Hallo Zusammen,

ich habe in meinem Stress eine Email geöffnet, die als Rechnung getarnt war. Da es sich um eine Zip Datei handelte, habe ich sofort alles beendet es war wohl schon zu spät Kurze Zeit später war mein bankkonto auch schon gesperrt.

ich habe Norton Security und habe einen komplett Scan laufen lassen. Er hat auch einiges gereinigt, war mir aber nicht so sicher....

habe Adwcleaner laufen lassen. Log hier :
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by Ilka_sa at 2014-09-18 17:16:39
Running from C:\Users\Ilka_sa\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
aioscnnr (x32 Version: 5.7.5.30 - Your Company Name) Hidden
aioscnnr (x32 Version: 7.6.11.10 - Your Company Name) Hidden
AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{46DA7FD9-8BC1-7BA8-98D1-27F46647871B}) (Version: 8.0.891.0 - Advanced Micro Devices, Inc.)
Amyuni PDF Converter (HKLM-x32\...\Amyuni PDF Converter) (Version: - )
Architekt 3D X7 Professional (HKLM-x32\...\{A552CCF8-51D3-49D9-AD30-A939626F2299}) (Version: 17.0.0 - Avanquest Software)
Ask Toolbar (HKLM-x32\...\{4F524A2D-5637-4300-76A7-A758B70C1002}) (Version: 12.16.2.57 - APN, LLC) <==== ATTENTION
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.2.0.1 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.2.0.1 - ASUSTek COMPUTER INC.) Hidden
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0023 - ASUS)
AuthenTec TrueSuite (HKLM\...\{399C855A-6384-4C5D-A2C4-8C55B2C36E33}) (Version: 2.0.0.45 - AuthenTec, Inc.)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.)
Canon iP7200 series Benutzerregistrierung (HKLM-x32\...\Canon iP7200 series Benutzerregistrierung) (Version: - Canon Inc.‎)
Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon iP7200 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP7200_series) (Version: - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
center (x32 Version: 6.2.5.0 - Eastman Kodak Company) Hidden
Christmasville (HKLM-x32\...\{D178746E-0919-424E-88A7-81A0E46FF03E}) (Version: 1.00.0000 - Purplehills)
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS)
Creative Pack Volume 1 (HKLM-x32\...\{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}) (Version: 3.0.1 - Corel Corporation)
Crystal Reports for .NET Framework 2.0 (x86) (HKLM-x32\...\{7C05EEDD-E565-4E2B-ADE4-0C784C17311C}) (Version: 10.2.0 - Business Objects)
Crystal Reports für .NET Framework 2.0 Language Pack (x86) - DEU (HKLM-x32\...\{AC94622D-D899-44DF-9857-7DD31958C541}) (Version: 10.2.0 - Business Objects)
Dazzle Video Capture DVC100 X64 Driver 1.06 (HKLM-x32\...\{BFF23267-1D19-444E-93E2-E5059BE805EA}) (Version: 1.06.0000 - Pinnacle)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
DriverTuner 3.1.0.0 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.0 - LionSea SoftWare)
Dual Smart Solution (HKLM-x32\...\{E61F7C73-277C-44CE-87C4-B574BF0F3803}) (Version: 2.5 - LG Soft India Pvt Ltd)
essentials (x32 Version: 6.0.14.0 - Eastman Kodak Company) Hidden
Firebird 2.1.5.18496 (Win32) (HKLM-x32\...\FBDBServer_2_1_is1) (Version: 2.1.5.18496 - Firebird Project)
FlowFact (HKLM-x32\...\FlowFact) (Version: 18.0.463 - FlowFact AG Köln)
FlowFact MobileSync Service (HKLM-x32\...\{A438428D-5DCC-4652-86A3-12E6558F2C0B}) (Version: 2.55 - FlowFact)
Fritz8 (HKLM-x32\...\{08741CAB-494B-483F-9E24-D4D9FF0AA6AD}) (Version: 1 - )
GDR 5057 for SQL Server Database Services 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_SQL9) (Version: 9.4.5057 - Microsoft Corporation)
GDR 5057 for SQL Server Integration Services 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_DTS9) (Version: 9.4.5057 - Microsoft Corporation)
GDR 5057 for SQL Server Tools and Workstation Components 2005 ENU (KB2494120) (HKLM-x32\...\KB2494120_SQLTools9) (Version: 9.4.5057 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Gourmania (HKLM-x32\...\Gourmania) (Version: - )
Haufe Formular-Manager (HKLM-x32\...\{9353F6E9-13B7-43B4-8FA5-CB46CA22671B}) (Version: 2.1.8.0 - Haufe)
Haufe iDesk-Browser (HKLM-x32\...\{86A6555F-BE9C-4A40-B9FC-D4E00CE94F8E}) (Version: 7.04.05.3872 - Haufe)
Haufe iDesk-Service (HKLM-x32\...\{6EDF5D40-6287-4042-BCEC-DD0171BDF8AE}) (Version: 7.05.22.3919 - Haufe)
Holly - Ein Weihnachtsmärchen (HKLM-x32\...\{8F08E12A-363F-4F69-8BC8-0E0EA502A6ED}) (Version: 1.00.0000 - Purplehills)
Hollywood FX Volumes 1-3 (HKLM-x32\...\{E3D181F8-246B-497F-945E-6DB98CBA6677}) (Version: 2.0.1 - Corel Corporation)
Hotfix für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB2938803) (HKLM-x32\...\KB2938803.T369_127ToU880_127) (Version: 1 - Microsoft Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation)
Java 2 Runtime Environment, SE v1.4.2_13 (HKLM-x32\...\{7148F0A8-6813-11D6-A77B-00B0D0142130}) (Version: 1.4.2_13 - Sun Microsystems, Inc.)
Java 7 Update 10 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417010FF}) (Version: 7.0.100 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
Kodak AIO Printer (Version: 7.0.3.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.6.12.20 - Eastman Kodak Company)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM-x32\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Standard 2007 (HKLM-x32\...\STANDARDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server 2005 (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Integration Services (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005-Abwärtskompatibilität (HKLM\...\{5C1551CE-CEE3-4FD7-8819-0D29CD375BCE}) (Version: 8.05.2312 - Microsoft Corporation)
Microsoft SQL Server 2005-Onlinedokumentation (Deutsch) (HKLM-x32\...\{20FE5512-F318-4232-9001-468840009F2F}) (Version: 9.00.1399.06 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{DD43EEEC-E68A-440B-9027-6A0D344B612B}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{D434E072-F482-4F52-AB97-7B19DD5DAEB5}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{1FBEA8BA-D40B-48BC-85BC-EE2D5575F27C}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Premier Partner Edition - DEU (HKLM-x32\...\{8ACBD00C-9999-49E5-8E46-95EB392BC81B}) (Version: 8.0.50728 - Microsoft Corporation)
Microsoft Visual Studio 2005 Premier Partner Edition - DEU Service Pack 1 (KB926606) (HKLM-x32\...\KB926606.T2_127ToU265_127) (Version: 1 - Microsoft Corporation)
Miet- und Wohnungseigentumsrecht (HKLM-x32\...\{4F0F14FC-3240-4C11-87A8-67421135F1C9}) (Version: 1.1.0.0 - Haufe)
Mozilla Firefox 32.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.1 (x86 de)) (Version: 32.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - )
Mystery Cookbook (HKLM-x32\...\Mystery Cookbook) (Version: - )
Mysteryville 2 (HKLM-x32\...\{7730D510-6DE2-4CD4-8F58-0B04680AEFE6}) (Version: 1.00.0000 - Mysteryville 2)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.6.0 - Nikon)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.5.0.19 - Symantec Corporation)
NVIDIA Grafiktreiber 306.68 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.68 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 306.68 (Version: 306.68 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
OfficeReady Software for KODAK ESP Office All-in-One Printers (HKLM-x32\...\{420C7754-7758-49F5-807A-A3F9F2790704}) (Version: 1.00.000 - TemplateZone)
OfficeReadyToolBarSetup (HKLM-x32\...\{50DECEE8-63A6-4EE0-8EDD-655A01B16D28}) (Version: 1.0.0 - KMT Software, Inc.)
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.7 - Nikon)
Pinnacle Studio 17 - Install Manager (HKLM-x32\...\{F04D92CC-5C3A-46FA-9C98-6EACBDD262FF}) (Version: 17.0.127 - Corel Corporation)
Pinnacle Studio 17 - Standard Content Pack (HKLM-x32\...\{BA98BFA8-5EDF-450B-A92E-C096DC135D0E}) (Version: 17.0 - Corel Corporation)
Pinnacle Studio 17 (HKLM-x32\...\{3DA8F808-72E2-4361-82EC-433081D23005}) (Version: 17.5.0.327 - Corel Corporation)
PirateVille (HKLM-x32\...\PirateVille) (Version: - )
Premium Pack Volumes 1-2 (HKLM-x32\...\{88C4D8A6-9954-46A0-965D-92E55DAB8734}) (Version: 2.0.1 - Corel Corporation)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Ihr Firmenname)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30087 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
ScoreFitter Volumes 1-2 (HKLM-x32\...\{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}) (Version: 2.0.1 - Corel Corporation)
Scrabble3D (HKLM-x32\...\{008A8360-961D-4599-BB45-092FF937C06F}) (Version: 3.1.1.1 - Heiko Tietze)
Security Update für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB2251481) (HKLM-x32\...\KB2251481.T369_127ToU865_127) (Version: 3 - Microsoft Corporation)
Service Pack 4 für SQL Server 2005-Datenbankdienste DEU (KB2463332) (HKLM-x32\...\KB2463332_SQL9) (Version: 9.4.5000 - Microsoft Corporation)
Service Pack 4 für SQL Server Integration Services 2005 DEU (KB2463332) (HKLM-x32\...\KB2463332_DTS9) (Version: 9.4.5000 - Microsoft Corporation)
Service Pack 4 für Tools und Arbeitsstationskomponenten für SQL Server 2005 DEU (KB2463332) (HKLM-x32\...\KB2463332_SQLTools9) (Version: 9.4.5000 - Microsoft Corporation)
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM-x32\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft)
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM-x32\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.)
SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden
SmartSound Sonicfire Pro 5.8 (HKLM-x32\...\InstallShield_{E5184D41-7796-4127-BBE4-46993F9FAAF3}) (Version: 5.8.0 - SmartSound Software Inc.)
SmartSound Sonicfire Pro 5.8 (x32 Version: 5.8.0 - SmartSound Software Inc.) Hidden
Software-Edition 2. 2012 - DEMO-INSTALLATION (HKLM-x32\...\{4543C6FA-89E7-4F1E-89A2-32F3FFEBB47E}) (Version: 29.0 - Sprengnetter GmbH)
Software-Edition 2. 2012 - DEMO-INSTALLATION (x32 Version: 29.0 - Sprengnetter GmbH) Hidden
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Sprill Bermuda (HKLM-x32\...\Sprill Bermuda) (Version: - )
SQLXML4 (HKLM\...\{BFBF33B5-AEFE-454B-A189-DF5013028535}) (Version: 9.00.5000.00 - Microsoft Corporation)
Sweet Home 3D version 4.3 (HKLM\...\Sweet Home 3D_is1) (Version: - eTeks)
Title Extreme (HKLM-x32\...\{F7214014-27EE-4237-9978-2F9D1551559B}) (Version: 2.0.1 - Corel Corporation)
Tools für Microsoft SQL Server 2005 (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2889914) 32-Bit Edition (HKLM-x32\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{F3F83933-75FC-4B60-84F2-3F8FA63D042E}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_STANDARDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_STANDARDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_STANDARDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_STANDARDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update für Microsoft Visual Studio 2005 Premier Partner Edition - DEU (KB932234) (HKLM-x32\...\KB932234.T369_127ToU411_127) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.6.0 - Nikon)
XANIA Browser (HKLM-x32\...\{5F83E18D-9330-11D6-9710-0050BF0F5249}) (Version: 33 - )
XMedia Recode Version 3.1.4.9 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.4.9 - XMedia Recode)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

