2014-08-18 19:17 - 2013-09-19 19:20 - 00000020 ____H () C:\ProgramData\PKP_DLev.DAT
2014-08-17 22:55 - 2014-08-17 16:57 - 00000000 ____D () C:\Program Files\005
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:40 - 2014-08-17 20:38 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:13 - 2014-08-17 14:44 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 17:12 - 2011-04-14 16:57 - 00141448 _____ () C:\Users\Guten Tag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-17 17:08 - 2009-07-14 06:33 - 00470688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 17:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Resources
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 16:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:28 - 2011-04-14 16:53 - 00000000 ___RD () C:\Users\Guten Tag\Virtual Machines
2014-08-17 15:20 - 2013-08-15 00:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-17 15:20 - 2008-12-09 08:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-17 15:10 - 2011-08-02 06:23 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-17 14:59 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Avira
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-01 01:16 - 2014-08-17 14:20 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-07-29 20:02 - 2013-05-23 20:20 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-25 15:51 - 2014-08-17 14:19 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-17 14:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-17 14:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:47 - 2008-12-09 14:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 14:34 - 2014-08-17 14:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:34 - 2014-08-17 14:19 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:33 - 2014-08-17 14:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-17 14:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-17 14:19 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-17 14:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-17 14:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-17 14:19 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-17 14:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-17 14:20 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-17 14:19 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-17 14:19 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-17 14:20 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-17 14:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-17 14:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-17 14:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-17 14:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-17 14:19 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-17 14:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-17 14:20 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-17 14:20 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-17 14:19 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-17 14:19 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-17 14:19 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-17 14:19 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-17 14:20 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

Some content of TEMP:
====================
C:\Users\Guten Tag\AppData\Local\temp\avgnt.exe
C:\Users\Guten Tag\AppData\Local\temp\MouseKeyboardCenterx86_1031.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:41

==================== End Of Log ============================
--- --- ---
Alt 24.08.2014, 15:21   #20
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Adobe und Java mit Revo deinstalliern.

  • Lade Dir bitte Windows Repair - All in one von tweaking.com hier herunter und installiere es.
  • Deaktiviere bitte (wenn möglich) Dein Antivirusprogramm.
  • Bedenke, dass die einzelnen Reparaturen einige Zeit benötigen. Starte keine anderen Anwendungen in dieser Zeit.
  • Starte das Programm und führe die Punkte 1-5 durch. (Siehe Bildanleitung)
  • Achte darauf, dass bei Dir die Häkchen so gesetzt sind wie unter Punkt 4.
  • Setze auch ein Häkchen bei "Restart/Shutdown System" und klicke "Restart System" an bevor Du Punkt 5 durchführst.



Dann beides in der aktuellen Version installieren.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 24.08.2014, 21:06   #21
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hallo Schrauber,

hab Java und Adobe Reader mit Revo deinstalliert ,hab Windows Repair-All in one durchlaufen lassen.

Kann weder Adobe noch Java wieder installieren.

Fehlermeldung siehe Anhang:
Miniaturansicht angehängter Grafiken
Malwarebytes Anti Malware startet nicht-adobe.jpg   Malwarebytes Anti Malware startet nicht-java.jpg  

Alt 24.08.2014, 21:09   #22
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hier noch ein frischer FRST log :


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2014 01
Ran by Guten Tag (administrator) on STEFAN on 24-08-2014 21:58:50
Running from C:\Users\Guten Tag\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(iSkySoft) C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2000896 2014-04-04] (iSkySoft)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall LastPass RunOnce.lnk
ShortcutTarget: Uninstall LastPass RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: No Name -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} ->  No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 -  No File
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\Profiles\t50h82s8.default
FF Homepage: hxxp://www.google.com
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.4.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Guten Tag\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2012-10-17]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-04-14]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-04-14]
FF HKLM\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com
FF HKCU\...\Thunderbird\Extensions: [{0E810812-F4BB-4309-942A-755587587A5E}] - C:\Program Files\BullGuard Ltd\BullGuard\antispam\tbspamfilter
FF HKCU\...\Thunderbird\Extensions: [{380AE6CB-09B9-4373-B360-D01C2462A6E7}] - C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin

Chrome: 
=======
CHR HomePage: hxxp://google/
CHR StartupUrls: "https://www.google.de/"
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-16]
CHR Extension: (Google Drive) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-16]
CHR Extension: (YouTube) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-16]
CHR Extension: (Google-Suche) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-16]
CHR Extension: (Avira SafeSearch) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2014-08-17]
CHR Extension: (DivX HiQ) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2013-03-16]
CHR Extension: (Google Wallet) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-16]
CHR Extension: (Google Mail) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-16]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
S3 avmident; C:\Program Files\FRITZ!Box-Kindersicherung\avmident.exe [76288 2011-09-27] (AVM Berlin) [File not signed]
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-04-29] (CyberGhost S.R.L)
S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S3 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
S4 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [244904 2008-08-20] () [File not signed]
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware) [File not signed]
S4 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [File not signed]
S2 AllDaySavingsService; C:\Program Files\A7F8482B-1D99-4EC9-B887-8B130AB7E131\etmajyzoqm.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121464 2011-08-19] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-01-25] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [File not signed]
S3 CrystalSysInfo; C:\Program Files\MediaCoder\SysInfo.sys [15152 2007-09-25] ()
R3 DCamUSBGene; C:\Windows\System32\DRIVERS\usbgene.sys [175360 2008-10-02] ()
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 Ltn_stk7070P; C:\Windows\System32\DRIVERS\Ltn_stk7070P.sys [466048 2007-06-14] (LITEON)
S3 Ltn_stkrc; C:\Windows\System32\DRIVERS\Ltn_stkrc.sys [13440 2007-06-13] (LITEON)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [75480 2014-08-21] (Malwarebytes Corporation)
R2 MDC8021X; C:\Windows\System32\DRIVERS\mdc8021x.sys [15781 2009-01-19] (Meetinghouse Data Communications) [File not signed]
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-07-31] (NetFilterSDK.com) [File not signed]
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-12-09] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-17] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2012-03-26] (AnchorFree Inc)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\HomeCinema\PlayMovie\000.fcl [61424 2008-10-21] (Cyberlink Corp.)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files\CyberLink\PowerDVD8\000.fcl [87536 2009-08-28] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\GUTENT~1\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 21:58 - 2014-08-24 21:58 - 00017408 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-24 20:59 - 2014-08-24 21:00 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Desktop\chromeinstall-7u67.exe
2014-08-24 18:31 - 2014-08-24 18:31 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-STEFAN-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-08-24 18:31 - 2014-08-24 18:31 - 00000000 ____D () C:\RegBackup
2014-08-24 18:12 - 2014-08-24 18:12 - 00003288 ____N () C:\bootsqm.dat
2014-08-24 18:03 - 2014-08-24 18:03 - 00002125 _____ () C:\Users\Guten Tag\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-08-24 18:03 - 2014-08-24 18:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-08-24 18:02 - 2014-08-24 18:02 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-08-24 17:58 - 2014-08-24 17:45 - 09526576 _____ () C:\Users\Guten Tag\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:39 - 2014-08-24 17:45 - 09526576 _____ () C:\Users\Guten Tag\Downloads\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:02 - 2014-08-24 17:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Guten Tag\Downloads\revosetup95.exe
2014-08-24 16:46 - 2014-08-24 16:46 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{EEC90E40-B83B-4AFE-94C7-65059CF5D2F0}
2014-08-24 16:42 - 2014-08-24 16:42 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{39B60302-E550-471B-A450-85CC3435216D}
2014-08-24 14:24 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-24 14:06 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-24 14:06 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-24 14:06 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-24 14:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-24 14:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 13:19 - 2014-08-23 13:20 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 12:45 - 2014-08-24 14:19 - 00000000 ____D () C:\Users\Guten Tag\Desktop\FRST-OlderVersion
2014-08-23 12:10 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-08-23 12:10 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-23 12:00 - 2014-08-24 20:28 - 00003214 _____ () C:\Windows\PFRO.log
2014-08-23 02:42 - 2014-08-24 21:58 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:27 - 2014-08-23 02:35 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:01 - 2014-08-23 02:03 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Downloads\adobe_creative_suite_6cleaner_tool.zip
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 00:55 - 2014-08-23 00:56 - 141015434 _____ () C:\Users\Guten Tag\Downloads\AdbeRdr11000_mui_Std.zip
2014-08-23 00:44 - 2014-08-23 00:44 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(2).exe
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:39 - 2014-08-23 00:40 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-23 00:00 - 2014-08-23 00:00 - 77426072 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Desktop\AdbeRdr11008_de_DE.exe
2014-08-22 23:57 - 2014-08-22 23:57 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih (1).exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:52 - 2014-08-23 01:04 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Adobe
2014-08-22 23:30 - 2014-08-24 20:28 - 03348324 _____ () C:\Windows\setupact.log
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:53 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-22 22:53 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-22 22:53 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-22 22:52 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-22 22:52 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-22 22:52 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-22 22:52 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-22 22:52 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-22 22:52 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-08-22 22:52 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-22 22:52 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-22 22:52 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2014-08-22 22:47 - 2013-08-30 01:08 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-22 22:47 - 2013-08-30 01:08 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-22 22:46 - 2013-09-05 02:39 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 22:42 - 2014-08-22 22:48 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:39 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-08-22 22:39 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:31 - 2014-08-22 21:49 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-24 14:19 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:47 - 2014-08-22 11:48 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (6).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (5).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (4).zip
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:13 - 2014-08-21 18:14 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:59 - 2014-08-21 22:28 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-20 13:59 - 2014-08-21 22:28 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-20 13:59 - 2014-08-20 13:59 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-20 13:59 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:31 - 2014-08-20 13:32 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (3).zip
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (2).zip
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:53 - 2014-08-23 12:34 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-19 23:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-19 23:47 - 2014-08-19 23:51 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:38 - 2014-08-19 23:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Downloads\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-18 23:44 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-18 23:44 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-18 23:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-18 23:42 - 2014-08-19 00:11 - 00000000 ____D () C:\Qoobox
2014-08-18 23:42 - 2014-08-19 00:09 - 00000000 ____D () C:\Windows\erdnt
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:38 - 2014-08-24 21:59 - 00000000 ____D () C:\FRST
2014-08-17 20:38 - 2014-08-17 20:40 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 16:57 - 2014-08-17 22:55 - 00000000 ____D () C:\Program Files\005
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:07 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-17 15:07 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-17 14:59 - 2014-08-19 17:49 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-17 14:44 - 2014-08-17 17:13 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-17 14:20 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-17 14:20 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-17 14:20 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-17 14:20 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-17 14:20 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-17 14:20 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-17 14:20 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-17 14:20 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-17 14:20 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-17 14:20 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-17 14:20 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-17 14:20 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-17 14:20 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-17 14:20 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-17 14:20 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-17 14:20 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-17 14:20 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-17 14:20 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-17 14:20 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-17 14:20 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-17 14:20 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-17 14:19 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-17 14:19 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-17 14:19 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-17 14:19 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-17 14:19 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-17 14:19 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-17 14:19 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-17 14:19 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-17 14:19 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-17 14:19 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-17 14:19 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-17 14:19 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-17 14:19 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-17 14:19 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-17 14:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-17 14:19 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-17 14:19 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-17 14:19 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-17 14:19 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-24 22:00 - 2014-08-24 21:58 - 00017408 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-24 21:59 - 2014-08-17 20:38 - 00000000 ____D () C:\FRST
2014-08-24 21:58 - 2014-08-23 02:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-24 21:37 - 2012-11-27 13:17 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001UA.job
2014-08-24 21:00 - 2014-08-24 20:59 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Desktop\chromeinstall-7u67.exe
2014-08-24 21:00 - 2014-03-01 18:46 - 00027648 ___SH () C:\Users\Guten Tag\Thumbs.db
2014-08-24 20:41 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-24 20:41 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-24 20:34 - 2011-04-14 16:51 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-24 20:30 - 2011-04-14 16:57 - 00141448 _____ () C:\Users\Guten Tag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-24 20:28 - 2014-08-23 12:00 - 00003214 _____ () C:\Windows\PFRO.log
2014-08-24 20:28 - 2014-08-22 23:30 - 03348324 _____ () C:\Windows\setupact.log
2014-08-24 20:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-24 20:28 - 2009-07-14 06:33 - 00470688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-24 20:28 - 2008-12-09 09:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-24 20:18 - 2011-08-28 19:26 - 01333317 _____ () C:\Windows\WindowsUpdate.log
2014-08-24 19:34 - 2008-12-09 14:25 - 00000000 ____D () C:\Program Files\Java
2014-08-24 19:05 - 2006-11-02 12:23 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_295
2014-08-24 18:31 - 2014-08-24 18:31 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-STEFAN-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-08-24 18:31 - 2014-08-24 18:31 - 00000000 ____D () C:\RegBackup
2014-08-24 18:12 - 2014-08-24 18:12 - 00003288 ____N () C:\bootsqm.dat
2014-08-24 18:03 - 2014-08-24 18:03 - 00002125 _____ () C:\Users\Guten Tag\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-08-24 18:03 - 2014-08-24 18:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-08-24 18:02 - 2014-08-24 18:02 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-08-24 17:45 - 2014-08-24 17:58 - 09526576 _____ () C:\Users\Guten Tag\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:45 - 2014-08-24 17:39 - 09526576 _____ () C:\Users\Guten Tag\Downloads\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:11 - 2008-12-09 12:49 - 00000000 ____D () C:\Program Files\Adobe
2014-08-24 17:03 - 2014-08-24 17:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Guten Tag\Downloads\revosetup95.exe
2014-08-24 17:03 - 2011-04-15 07:09 - 00001230 _____ () C:\Users\Guten Tag\Desktop\Revo Uninstaller.lnk
2014-08-24 17:03 - 2011-04-15 07:09 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-08-24 16:46 - 2014-08-24 16:46 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{EEC90E40-B83B-4AFE-94C7-65059CF5D2F0}
2014-08-24 16:42 - 2014-08-24 16:42 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{39B60302-E550-471B-A450-85CC3435216D}
2014-08-24 14:59 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-24 14:19 - 2014-08-23 12:45 - 00000000 ____D () C:\Users\Guten Tag\Desktop\FRST-OlderVersion
2014-08-24 14:19 - 2014-08-22 20:45 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-23 18:13 - 2010-11-30 16:38 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DVDVideoSoft
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 15:36 - 2012-03-13 15:26 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\CrashDumps
2014-08-23 13:20 - 2014-08-23 13:19 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 13:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-23 12:34 - 2014-08-19 23:53 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:35 - 2014-08-23 02:27 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:03 - 2014-08-23 02:01 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:03 - 2011-04-04 20:29 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-08-23 02:01 - 2011-04-14 15:49 - 00000000 ____D () C:\Users\Guten Tag
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Downloads\adobe_creative_suite_6cleaner_tool.zip
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 01:04 - 2014-08-22 23:52 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Adobe
2014-08-23 00:56 - 2014-08-23 00:55 - 141015434 _____ () C:\Users\Guten Tag\Downloads\AdbeRdr11000_mui_Std.zip
2014-08-23 00:46 - 2013-07-22 20:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-23 00:44 - 2014-08-23 00:44 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(2).exe
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:40 - 2014-08-23 00:39 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:37 - 2012-11-27 13:17 - 00001084 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001Core.job
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-23 00:00 - 2014-08-23 00:00 - 77426072 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Desktop\AdbeRdr11008_de_DE.exe
2014-08-22 23:57 - 2014-08-22 23:57 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih (1).exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:57 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:54 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2014-08-22 22:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:51 - 2011-04-14 18:39 - 00272653 _____ () C:\ProgramData\nvModes.001
2014-08-22 21:51 - 2011-04-14 17:11 - 00272629 _____ () C:\ProgramData\nvModes.dat
2014-08-22 21:49 - 2014-08-22 21:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:48 - 2014-08-22 11:47 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 11:41 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (6).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (5).zip
2014-08-21 23:21 - 2014-08-21 23:21 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (4).zip
2014-08-21 22:28 - 2014-08-20 13:59 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-21 22:28 - 2014-08-20 13:59 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:14 - 2014-08-21 18:13 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:59 - 2014-08-20 13:59 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 13:59 - 2014-08-20 13:59 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:32 - 2014-08-20 13:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (3).zip
2014-08-20 00:32 - 2014-08-20 00:32 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (2).zip
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:51 - 2014-08-19 23:47 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:51 - 2009-01-23 11:58 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:39 - 2014-08-19 23:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Downloads\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 17:49 - 2014-08-17 14:59 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\Program Files\Avira
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-19 00:11 - 2014-08-18 23:42 - 00000000 ____D () C:\Qoobox
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-08-19 00:09 - 2014-08-18 23:42 - 00000000 ____D () C:\Windows\erdnt
2014-08-19 00:04 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2014-08-19 00:03 - 2006-11-02 12:23 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_717
2014-08-18 19:17 - 2013-09-19 19:22 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\Nikon
2014-08-18 19:17 - 2013-09-19 19:20 - 00000020 ____H () C:\ProgramData\PKP_DLev.DAT
2014-08-17 22:55 - 2014-08-17 16:57 - 00000000 ____D () C:\Program Files\005
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:40 - 2014-08-17 20:38 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:13 - 2014-08-17 14:44 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 17:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Resources
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 16:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:28 - 2011-04-14 16:53 - 00000000 ___RD () C:\Users\Guten Tag\Virtual Machines
2014-08-17 15:20 - 2013-08-15 00:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-17 15:20 - 2008-12-09 08:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-17 15:10 - 2011-08-02 06:23 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-17 14:59 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Avira
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-05 09:20 - 2009-10-03 18:55 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-01 01:16 - 2014-08-17 14:20 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-07-29 20:02 - 2013-05-23 20:20 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-25 15:51 - 2014-08-17 14:19 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-17 14:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-17 14:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:47 - 2008-12-09 14:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 14:34 - 2014-08-17 14:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:34 - 2014-08-17 14:19 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:33 - 2014-08-17 14:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-17 14:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-17 14:19 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-17 14:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-17 14:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-17 14:19 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-17 14:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-17 14:20 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-17 14:19 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-17 14:19 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-17 14:20 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-17 14:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-17 14:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-17 14:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-17 14:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-17 14:19 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-17 14:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-17 14:20 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-17 14:20 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-17 14:19 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-17 14:19 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-17 14:19 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-17 14:19 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-17 14:20 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