07-09-2014 20:02:45 Windows-Sicherung
11-09-2014 04:42:36 Windows Update
14-09-2014 21:18:06 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1DFEEE41-8BEC-4B5A-A1D6-8D1D566EAC80} - System32\Tasks\{8D68E16F-FC00-43FA-BBCA-BFB1DA642499} => C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\devenv.exe [2007-02-14] (Microsoft Corporation)
Task: {2BF46644-9499-49FD-B2AB-E40775933658} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\WSCStub.exe [2014-07-31] (Symantec Corporation)
Task: {597A3E79-80E7-490A-A851-748E0ABA5299} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.)
Task: {5F0E5627-F629-477B-8484-C1AA9E4A2923} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-09-14] (ASUSTek Computer Inc.)
Task: {9B8A2DA1-EFBA-49D4-9A3F-1F2BF222E126} - System32\Tasks\{7BF207B7-C82F-4404-8BF8-5A5BCC751E15} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de)
Task: {A01E63E8-7636-4DBA-BFB0-C2A9F8D673C0} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {BEA1C089-4975-4B93-8A42-B0B85A817AC3} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {DE3D19B0-8CAE-46EE-996C-5317116F5D4F} - System32\Tasks\{4A7226A2-21E9-4A20-A967-BBB7A808F22C} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de)
Task: {E40A956E-7FAE-4B7C-AEC0-CE0A96210D1D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {E493A32F-8933-499F-9192-03C07B77164C} - System32\Tasks\{072208EE-0D1D-4D17-9C06-3F201D955301} => C:\Program Files (x86)\FlowFact\FlowFact.exe [2013-10-31] (FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de)
Task: {F27B87E6-21C3-48A0-8ED0-9BB88063BB71} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23] (Google Inc.)
Task: {FECF6753-FD0E-43CD-A43E-7339D5DB6634} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-23 20:18 - 2012-09-17 23:23 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 12:24 - 2012-01-17 12:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2007-05-22 04:08 - 2007-05-22 04:08 - 00071472 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe
2014-09-16 14:56 - 2012-03-28 14:49 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2007-05-22 04:02 - 2007-05-22 04:02 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskpython.exe
2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
2007-05-22 04:08 - 2007-05-22 04:08 - 00104240 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\pywintypes24.dll
2007-05-22 04:02 - 2007-05-22 04:02 - 00071456 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\zlib.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00032560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32process.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00019752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32event.pyd
2007-05-22 04:02 - 2007-05-22 04:02 - 00055072 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\_socket.pyd
2007-05-22 04:02 - 2007-05-22 04:02 - 00017696 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\_ssl.pyd
2007-05-22 03:57 - 2007-05-22 03:57 - 00833320 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\LIBEAY32.dll
2007-05-22 03:57 - 2007-05-22 03:57 - 00161576 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\SSLEAY32.dll
2007-05-22 04:08 - 2007-05-22 04:08 - 00075560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32api.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00019752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32evtlog.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00030000 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\servicemanager.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00083752 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32file.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00021800 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32pipe.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00108336 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32security.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00038192 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32service.pyd
2007-05-22 04:02 - 2007-05-22 04:02 - 00141088 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\pyexpat.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00021808 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPersistence.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00014632 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.TimeStamp.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00021296 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\persistent.cPickleCache.pyd
2007-05-22 04:02 - 2007-05-22 04:02 - 00014112 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\select.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00021296 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ExtensionClass._ExtensionClass.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00027440 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\AccessControl.cAccessControl.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00026928 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Acquisition._Acquisition.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00013600 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Record._Record.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00020792 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\DocumentTemplate.cDocumentTemplate.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00059176 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OOBTree.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._OIBTree.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IOBTree.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._IIBTree.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00011064 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ComputedAttribute._ComputedAttribute.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00011568 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Persistence._Persistence.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00010544 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\MethodObject._MethodObject.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\ZODB.winlock.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00011560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Missing._Missing.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00012080 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\MultiMapping._MultiMapping.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00010528 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.stopper.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00010536 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\Products.ZCTextIndex.okascore.pyd
2007-05-22 04:10 - 2007-05-22 04:10 - 00337696 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\_jpype.pyd
2006-12-06 10:08 - 2006-12-06 10:08 - 00548864 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\OSR32V8.dll
2007-05-22 04:19 - 2007-05-22 04:19 - 00013608 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\normalizer.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00013104 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\indexsupport.pyd
2007-05-22 04:04 - 2007-05-22 04:04 - 00272168 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\M2Crypto\__m2crypto.pyd
2007-05-22 04:18 - 2007-05-22 04:18 - 00063272 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\BTrees._fsBTree.pyd
2007-05-22 04:08 - 2007-05-22 04:08 - 00024872 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\win32\win32wnet.pyd
2007-05-22 04:09 - 2007-05-22 04:09 - 00091944 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\lib\site-packages\psycopg2\_psycopg.pyd
2007-02-26 12:55 - 2007-02-26 12:55 - 00094208 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\DLLs\LIBPQ.dll
2007-05-22 04:19 - 2007-05-22 04:19 - 00018224 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\TXNGSplitter.pyd
2007-05-22 04:19 - 2007-05-22 04:19 - 00075560 _____ () C:\Program Files (x86)\Haufe\iDesk\iDeskService\Zope\lib\python\TextIndexNG2\Levenshtein.pyd
2014-05-10 05:19 - 2014-09-14 12:40 - 03716720 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: USB2.0-CRW
Description: USB2.0-CRW
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Wireless 11g USB 2.0 Stick #4
Description: Wireless 11g USB 2.0 Stick
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: 802.11 Wireless
Service: rt70x64
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/18/2014 05:10:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Ausnahmecode: 0xc0000094
Fehleroffset: 0x00021372
ID des fehlerhaften Prozesses: 0x814
Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0
Pfad der fehlerhaften Anwendung: GPUTweak.exe1
Pfad des fehlerhaften Moduls: GPUTweak.exe2
Berichtskennung: GPUTweak.exe3

Error: (09/18/2014 05:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/18/2014 04:30:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Ausnahmecode: 0xc0000094
Fehleroffset: 0x00021372
ID des fehlerhaften Prozesses: 0x764
Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0
Pfad der fehlerhaften Anwendung: GPUTweak.exe1
Pfad des fehlerhaften Moduls: GPUTweak.exe2
Berichtskennung: GPUTweak.exe3

Error: (09/18/2014 04:30:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/18/2014 11:09:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Ausnahmecode: 0xc0000094
Fehleroffset: 0x00021372
ID des fehlerhaften Prozesses: 0x33c
Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0
Pfad der fehlerhaften Anwendung: GPUTweak.exe1
Pfad des fehlerhaften Moduls: GPUTweak.exe2
Berichtskennung: GPUTweak.exe3