Some content of TEMP:
====================
C:\Users\Guten Tag\AppData\Local\temp\avgnt.exe
C:\Users\Guten Tag\AppData\Local\temp\MouseKeyboardCenterx86_1031.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:41

==================== End Of Log ============================
--- --- ---
Alt 25.08.2014, 12:24   #23
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Scan mit SystemLook

Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
    Code:
    ATTFilter
    :regfind
Adobe
Java
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 25.08.2014, 16:18   #24
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hallo Schrauber ,

der Suchlauf hat bei mir nicht lange gedauert ,ca.3min.

hier das Ergebnis

Alt 26.08.2014, 15:38   #25
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Ccleaner installieren. Ausnahmsweise mal die Registry damit reinigen, vorher aber das von CCleaner angebotene Backup machen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 26.08.2014, 17:06   #26
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hab die Registry mit CCleaner bereinigt anschließend Neustart ,Adobe und Java lassen sich nicht installieren bei beiden folgende Fehlermeldung:

Schlüssel ist im angegebenen Status nicht gültig.

Im Anhang die gefundenen und gelöschten Einträge von CCleaner:
Miniaturansicht angehängter Grafiken
Malwarebytes Anti Malware startet nicht-unbenannt.jpg   Malwarebytes Anti Malware startet nicht-unbenannt1.jpg  

Alt 26.08.2014, 21:37   #27
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Hallo Schrauber,

hab mal ein wenig gegoogelt und folgendes gefunden:

Das Problem wird durch das Sicherheitsupdate KB 2918614 hervorgerufen, nach langem ausprobieren und Stunden von Arbeit, habe jedes einzelne Sicherheitsupdate vom 12.08.2014 deinstalliert und danach jeweils einzeln installiert taucht dieser Fehler nach Installation dieses Updates auf. Nach Deinstallation des Windows Updates KB 2918614 lässt sich jede Software wieder problemlos installieren.
Microsoft hat auch wie bei den anderen Updates die den Bluescreen verursachen mist gebaut und sollte das update erstmal überprüfen und vorerst zurückziehen. nach Recherche über Google bin ich wohl nicht der einzige User mit diesem Problem.
Betriebssystem ist bei mir Windows 7 Ultimate mit Service Pack 1 32 bit
Habe dieses Sicherheitsupdate erstmal in Windows Update ausgeblendet.
Also erstmal dieses Update unten links unter installierte Updates suchen und dann deinstallieren, danach ist ein Neustart von Windows erforderlich und voila das Problem ist verschwunden. Irgendwie scheint dadurch ein Defekt beim MSI Installer von Microsoft verursacht zu werden.

Hab das Update ebenfalls deinstalliert und konnte anschließend Java und Adobe wieder installieren.

Hab nochmal Security Check durchlaufen lassen ,hier das Log.

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.87  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
 Avira successfully updated! 
`````````Anti-malware/Other Utilities Check:````````` 
 AntiBrowserSpy     
 CCleaner     
 Java 7 Update 67  
 Adobe Reader XI  
 Google Chrome 36.0.1985.125  
 Google Chrome 36.0.1985.143  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 windows defender MpCmdRun.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
Wie gehts nun weiter??

Lg. Stefli

Konnte jetzt MBAM starten ,aber nur wenn ich rechts klick und dann auf -Suchlauf mit Malwarebytes Anti Malware durchführen- auswähle.
Wenn ich rechts klicke und "Öffne" oder "Als Administrator ausführen" wähle bricht der Suchlauf sofort ab.

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 26.08.2014
Suchlauf-Zeit: 22:20:29
Logdatei: mal.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.03.04.09
Rootkit Datenbank: v2014.02.20.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Guten Tag

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 1
Verstrichene Zeit: 1 Min, 51 Sek

Speicher: Deaktiviert
Autostart: Deaktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

Alt 27.08.2014, 16:12   #28
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Poste bitte nochmal ein frisches FRST log
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.08.2014, 17:10   #29
Stefli
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2014 01
Ran by Guten Tag (administrator) on STEFAN on 27-08-2014 18:05:22
Running from C:\Users\Guten Tag\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(iSkySoft) C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2000896 2014-04-04] (iSkySoft)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: No Name -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 -  No File
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\Profiles\t50h82s8.default
FF Homepage: hxxp://www.google.com
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Guten Tag\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Guten Tag\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Guten Tag\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2012-10-17]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-04-14]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-04-14]
FF HKLM\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com
FF HKCU\...\Thunderbird\Extensions: [{0E810812-F4BB-4309-942A-755587587A5E}] - C:\Program Files\BullGuard Ltd\BullGuard\antispam\tbspamfilter
FF HKCU\...\Thunderbird\Extensions: [{380AE6CB-09B9-4373-B360-D01C2462A6E7}] - C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin

Chrome: 
=======
CHR HomePage: hxxp://google/
CHR StartupUrls: "https://www.google.de/"
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-16]
CHR Extension: (Google Drive) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-16]
CHR Extension: (YouTube) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-16]
CHR Extension: (Google-Suche) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-16]
CHR Extension: (Avira SafeSearch) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2014-08-17]
CHR Extension: (DivX HiQ) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2013-03-16]
CHR Extension: (Google Wallet) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-03-16]
CHR Extension: (Google Mail) - C:\Users\Guten Tag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-16]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
S3 avmident; C:\Program Files\FRITZ!Box-Kindersicherung\avmident.exe [76288 2011-09-27] (AVM Berlin) [File not signed]
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-04-29] (CyberGhost S.R.L)
S3 FirebirdServerMAGIXInstance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S3 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
S4 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [244904 2008-08-20] () [File not signed]
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\RpcAgentSrv.exe [93848 2009-08-10] (SiSoftware) [File not signed]
S4 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121464 2011-08-19] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-01-25] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2007-01-26] (AVM Berlin) [File not signed]
S3 CrystalSysInfo; C:\Program Files\MediaCoder\SysInfo.sys [15152 2007-09-25] ()
R3 DCamUSBGene; C:\Windows\System32\DRIVERS\usbgene.sys [175360 2008-10-02] ()
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 Ltn_stk7070P; C:\Windows\System32\DRIVERS\Ltn_stk7070P.sys [466048 2007-06-14] (LITEON)
S3 Ltn_stkrc; C:\Windows\System32\DRIVERS\Ltn_stkrc.sys [13440 2007-06-13] (LITEON)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-08-26] (Malwarebytes Corporation)
R2 MDC8021X; C:\Windows\System32\DRIVERS\mdc8021x.sys [15781 2009-01-19] (Meetinghouse Data Communications) [File not signed]
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [31744 2014-07-31] (NetFilterSDK.com) [File not signed]
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP1x\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-12-09] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-03-17] (Avira GmbH)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2012-03-26] (AnchorFree Inc)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\HomeCinema\PlayMovie\000.fcl [61424 2008-10-21] (Cyberlink Corp.)
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; C:\Program Files\CyberLink\PowerDVD8\000.fcl [87536 2009-08-28] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\GUTENT~1\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 18:05 - 2014-08-27 18:05 - 00017522 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-26 22:24 - 2014-08-26 22:24 - 00001160 _____ () C:\Users\Guten Tag\Desktop\mal.txt
2014-08-26 22:15 - 2014-08-26 22:20 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-26 22:15 - 2014-08-26 22:15 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-26 22:15 - 2014-08-26 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-26 22:14 - 2014-08-26 22:15 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-26 22:14 - 2014-08-26 22:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-26 22:14 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-26 22:14 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-26 22:14 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-26 20:18 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-26 20:18 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-26 20:18 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-26 20:18 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-26 20:05 - 2014-08-26 20:05 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-26 20:05 - 2014-08-26 20:05 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-08-26 19:52 - 2014-08-26 19:52 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\Oracle
2014-08-26 19:50 - 2014-08-26 19:50 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-08-26 19:50 - 2014-08-26 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-26 19:08 - 2014-08-26 19:08 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Avira
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieUserList
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieSiteList
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 ____D () C:\Users\Gast\AppData\Local\iSkysoft
2014-08-26 18:24 - 2014-08-26 18:24 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{06FB7611-CF58-4585-9821-B03CFCC30065}
2014-08-26 17:45 - 2014-08-26 17:45 - 00000490 _____ () C:\Users\Guten Tag\Documents\cc_20140826_174506.reg
2014-08-26 17:44 - 2014-08-26 17:44 - 00033936 _____ () C:\Users\Guten Tag\Documents\cc_20140826_174420.reg
2014-08-25 17:16 - 2014-08-25 17:16 - 00022508 _____ () C:\Users\Guten Tag\Desktop\SystemLook.zip
2014-08-25 17:08 - 2014-08-25 17:07 - 00139264 _____ () C:\Users\Guten Tag\Desktop\SystemLook.exe
2014-08-25 17:07 - 2014-08-25 17:07 - 00139264 _____ () C:\Users\Guten Tag\Downloads\SystemLook.exe
2014-08-24 20:59 - 2014-08-24 21:00 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Desktop\chromeinstall-7u67.exe