Error: (09/18/2014 11:09:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/17/2014 11:34:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Ausnahmecode: 0xc0000094
Fehleroffset: 0x00021372
ID des fehlerhaften Prozesses: 0x7d0
Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0
Pfad der fehlerhaften Anwendung: GPUTweak.exe1
Pfad des fehlerhaften Moduls: GPUTweak.exe2
Berichtskennung: GPUTweak.exe3

Error: (09/17/2014 11:34:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/17/2014 10:07:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NIS.exe, Version: 12.11.2.9, Zeitstempel: 0x5355938e
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0xb6c
Startzeit der fehlerhaften Anwendung: 0xNIS.exe0
Pfad der fehlerhaften Anwendung: NIS.exe1
Pfad des fehlerhaften Moduls: NIS.exe2
Berichtskennung: NIS.exe3

Error: (09/16/2014 05:53:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Name des fehlerhaften Moduls: GPUTweak.exe, Version: 2.2.0.1, Zeitstempel: 0x5023d04a
Ausnahmecode: 0xc0000094
Fehleroffset: 0x00021372
ID des fehlerhaften Prozesses: 0xbb8
Startzeit der fehlerhaften Anwendung: 0xGPUTweak.exe0
Pfad der fehlerhaften Anwendung: GPUTweak.exe1
Pfad des fehlerhaften Moduls: GPUTweak.exe2
Berichtskennung: GPUTweak.exe3


System errors:
=============
Error: (09/18/2014 05:09:50 PM) (Source: SNMP) (EventID: 1500) (User: )
Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten.

Error: (09/18/2014 05:04:42 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (09/18/2014 05:01:58 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (09/18/2014 04:33:42 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (09/18/2014 04:31:36 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (09/18/2014 04:30:24 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (09/18/2014 04:30:00 PM) (Source: SNMP) (EventID: 1500) (User: )
Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten.

Error: (09/18/2014 04:29:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/18/2014 04:29:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (09/18/2014 04:27:16 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (09/10/2014 04:32:19 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 60 seconds with 0 seconds of active time. This session ended with a crash.

Error: (08/24/2014 01:32:41 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 429201 seconds with 3540 seconds of active time. This session ended with a crash.

Error: (08/15/2014 05:37:06 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 163147 seconds with 0 seconds of active time. This session ended with a crash.

Error: (06/13/2014 05:54:29 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 562350 seconds with 1140 seconds of active time. This session ended with a crash.

Error: (05/23/2014 11:16:51 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 589391 seconds with 540 seconds of active time. This session ended with a crash.

Error: (05/23/2014 11:15:39 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 338130 seconds with 60 seconds of active time. This session ended with a crash.

Error: (07/11/2013 02:50:14 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 778168 seconds with 2460 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Percentage of memory in use: 34%
Total physical RAM: 8069.54 MB
Available physical RAM: 5253.02 MB
Total Pagefile: 28240.26 MB
Available Pagefile: 25556.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:146.26 GB) (Free:11.89 GB) NTFS
Drive d: () (Fixed) (Total:585.94 GB) (Free:56.34 GB) NTFS
Drive e: (CANON_IJ) (CDROM) (Total:0.49 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: AC448E83)

Partition: GPT Partition Type.

==================== End Of Log ============================

Danach habe ich FRST laufen lassen Log hier:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Ilka_sa (administrator) on IMBIMMOBILIEN on 18-09-2014 17:15:24
Running from C:\Users\Ilka_sa\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Windows\SysWOW64\ASGT.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe
() C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskservice.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
() C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskpython.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe
() C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\cltlmh.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-10] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-10] (Atheros Communications)
HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [IMPALARM] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064 2012-09-14] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [178848 2012-07-17] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [20131121] => C:\Program Files\AVAST Software\Avast\setup\emupdate\804612b0-0e3d-4c73-bfff-f746951c079e.exe /check
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [srvlvideo] => C:\Program Files (x86)\Windows NT\srvlvideo.lnk [682 2014-09-18] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2589184 2012-08-09] (ASUS)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-11-06] (Samsung)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [Spotify Web Helper] => C:\Users\Ilka_sa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-06] (Spotify Ltd)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {0ceca8fd-3d7d-11e4-9d9c-20689dbf4fcf} - F:\pushinst.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {16b6a9c7-4c84-11e2-92eb-806e6f6e6963} - E:\Msetup4.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {875fe9aa-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {875fe9c6-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\MountPoints2: {9113187d-4cdc-11e2-9cd0-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] => "C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe"
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.)
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [SDP] => C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {16b6a9c7-4c84-11e2-92eb-806e6f6e6963} - E:\Autorun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9aa-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9c6-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {9113187d-4cdc-11e2-9cd0-20689dbf4fcf} - F:\AutoRun.exe
AppInit_DLLs: C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-09-17] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Program Files C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203112 2012-09-17] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dual Smart Solution.lnk
ShortcutTarget: Dual Smart Solution.lnk -> C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe (LG Electronics)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0B0ACDDE94E0CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.4.0.40
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchURL = hxxp://home.microsoft.com/access/autosearch.asp?p=%s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: haufereader - No CLSID Value -
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll No File
Handler-x32: haufereader - No CLSID Value -
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024
FF SearchEngineOrder.1: Ask Search
FF Homepage: hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ask Toolbar - C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn [2014-09-18]