2014-08-24 18:31 - 2014-08-24 18:31 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-STEFAN-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-08-24 18:31 - 2014-08-24 18:31 - 00000000 ____D () C:\RegBackup
2014-08-24 18:03 - 2014-08-24 18:03 - 00002125 _____ () C:\Users\Guten Tag\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-08-24 18:03 - 2014-08-24 18:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-08-24 18:02 - 2014-08-24 18:02 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-08-24 17:58 - 2014-08-24 17:45 - 09526576 _____ () C:\Users\Guten Tag\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:39 - 2014-08-24 17:45 - 09526576 _____ () C:\Users\Guten Tag\Downloads\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:02 - 2014-08-24 17:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Guten Tag\Desktop\revosetup95.exe
2014-08-24 16:46 - 2014-08-24 16:46 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{EEC90E40-B83B-4AFE-94C7-65059CF5D2F0}
2014-08-24 16:42 - 2014-08-24 16:42 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{39B60302-E550-471B-A450-85CC3435216D}
2014-08-24 14:24 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-24 14:06 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-24 14:06 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-24 14:06 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-24 14:06 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-24 14:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-24 14:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 13:19 - 2014-08-23 13:20 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 12:10 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-08-23 12:10 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-23 12:00 - 2014-08-26 22:06 - 00044728 _____ () C:\Windows\PFRO.log
2014-08-23 02:42 - 2014-08-26 19:51 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:27 - 2014-08-23 02:35 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:01 - 2014-08-23 02:03 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:39 - 2014-08-23 00:40 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:30 - 2014-08-27 18:00 - 05648876 _____ () C:\Windows\setupact.log
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:53 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-08-22 22:53 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-08-22 22:53 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-08-22 22:52 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-08-22 22:52 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-22 22:52 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-08-22 22:52 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-08-22 22:52 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-08-22 22:52 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-22 22:52 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-08-22 22:52 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-08-22 22:52 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-08-22 22:52 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2014-08-22 22:48 - 2011-04-14 16:21 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2014-08-22 22:47 - 2013-08-30 01:08 - 02555168 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-22 22:47 - 2013-08-30 01:08 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-22 22:46 - 2013-09-05 02:39 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 22:42 - 2014-08-22 22:48 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:39 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-08-22 22:39 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:31 - 2014-08-22 21:49 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-24 14:19 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:47 - 2014-08-22 11:48 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:13 - 2014-08-21 18:14 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Desktop\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:31 - 2014-08-20 13:32 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:53 - 2014-08-23 12:34 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-19 23:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-19 23:47 - 2014-08-19 23:51 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:38 - 2014-08-19 23:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Desktop\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-18 23:44 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-18 23:44 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-18 23:44 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-18 23:44 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-18 23:42 - 2014-08-19 00:11 - 00000000 ____D () C:\Qoobox
2014-08-18 23:42 - 2014-08-19 00:09 - 00000000 ____D () C:\Windows\erdnt
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:38 - 2014-08-27 18:05 - 00000000 ____D () C:\FRST
2014-08-17 20:38 - 2014-08-17 20:40 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 16:57 - 2014-08-17 22:55 - 00000000 ____D () C:\Program Files\005
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:07 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-17 15:07 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-17 15:07 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-17 14:59 - 2014-08-19 17:49 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-17 14:44 - 2014-08-17 17:13 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-17 14:20 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-17 14:20 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-17 14:20 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-17 14:20 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-17 14:20 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-17 14:20 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-17 14:20 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-17 14:20 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-17 14:20 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-17 14:20 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-17 14:20 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-17 14:20 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-17 14:20 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-17 14:20 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-17 14:20 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-17 14:20 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-17 14:20 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-17 14:20 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-17 14:20 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-17 14:20 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-17 14:20 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-17 14:19 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-17 14:19 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-17 14:19 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-17 14:19 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-17 14:19 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-17 14:19 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-17 14:19 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-17 14:19 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-17 14:19 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-17 14:19 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-17 14:19 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-17 14:19 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-17 14:19 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-17 14:19 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-17 14:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 18:06 - 2014-08-27 18:05 - 00017522 _____ () C:\Users\Guten Tag\Desktop\FRST.txt
2014-08-27 18:05 - 2014-08-17 20:38 - 00000000 ____D () C:\FRST
2014-08-27 18:00 - 2014-08-22 23:30 - 05648876 _____ () C:\Windows\setupact.log
2014-08-27 18:00 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-27 18:00 - 2008-12-09 09:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-27 17:59 - 2011-08-28 19:26 - 01675775 _____ () C:\Windows\WindowsUpdate.log
2014-08-27 17:46 - 2012-11-27 13:17 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001UA.job
2014-08-27 00:37 - 2012-11-27 13:17 - 00001084 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3458143755-1736724782-1955730750-1001Core.job
2014-08-26 23:07 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-26 22:41 - 2012-03-13 15:26 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\CrashDumps
2014-08-26 22:24 - 2014-08-26 22:24 - 00001160 _____ () C:\Users\Guten Tag\Desktop\mal.txt
2014-08-26 22:20 - 2014-08-26 22:15 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-26 22:16 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-26 22:16 - 2011-04-14 15:47 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-26 22:15 - 2014-08-26 22:15 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-26 22:15 - 2014-08-26 22:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-26 22:15 - 2014-08-26 22:14 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-26 22:14 - 2014-08-26 22:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-26 22:06 - 2014-08-23 12:00 - 00044728 _____ () C:\Windows\PFRO.log
2014-08-26 20:05 - 2014-08-26 20:05 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-26 20:05 - 2014-08-26 20:05 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-08-26 20:04 - 2011-04-04 20:29 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-08-26 20:04 - 2008-12-09 12:49 - 00000000 ____D () C:\Program Files\Adobe
2014-08-26 19:52 - 2014-08-26 19:52 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\Oracle
2014-08-26 19:51 - 2014-08-23 02:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-26 19:50 - 2014-08-26 19:50 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-08-26 19:50 - 2014-08-26 19:50 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-08-26 19:50 - 2014-08-26 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-26 19:50 - 2008-12-09 14:25 - 00000000 ____D () C:\Program Files\Java
2014-08-26 19:08 - 2014-08-26 19:08 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Avira
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieUserList
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 __SHD () C:\Users\Gast\AppData\Local\EmieSiteList
2014-08-26 19:03 - 2014-08-26 19:03 - 00000000 ____D () C:\Users\Gast\AppData\Local\iSkysoft
2014-08-26 19:03 - 2011-08-09 12:46 - 00141448 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-26 19:03 - 2011-08-09 12:46 - 00000000 ___RD () C:\Users\Gast\Virtual Machines
2014-08-26 18:24 - 2014-08-26 18:24 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{06FB7611-CF58-4585-9821-B03CFCC30065}
2014-08-26 17:45 - 2014-08-26 17:45 - 00000490 _____ () C:\Users\Guten Tag\Documents\cc_20140826_174506.reg
2014-08-26 17:44 - 2014-08-26 17:44 - 00033936 _____ () C:\Users\Guten Tag\Documents\cc_20140826_174420.reg
2014-08-25 17:16 - 2014-08-25 17:16 - 00022508 _____ () C:\Users\Guten Tag\Desktop\SystemLook.zip
2014-08-25 17:07 - 2014-08-25 17:08 - 00139264 _____ () C:\Users\Guten Tag\Desktop\SystemLook.exe
2014-08-25 17:07 - 2014-08-25 17:07 - 00139264 _____ () C:\Users\Guten Tag\Downloads\SystemLook.exe
2014-08-24 21:00 - 2014-08-24 20:59 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Desktop\chromeinstall-7u67.exe
2014-08-24 21:00 - 2014-03-01 18:46 - 00027648 ___SH () C:\Users\Guten Tag\Thumbs.db
2014-08-24 20:34 - 2011-04-14 16:51 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-24 20:30 - 2011-04-14 16:57 - 00141448 _____ () C:\Users\Guten Tag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-24 20:28 - 2009-07-14 06:33 - 00470688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-24 19:05 - 2006-11-02 12:23 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_295
2014-08-24 18:31 - 2014-08-24 18:31 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-STEFAN-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2014-08-24 18:31 - 2014-08-24 18:31 - 00000000 ____D () C:\RegBackup
2014-08-24 18:03 - 2014-08-24 18:03 - 00002125 _____ () C:\Users\Guten Tag\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-08-24 18:03 - 2014-08-24 18:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-08-24 18:02 - 2014-08-24 18:02 - 00000000 ____D () C:\Program Files\Tweaking.com
2014-08-24 17:45 - 2014-08-24 17:58 - 09526576 _____ () C:\Users\Guten Tag\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:45 - 2014-08-24 17:39 - 09526576 _____ () C:\Users\Guten Tag\Downloads\tweaking.com_windows_repair_aio_setup.exe
2014-08-24 17:03 - 2014-08-24 17:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Guten Tag\Desktop\revosetup95.exe
2014-08-24 17:03 - 2011-04-15 07:09 - 00001230 _____ () C:\Users\Guten Tag\Desktop\Revo Uninstaller.lnk
2014-08-24 17:03 - 2011-04-15 07:09 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-08-24 16:46 - 2014-08-24 16:46 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{EEC90E40-B83B-4AFE-94C7-65059CF5D2F0}
2014-08-24 16:42 - 2014-08-24 16:42 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{39B60302-E550-471B-A450-85CC3435216D}
2014-08-24 14:59 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-24 14:19 - 2014-08-22 20:45 - 01095168 _____ (Farbar) C:\Users\Guten Tag\Desktop\FRST.exe
2014-08-23 18:13 - 2010-11-30 16:38 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DVDVideoSoft
2014-08-23 16:17 - 2014-08-23 16:17 - 00000000 ____D () C:\Program Files\ESET
2014-08-23 13:20 - 2014-08-23 13:19 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AC43BD0E-7855-47D1-B943-2FB46DD1A961}
2014-08-23 12:34 - 2014-08-19 23:53 - 00000000 ____D () C:\Program Files\AllDaySavings
2014-08-23 02:40 - 2014-08-23 02:40 - 00918440 _____ (Oracle Corporation) C:\Users\Guten Tag\Downloads\jre-7u67-windows-i586-iftw.exe
2014-08-23 02:35 - 2014-08-23 02:27 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\ParetoLogic
2014-08-23 02:27 - 2014-08-23 02:27 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverCure
2014-08-23 02:26 - 2014-08-23 02:26 - 05249448 _____ (ParetoLogic Inc.) C:\Users\Guten Tag\Downloads\ParetoLogic PC Health Advisor_de.exe
2014-08-23 02:03 - 2014-08-23 02:01 - 00054770 _____ () C:\Users\Guten Tag\Adobe Creative Suite Cleaner Tool.log
2014-08-23 02:01 - 2011-04-14 15:49 - 00000000 ____D () C:\Users\Guten Tag
2014-08-23 02:00 - 2014-08-23 02:00 - 08098376 _____ () C:\Users\Guten Tag\Desktop\adobe_creative_suite_6cleaner_tool (1).zip
2014-08-23 00:46 - 2013-07-22 20:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-23 00:41 - 2014-08-23 00:41 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih(1).exe
2014-08-23 00:40 - 2014-08-23 00:39 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\Mozilla
2014-08-23 00:39 - 2014-08-23 00:39 - 00000000 ____D () C:\ProgramData\Mozilla
2014-08-23 00:38 - 2014-08-23 00:38 - 00244408 _____ () C:\Users\Guten Tag\Downloads\Firefox Setup Stub 31.0.exe
2014-08-23 00:03 - 2014-08-23 00:03 - 51769792 _____ (Adobe Systems Incorporated) C:\Users\Guten Tag\Downloads\AdbeRdr1014_de_DE.exe
2014-08-22 23:55 - 2014-08-22 23:55 - 01057672 _____ (Adobe) C:\Users\Guten Tag\Downloads\install_reader11_de_mssd_aaa_aih.exe
2014-08-22 23:30 - 2014-08-22 23:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-22 22:57 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:54 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-08-22 22:51 - 2014-08-22 22:51 - 00002730 _____ () C:\Windows\system32\RaCoInst.log
2014-08-22 22:48 - 2014-08-22 22:48 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:48 - 2014-08-22 22:48 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-08-22 22:48 - 2014-08-22 22:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-22 21:57 - 2014-08-22 21:57 - 00000000 ____D () C:\Users\Guten Tag\Documents\Fax
2014-08-22 21:51 - 2011-04-14 18:39 - 00272653 _____ () C:\ProgramData\nvModes.001
2014-08-22 21:51 - 2011-04-14 17:11 - 00272629 _____ () C:\ProgramData\nvModes.dat
2014-08-22 21:49 - 2014-08-22 21:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\DriverTurbo
2014-08-22 21:31 - 2014-08-22 21:31 - 00231952 _____ () C:\Users\Guten Tag\Downloads\DriverTurboSetup.exe
2014-08-22 20:45 - 2014-08-22 20:45 - 01094144 _____ (Farbar) C:\Users\Guten Tag\Downloads\FRST.exe
2014-08-22 13:08 - 2014-08-22 13:08 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{984C71C8-490B-4D80-9EED-930CF9250A64}
2014-08-22 11:51 - 2014-08-22 11:51 - 00027406 _____ () C:\Users\Guten Tag\Downloads\eBayISAPI.gz