Chrome:
=======
CHR HomePage: Default -> F6F7D93D1618F7ACAC734B16B8BC0054425F78E5D720C239F5AC81A5B58E3051
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321902&octid=EB_ORIGINAL_CTID&ISID=MD0ADA291-542A-47DF-A494-DF90116487F0&SearchSource=58&CUI=&UM=5&UP=SPD9923E70-D736-4EF7-A2B4-C27F35D833EC&q=UCM_SEARCH_TERM&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Profile: C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-10]
CHR Extension: (YouTube) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-23]
CHR Extension: (Google-Suche) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-23]
CHR Extension: (Norton Identity Safe) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-10]
CHR Extension: (Google Wallet) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02]
CHR Extension: (Google Mail) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [File not signed]
R2 HRService; C:\Program Files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe [71472 2007-05-22] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 MsDtsServer; C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe [202592 2011-03-25] (Microsoft Corporation)
R2 msftesql; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe [91992 2010-03-26] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29294432 2011-03-25] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe [276376 2014-07-31] (Symantec Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)
S3 SQLSERVERAGENT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE [346976 2010-12-10] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [1586904 2014-09-13] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-08-10] (Qualcomm Atheros)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1505000.013\ccSetx64.sys [162392 2014-02-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-10] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-10] (Symantec Corporation)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\IPSDefs\20140917.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-23] (ASUSTeK Computer Inc.)
S3 LGDDCDevice; C:\Windows\SysWOW64\LGI2CDriver.sys [16384 2012-10-17] (LG Soft India) [File not signed]
S3 LGII2CDevice; C:\Windows\SysWOW64\LGPII2CDriver.sys [10752 2012-11-23] (LG Soft India) [File not signed]
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140917.022\ENG64.SYS [129752 2014-08-23] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140917.022\EX64.SYS [2137304 2014-08-23] (Symantec Corporation)
S3 rt70x64; C:\Windows\System32\DRIVERS\netr7064.sys [388448 2010-04-27] (Ralink Technology Corp.)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1505000.013\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1505000.013\SRTSPX64.SYS [36952 2013-10-30] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1505000.013\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1505000.013\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-04-20] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1505000.013\Ironx64.SYS [264280 2013-10-30] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1505000.013\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GPUZ; \??\C:\Users\Ilka_sa\AppData\Local\Temp\GPUZ.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-18 17:15 - 2014-09-18 17:16 - 00025871 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt
2014-09-18 17:15 - 2014-09-18 17:15 - 00000000 ___DC () C:\FRST
2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe
2014-09-18 17:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-18 17:04 - 2014-09-18 17:13 - 00000000 ___DC () C:\AdwCleaner
2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
2014-09-16 16:47 - 2014-09-18 10:45 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log
2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2014-09-16 16:46 - 2014-09-16 16:47 - 00011850 _____ () C:\Windows\avmfwlanci.log
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver
2014-09-16 16:46 - 2012-08-21 01:00 - 00982784 _____ (AVM GmbH) C:\Windows\system32\Drivers\fwlanusb5.sys
2014-09-16 16:46 - 2012-08-21 01:00 - 00099840 _____ (AVM Berlin) C:\Windows\system32\fwlan5ci.dll
2014-09-16 16:46 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2014-09-16 16:10 - 2014-09-16 16:10 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung
2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-09-16 14:44 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon
2014-09-16 14:43 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual
2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING
2014-09-16 14:42 - 2012-04-16 05:00 - 00389120 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2014-09-16 14:42 - 2012-03-28 19:01 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2014-09-16 14:42 - 2012-03-28 19:01 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2014-09-16 14:41 - 2014-09-16 16:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-09-11 06:57 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 06:57 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 06:57 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 06:57 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 06:57 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 06:57 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 06:57 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 06:57 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 06:57 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 06:57 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 06:57 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 06:57 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 06:57 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 06:57 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 06:57 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 06:57 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 06:57 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 06:57 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 06:57 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 06:57 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 06:57 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 06:57 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 06:57 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 06:57 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 06:57 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 06:57 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 06:57 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 06:57 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 06:57 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 06:57 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 06:57 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 06:57 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 06:57 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 06:57 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 06:57 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 06:57 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 06:57 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 06:57 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 06:57 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 06:57 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 06:57 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 06:57 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 06:57 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 06:57 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 06:57 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 06:57 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 06:57 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 06:57 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-11 06:57 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 06:57 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 06:42 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 06:42 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 16:49 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 16:49 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 16:49 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 16:49 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 16:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 16:49 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 16:49 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 16:49 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 16:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-09-03 13:38 - 2014-09-10 09:37 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax
2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016
2014-08-28 12:07 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 12:07 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 12:07 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-24 18:08 - 2014-08-24 18:08 - 00000000 ___DC () C:\Mietunterlagen Mausbach Herr Schildt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-18 17:16 - 2014-09-18 17:15 - 00025871 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt
2014-09-18 17:15 - 2014-09-18 17:15 - 00000000 ___DC () C:\FRST
2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe
2014-09-18 17:14 - 2012-12-23 00:16 - 01610764 _____ () C:\Windows\WindowsUpdate.log
2014-09-18 17:13 - 2014-09-18 17:04 - 00000000 ___DC () C:\AdwCleaner
2014-09-18 17:12 - 2012-12-23 01:53 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-18 17:10 - 2014-02-10 16:38 - 00000440 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-18 17:09 - 2013-01-03 17:35 - 00000000 ____D () C:\ProgramData\Kodak
2014-09-18 17:09 - 2012-12-23 01:53 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-18 17:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-18 17:08 - 2010-11-21 05:47 - 02043080 _____ () C:\Windows\PFRO.log
2014-09-18 17:08 - 2009-07-14 06:51 - 00054660 _____ () C:\Windows\setupact.log
2014-09-18 17:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files (x86)\Windows NT
2014-09-18 17:06 - 2012-12-23 00:19 - 00000000 ____D () C:\Users\Ilka_sa
2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
2014-09-18 16:40 - 2012-12-25 20:51 - 00000000 ____D () C:\Users\Ilka_sa\Documents\FlowFact
2014-09-18 16:37 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:37 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 11:11 - 2012-12-23 02:32 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-18 10:45 - 2014-09-16 16:47 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2014-09-18 03:56 - 2013-07-27 05:25 - 00000095 _____ () C:\Users\Ilka_sa\AppData\Roaming\WB.CFG
2014-09-17 10:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-17 10:12 - 2012-12-25 11:35 - 00000000 ____D () C:\Program Files (x86)\FlowFact
2014-09-16 16:52 - 2014-09-16 14:41 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log
2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2014-09-16 16:47 - 2014-09-16 16:46 - 00011850 _____ () C:\Windows\avmfwlanci.log
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver
2014-09-16 16:10 - 2014-09-16 16:10 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung
2014-09-16 14:48 - 2013-01-03 17:38 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-09-16 14:47 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon
2014-09-16 14:44 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual
2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING
2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-09-15 16:19 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-09-15 10:27 - 2012-12-23 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-14 12:40 - 2014-05-10 05:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-13 08:22 - 2013-01-17 14:46 - 00361116 _____ () C:\Users\Ilka_sa\AppData\Local\installer.log
2014-09-11 07:00 - 2012-12-23 01:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-11 06:55 - 2013-08-06 03:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 06:43 - 2012-12-23 19:36 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-09-10 09:53 - 2014-04-20 15:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-09-10 09:53 - 2014-04-20 09:01 - 00002528 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-09-10 09:53 - 2012-12-25 02:43 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-09-10 09:53 - 2012-12-25 02:43 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-09-10 09:37 - 2014-09-03 13:38 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax
2014-09-03 13:45 - 2013-07-05 18:53 - 00052736 ___SH () C:\Users\Ilka_sa\Thumbs.db
2014-08-29 08:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-29 06:47 - 2009-07-14 06:45 - 00421368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016
2014-08-28 12:20 - 2013-12-10 16:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\Deployment
2014-08-24 18:08 - 2014-08-24 18:08 - 00000000 ___DC () C:\Mietunterlagen Mausbach Herr Schildt
2014-08-23 04:07 - 2014-08-28 12:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 12:07 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 12:07 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-21 23:25 - 2012-12-23 21:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\CrashDumps
2014-08-19 20:05 - 2014-09-11 06:57 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-11 06:57 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 01:01 - 2014-09-11 06:57 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-11 06:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-11 06:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-11 06:57 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-11 06:57 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-11 06:57 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-11 06:57 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-11 06:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-11 06:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-11 06:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-11 06:57 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-11 06:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-11 06:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-11 06:57 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-11 06:57 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-11 06:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-11 06:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

Files to move or delete:
====================
C:\Users\Ilka_sa\Setup.exe


Some content of TEMP:
====================
C:\Users\Ilka_sa\AppData\Local\Temp\1wgcmku6.dll
C:\Users\Ilka_sa\AppData\Local\Temp\680.3190092245834_Update.exe
C:\Users\Ilka_sa\AppData\Local\Temp\APNSetup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\BackupSetup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\bundlesweetimsetup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Ilka_sa\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Ilka_sa\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Ilka_sa\AppData\Local\Temp\executeuninstall.exe
C:\Users\Ilka_sa\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Ilka_sa\AppData\Local\Temp\ICReinstall_CodecPackage.exe
C:\Users\Ilka_sa\AppData\Local\Temp\incredibar_installer.exe
C:\Users\Ilka_sa\AppData\Local\Temp\InitBDE.exe
C:\Users\Ilka_sa\AppData\Local\Temp\jre-6u38-windows-i586-iftw_2be54934.exe
C:\Users\Ilka_sa\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ilka_sa\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Ilka_sa\AppData\Local\Temp\ose00000.exe
C:\Users\Ilka_sa\AppData\Local\Temp\PDFCreator-1_3_2_setup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\Quarantine.exe
C:\Users\Ilka_sa\AppData\Local\Temp\sdpupdater.exe
C:\Users\Ilka_sa\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Ilka_sa\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Ilka_sa\AppData\Local\Temp\SHSetup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\uninst1.exe
C:\Users\Ilka_sa\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Ilka_sa\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 10:35

==================== End Of Log ============================

Kann mir jemand sagen ob mein System jetzt wieder clean ist? Oder muss ich etwa alles neu installieren, das wäre da es ein geschäftliches Notebook sehr aufwendig.

Vielen Dank für Eure Hilfe

Lg Ilka

Definier mal geschäftlich? Habt Ihr ne eigene IT Abteilung in der Firma?

Nein ich bin selbständig und kann auf meinen rechner nicht verzichten. Die Software die ich nutze habe ich damals auch selbst instaliert war alles sehr aufwendig da ich eigentlich nie Urlaub mache würde ich ungerne alles neu formatieren und neu installieren,

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix Logfile:

ComboFix 14-09-18.01 - Ilka_sa 19.09.2014  15:59:18.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8070.5385 [GMT 2:00]
ausgeführt von:: c:\users\Ilka_sa\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\MyScrapNook_12EI
c:\program files (x86)\Windows NT\pndydwnywqusghkzlvq.txt
C:\Setup.exe
c:\windows\SysWow64\regobj.dll
D:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-08-19 bis 2014-09-19  ))))))))))))))))))))))))))))))
.
.
2014-09-18 15:15 . 2014-09-19 13:34	--------	dc----w-	C:\FRST
2014-09-18 15:05 . 2010-08-30 06:34	536576	----a-w-	c:\windows\SysWow64\sqlite3.dll
2014-09-18 15:04 . 2014-09-18 15:13	--------	dc----w-	C:\AdwCleaner
2014-09-16 14:47 . 2014-09-18 08:45	--------	d-----w-	c:\program files (x86)\avmwlanstick
2014-09-16 14:46 . 2012-08-20 23:00	99840	----a-w-	c:\windows\system32\fwlan5ci.dll
2014-09-16 14:46 . 2012-08-20 23:00	982784	----a-w-	c:\windows\system32\drivers\fwlanusb5.sys
2014-09-16 14:46 . 2014-09-16 14:46	--------	d-----w-	c:\windows\AVM_Driver
2014-09-16 14:46 . 2012-04-24 23:00	14120	----a-w-	c:\windows\system32\drivers\avmeject.sys
2014-09-16 14:46 . 2014-09-16 14:46	--------	d-----w-	c:\users\Ilka_sa\AVM_Driver
2014-09-16 14:10 . 2014-09-16 14:10	--------	d-----w-	c:\users\Ilka_sa\AppData\Roaming\Canon
2014-09-16 14:09 . 2014-09-16 14:09	--------	d--h--w-	c:\programdata\CanonIJQuickMenu
2014-09-16 14:09 . 2014-09-16 14:09	--------	d--h--w-	c:\programdata\CanonIJEGV
2014-09-16 12:47 . 2014-09-16 12:47	--------	d-----w-	c:\program files\Common Files\CANON
2014-09-16 12:47 . 2014-09-16 12:47	--------	d-----w-	c:\programdata\CanonIJWSpt
2014-09-16 12:44 . 2014-09-16 12:44	--------	d-----w-	c:\program files\Canon
2014-09-16 12:43 . 2012-04-16 03:00	30208	----a-w-	c:\windows\system32\Spool\prtprocs\x64\CNMPDBA.DLL
2014-09-16 12:43 . 2012-04-16 03:00	100352	----a-w-	c:\windows\system32\Spool\prtprocs\x64\CNMPPBA.DLL
2014-09-16 12:43 . 2014-09-16 12:43	--------	d--h--w-	c:\windows\system32\CanonIJ Uninstaller Information
2014-09-16 12:42 . 2012-04-16 03:00	389120	----a-w-	c:\windows\system32\CNMLMBA.DLL
2014-09-16 12:42 . 2014-09-16 12:42	--------	d-----w-	c:\windows\system32\STRING
2014-09-16 12:42 . 2012-03-28 17:01	39424	----a-w-	c:\windows\system32\CNMN6UI.DLL
2014-09-16 12:42 . 2012-03-28 17:01	359936	----a-w-	c:\windows\system32\CNMN6PPM.DLL
2014-09-16 12:41 . 2014-09-16 14:52	--------	d-----w-	c:\programdata\CanonIJPLM
2014-09-16 12:41 . 2014-09-16 12:41	--------	d--h--w-	c:\programdata\CanonIJETV
2014-09-11 04:42 . 2014-06-27 02:08	2777088	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2014-09-11 04:42 . 2014-06-27 01:45	2285056	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-10 14:49 . 2014-08-01 11:53	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-09-10 14:49 . 2014-08-01 11:35	793600	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-09-10 14:49 . 2014-06-24 03:29	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2014-09-10 14:49 . 2014-06-24 02:59	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2014-09-10 14:49 . 2014-07-07 02:06	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-09-10 14:49 . 2014-07-07 02:06	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-09-10 14:49 . 2014-07-07 01:40	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-09-10 14:49 . 2014-07-07 01:40	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-09-10 14:49 . 2014-07-07 01:39	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-08-28 11:28 . 2014-08-28 11:28	--------	dc----w-	C:\Gebührenrechnung 2014016
2014-08-28 10:07 . 2014-08-23 00:59	3163648	----a-w-	c:\windows\system32\win32k.sys
2014-08-28 10:07 . 2014-08-23 02:07	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-08-28 10:07 . 2014-08-23 01:45	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-08-24 16:08 . 2014-08-24 16:08	--------	dc----w-	C:\Mietunterlagen Mausbach Herr Schildt
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-19 13:31 . 2012-12-24 18:35	4194304	----a-w-	c:\windows\ServiceProfiles\NetworkService\msmqlog.bin
2014-09-17 10:09 . 2013-03-28 21:45	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-09-11 04:48 . 2013-04-04 04:33	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2014-09-11 04:43 . 2012-12-23 17:36	101694776	----a-w-	c:\windows\system32\MRT.exe
2014-09-10 08:24 . 2013-03-28 21:45	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-09-10 08:24 . 2013-03-28 21:45	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2014-07-31 06:56 . 2013-04-04 04:34	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2014-07-31 06:56 . 2013-04-04 04:33	42168	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2014-07-25 00:35 . 2014-07-25 00:35	875688	----a-w-	c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 21:47 . 2014-07-24 21:47	869544	----a-w-	c:\windows\system32\msvcr120_clr0400.dll
2014-07-16 03:23 . 2014-08-14 15:44	2048	----a-w-	c:\windows\system32\tzres.dll
2014-07-16 02:46 . 2014-08-14 15:44	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-07-14 02:02 . 2014-08-14 15:43	1216000	----a-w-	c:\windows\system32\rpcrt4.dll
2014-07-14 01:40 . 2014-08-14 15:43	664064	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2014-07-09 02:03 . 2014-08-14 15:44	7168	----a-w-	c:\windows\system32\KBDYAK.DLL
2014-07-09 02:03 . 2014-08-14 15:44	7168	----a-w-	c:\windows\system32\KBDTAT.DLL
2014-07-09 02:03 . 2014-08-14 15:44	7168	----a-w-	c:\windows\system32\KBDRU1.DLL
2014-07-09 02:03 . 2014-08-14 15:44	6656	----a-w-	c:\windows\system32\KBDRU.DLL
2014-07-09 02:03 . 2014-08-14 15:44	7168	----a-w-	c:\windows\system32\KBDBASH.DLL
2014-07-09 01:31 . 2014-08-14 15:44	7168	----a-w-	c:\windows\SysWow64\KBDYAK.DLL
2014-07-09 01:31 . 2014-08-14 15:44	6656	----a-w-	c:\windows\SysWow64\KBDBASH.DLL
2014-06-30 22:24 . 2014-08-15 03:14	8856	----a-w-	c:\windows\system32\icardres.dll
2014-06-30 22:14 . 2014-08-15 03:14	8856	----a-w-	c:\windows\SysWow64\icardres.dll
2014-06-25 02:05 . 2014-08-14 15:44	14175744	----a-w-	c:\windows\system32\shell32.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-12-22 39408]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2013-11-06 1564528]
"Spotify Web Helper"="c:\users\Ilka_sa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-06-06 1176632]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2012-09-14 328064]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2012-07-17 178848]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE" [2010-09-02 2045440]