2014-08-22 11:48 - 2014-08-22 11:47 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{37C88580-CFED-41FE-BB45-4D7D3A0BF8C7}
2014-08-22 11:41 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-22 00:38 - 2014-08-22 00:38 - 00003068 _____ () C:\Users\Guten Tag\Documents\cc_20140822_003759.reg
2014-08-21 21:19 - 2014-08-21 21:19 - 00854417 _____ () C:\Users\Guten Tag\Desktop\SecurityCheck.exe
2014-08-21 18:36 - 2014-08-21 18:36 - 02347384 _____ (ESET) C:\Users\Guten Tag\Desktop\esetsmartinstaller_deu.exe
2014-08-21 18:14 - 2014-08-21 18:13 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{AA1E0C69-C01A-4258-B363-516A786116C5}
2014-08-20 13:57 - 2014-08-20 13:57 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Desktop\mbam-setup-2.0.2.1012 (2).exe
2014-08-20 13:32 - 2014-08-20 13:31 - 00000000 ____D () C:\Users\Guten Tag\AppData\Local\{59E65CFA-4BB2-4464-9E1C-2506B4211999}
2014-08-20 00:28 - 2014-08-20 00:28 - 00029346 _____ () C:\Users\Guten Tag\Downloads\JRT (1).zip
2014-08-20 00:22 - 2014-08-20 00:22 - 01110476 _____ () C:\Users\Guten Tag\Downloads\7z920.exe
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-08-20 00:22 - 2014-08-20 00:22 - 00000000 ____D () C:\Program Files\7-Zip
2014-08-19 23:59 - 2014-08-19 23:59 - 00000000 ____D () C:\Windows\ERUNT
2014-08-19 23:58 - 2014-08-19 23:58 - 01016261 _____ (Thisisu) C:\Users\Guten Tag\Desktop\JRT.exe
2014-08-19 23:51 - 2014-08-19 23:47 - 00000000 ____D () C:\AdwCleaner
2014-08-19 23:51 - 2009-01-23 11:58 - 00000000 ____D () C:\ProgramData\ICQ
2014-08-19 23:47 - 2014-08-19 23:47 - 01361671 _____ () C:\Users\Guten Tag\Downloads\adwcleaner_3.307.exe
2014-08-19 23:39 - 2014-08-19 23:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-08-19 23:22 - 2014-08-19 23:22 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Guten Tag\Desktop\mbam-clean-2.1.1.1001.exe
2014-08-19 18:13 - 2014-08-19 18:13 - 00001570 _____ () C:\Users\Guten Tag\Documents\cc_20140819_181322.reg
2014-08-19 17:49 - 2014-08-17 14:59 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-19 17:48 - 2013-03-17 20:58 - 00000000 ____D () C:\Program Files\Avira
2014-08-19 00:11 - 2014-08-19 00:11 - 00024047 _____ () C:\ComboFix.txt
2014-08-19 00:11 - 2014-08-18 23:42 - 00000000 ____D () C:\Qoobox
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-08-19 00:11 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-08-19 00:09 - 2014-08-18 23:42 - 00000000 ____D () C:\Windows\erdnt
2014-08-19 00:04 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini
2014-08-19 00:03 - 2006-11-02 12:23 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_717
2014-08-18 19:17 - 2013-09-19 19:22 - 00000000 ____D () C:\Users\Guten Tag\AppData\Roaming\Nikon
2014-08-18 19:17 - 2013-09-19 19:20 - 00000020 ____H () C:\ProgramData\PKP_DLev.DAT
2014-08-17 22:55 - 2014-08-17 16:57 - 00000000 ____D () C:\Program Files\005
2014-08-17 20:40 - 2014-08-17 20:40 - 00059514 _____ () C:\Users\Guten Tag\Downloads\Addition.txt
2014-08-17 20:40 - 2014-08-17 20:38 - 00045205 _____ () C:\Users\Guten Tag\Downloads\FRST.txt
2014-08-17 18:24 - 2014-08-17 18:24 - 00000340 _____ () C:\Users\Guten Tag\Documents\cc_20140817_182409.reg
2014-08-17 17:51 - 2014-08-17 17:51 - 04872677 _____ () C:\Users\Guten Tag\Downloads\mbam-chameleon-3.1.4.0.zip
2014-08-17 17:13 - 2014-08-17 14:44 - 00000000 ____D () C:\Windows\CryptoGuard
2014-08-17 17:04 - 2014-08-17 17:04 - 00000000 ____D () C:\MININT
2014-08-17 17:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Resources
2014-08-17 16:36 - 2014-08-17 16:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Guten Tag\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-17 16:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-17 15:49 - 2014-08-17 15:49 - 00012650 _____ () C:\Users\Guten Tag\Documents\cc_20140817_154952.reg
2014-08-17 15:28 - 2011-04-14 16:53 - 00000000 ___RD () C:\Users\Guten Tag\Virtual Machines
2014-08-17 15:20 - 2013-08-15 00:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-17 15:20 - 2008-12-09 08:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-17 15:10 - 2011-08-02 06:23 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-17 14:59 - 2013-03-17 20:58 - 00000000 ____D () C:\ProgramData\Avira
2014-08-17 14:44 - 2014-08-17 14:44 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-08-17 14:43 - 2014-08-17 14:43 - 01889616 _____ (SurfRight B.V.) C:\Users\Guten Tag\Downloads\hmpalert.exe
2014-08-05 09:20 - 2009-10-03 18:55 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-01 01:16 - 2014-08-17 14:20 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-31 22:20 - 2014-07-31 22:20 - 00031744 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-07-29 20:02 - 2013-05-23 20:20 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\temp\avgnt.exe
C:\Users\Gast\AppData\Local\temp\lpuninstall.exe
C:\Users\Guten Tag\AppData\Local\temp\avgnt.exe
C:\Users\Guten Tag\AppData\Local\temp\MouseKeyboardCenterx86_1031.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 00:15

==================== End Of Log ============================
--- --- ---
Alt 28.08.2014, 08:32   #30
schrauber
/// the machine
/// TB-Ausbilder
 
Malwarebytes Anti Malware startet nicht - Standard

Malwarebytes Anti Malware startet nicht


Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort
Seite 2 von 3 1 2 3

Themen zu Malwarebytes Anti Malware startet nicht
msil/adware.ibryte.f, win32/adware.adon, win32/adware.adpeak.j, win32/bundled.toolbar.ask, win32/bundled.toolbar.ask.a, win32/bundled.toolbar.ask.d, win32/bundled.toolbar.ask.g, win32/bundled.toolbar.google.d, win32/hao123.a, win32/installcore.oo, win32/softpulse.b, win32/systweak.g, win32/toolbar.conduit.b


« Zip-Datei (Paypal-Rechnung) in eMail-Anhang angeklickt | Internet Explorer öffnet immer neue Tabs mit Werbung »


Ähnliche Themen: Malwarebytes Anti Malware startet nicht


  1. Windows XP, Virenprogramm wird nicht installiert, Malwarebytes Anti-Malware startet nicht
    Log-Analyse und Auswertung - 28.09.2015 (5)
  2. Malwarebytes Anti-Malware findet auf NAS, nicht aber auf interner HDD
    Log-Analyse und Auswertung - 10.06.2015 (14)
  3. Verständnis Frage; Malwarebytes Anti-Malware vs. Malwarebytes Anti-Rootkit
    Antiviren-, Firewall- und andere Schutzprogramme - 21.12.2014 (3)
  4. Omiga plus "gelöscht" und malwarebytes Anti-malware startet nicht.
    Log-Analyse und Auswertung - 02.11.2014 (11)
  5. PC friert in unregelmäßigen Abständen ein. Malwarebytes Anti Malware startet nicht.
    Plagegeister aller Art und deren Bekämpfung - 14.10.2014 (13)
  6. Windows 7: Anti Malwarebytes startet nicht
    Plagegeister aller Art und deren Bekämpfung - 09.08.2014 (6)
  7. windows startet bei Instalation von Malwarebytes Anti-Malware neu
    Alles rund um Windows - 04.08.2014 (1)
  8. Malwarebytes Anti-Malware Pro + X (Was dazu oder nicht?)
    Antiviren-, Firewall- und andere Schutzprogramme - 05.06.2014 (16)
  9. Win7 + Malwarebytes Anti-Malware: Trojaner oder nicht?
    Log-Analyse und Auswertung - 29.04.2014 (3)
  10. Win7, firefox startet nicht, Malware laut Malwarebytes Anti-Malware, Security.Hijack
    Log-Analyse und Auswertung - 30.03.2014 (9)
  11. kann Malwarebytes Anti-Malware nicht als Admin installieren
    Plagegeister aller Art und deren Bekämpfung - 28.08.2012 (1)
  12. Malwarebytes' Anti-Malware : Es lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 29.03.2012 (1)
  13. Malwarebytes Anti-Malware lässt sich nicht updaten
    Antiviren-, Firewall- und andere Schutzprogramme - 12.11.2011 (2)
  14. AV Security Suite - Malwarebytes Anti-Malware startet nicht - keine Internetverbindung
    Mülltonne - 13.07.2010 (2)
  15. Av Security Suite - Malwarebytes' Anti-Malware öffnet nicht
    Plagegeister aller Art und deren Bekämpfung - 13.07.2010 (5)
  16. Malwarebytes Anti-Malware Download nicht erreichbar
    Lob, Kritik und Wünsche - 06.01.2009 (7)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Malwarebytes Anti Malware startet nicht - Java lässt sich nicht updaten. Folgende Fehlermeldung: - Malwarebytes Anti Malware startet nicht...
Archiv
Du betrachtest: Malwarebytes Anti Malware startet nicht auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55