"EKStatusMonitor"="c:\program files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe" [2012-10-15 2844608]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-11-06 311152]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-02-14 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"CanonQuickMenu"="c:\program files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" [2012-04-03 1273448]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\FRITZWLANMini.exe" [2012-08-21 933888]
"srvlvideo"="c:\program files (x86)\Windows NT\srvlvideo.lnk" [2014-09-18 682]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart 4328ABC02F868DCC58B7355F905B4243EDA279C2"="c:\program files (x86)\ASUS\GPU Tweak\Monitor.exe" [2012-08-09 2589184]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Dual Smart Solution.lnk - c:\program files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe -startup [2014-2-7 1149440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi3"=wdmaud.drv
.
R2 ASGT;ASGT;c:\windows\SysWOW64\ASGT.exe;c:\windows\SysWOW64\ASGT.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
R3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GPUZ;GPUZ;c:\users\Ilka_sa\AppData\Local\Temp\GPUZ.sys;c:\users\Ilka_sa\AppData\Local\Temp\GPUZ.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LGDDCDevice;LGDDCDevice;c:\windows\system32\LGI2CDriver.sys;c:\windows\SYSNATIVE\LGI2CDriver.sys [x]
R3 LGII2CDevice;LGII2CDevice;c:\windows\system32\LGPII2CDriver.sys;c:\windows\SYSNATIVE\LGPII2CDriver.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 rt70x64;Wireless 11g RT2500 USB 2.0 Network Driver for Vista;c:\windows\system32\DRIVERS\netr7064.sys;c:\windows\SYSNATIVE\DRIVERS\netr7064.sys [x]
R3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 usbrndis6;USB-RNDIS6-Adapter;c:\windows\system32\DRIVERS\usb80236.sys;c:\windows\SYSNATIVE\DRIVERS\usb80236.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1505000.013\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1505000.013\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1505000.013\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1505000.013\SYMEFA64.SYS [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\BASHDefs\20140912.003\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [x]
S1 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1505000.013\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1505000.013\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\IPSDefs\20140918.003\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\IPSDefs\20140918.003\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1505000.013\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1505000.013\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1505000.013\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1505000.013\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [x]
S2 HRService;Haufe iDesk-Service in c:\program files (x86)\Haufe\iDesk\iDeskService\Zope;c:\program files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe;c:\program files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe [x]
S2 iprip;RIP-Überwachung;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe;c:\program files (x86)\Kodak\AiO\Center\EKAiOHostService.exe [x]
S2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe;c:\program files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe [x]
S2 MsDtsServer;SQL Server Integration Services;c:\program files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe;c:\program files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe [x]
S2 ZAtheros Bt&Wlan Coex Agent;ZAtheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [x]
S3 fwlanusb5;FRITZ!WLAN N v2;c:\windows\system32\DRIVERS\fwlanusb5.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb5.sys [x]
S3 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys;c:\windows\SYSNATIVE\drivers\IOMap64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs	REG_MULTI_SZ   	w3svc was
apphost	REG_MULTI_SZ   	apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-13 12:13	1096520	----a-w-	c:\program files (x86)\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 23:53]
.
2014-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-22 23:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-10 171040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-10 399392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-10 441888]
"BtTray"="c:\program files (x86)\Bluetooth Suite\BtTray.exe" [2012-08-10 764032]
"BtvStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2012-08-10 127616]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2010-09-02 2045440]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-11-06 311152]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028
mStart Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.4.0.40
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\program files\Microsoft Office\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\program files\Microsoft Office\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\program files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
Trusted Zone: //www.geoport.de/recherche/flowfact/order
Trusted Zone: cylex.de\web2
Trusted Zone: dropbox.com\www
Trusted Zone: ebay.de\www
Trusted Zone: geoport.de\www
Trusted Zone: hausundgrund-aachen.de\www
Trusted Zone: immobilienscout24.de\checkout
Trusted Zone: pferdeklinik-duisburg.de\www
Trusted Zone: speedport.ip
Trusted Zone: staedteregion-aachen.de\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\
FF - prefs.js: browser.startup.homepage - hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-KiesAirMessage - c:\program files (x86)\Samsung\Kies\KiesAirMessage.exe
Wow6432Node-HKLM-Run-IMPALARM - (no file)
Wow6432Node-HKLM-Run-Conime - c:\windows\system32\conime.exe
Wow6432Node-HKLM-Run-20131121 - c:\program files\AVAST Software\Avast\setup\emupdate\804612b0-0e3d-4c73-bfff-f746951c079e.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-KB2463332_DTS9 - c:\windows\DTS9_KB2463332_DEU\Hotfix.exe
AddRemove-KB2463332_SQL9 - c:\windows\SQL9_KB2463332_DEU\Hotfix.exe
AddRemove-KB2463332_SQLTools9 - c:\windows\SQLTools9_KB2463332_DEU\Hotfix.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msftesql]
"ImagePath"="\"c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe\" -s:MSSQL.1 -f:MSSQLSERVER"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.5.0.19\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1505000.013\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.5.0.19;c:\program files (x86)\Norton Internet Security\Engine64\21.5.0.19"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-09-19  16:07:37
ComboFix-quarantined-files.txt  2014-09-19 14:07
.
Vor Suchlauf: 16 Verzeichnis(se), 22.074.679.296 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 26.064.175.104 Bytes frei
.
- - End Of File - - F3A6981AB77F4A63527FA31EF84524FB
         

--- --- ---
5FB38429D5D77768867C76DCBDB35194

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Vielen Dank werde ich tun. Wie kann ich das wieder gut machen? Schließlcih ist es eine wertvolle und für mich notwendige Beratung!!!!

Wenn wir fertig sind kannste gerne was ans Board spenden wenn Du magst

mailware log

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 20.09.2014
Scan Time: 21:19:43
Logfile: log maware.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.09.20.06
Rootkit Database: v2014.09.19.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Ilka_sa

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 428975
Time Elapsed: 11 min, 35 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.StartPage.A, HKU\S-1-5-21-821649888-3277952450-913666010-1014-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, Quarantined, [13d35f90b9c22115043fd6b336cc1ee2],
PUP.Optional.StartPage.A, HKU\S-1-5-21-821649888-3277952450-913666010-1014-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, Quarantined, [13d35f90b9c22115043fd6b336cc1ee2],

Registry Values: 1
PUP.Optional.FilesFrog, HKU\S-1-5-21-821649888-3277952450-913666010-1014-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SDP, C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto , Quarantined, [ad39bc339eddf73f5044f96a966ef907]

Registry Data: 1
PUP.Optional.MaxStart.A, HKU\S-1-5-21-821649888-3277952450-913666010-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028, Good: (www.google.com), Bad: (hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028),Replaced,[b53187686219112543e157a54cb8cb35]

Folders: 0
(No malicious items detected)

Files: 10
PUP.Optional.InstallCore, C:\Users\Ilka_sa\Downloads\ZipOpenerSetup.exe, Quarantined, [e20447a86c0f0c2a843abd6119e845bb],
PUP.Optional.DownTango.A, C:\Users\Ilka_sa\Downloads\htc_sync_setup_3_3_10_downloader.exe, Quarantined, [8d5928c7007b6ccaafe3c1df20e1956b],
PUP.Optional.Somoto.A, C:\Users\Ilka_sa\Downloads\PDFCreatorSetup.exe, Quarantined, [7472ec03e6958fa789b863d530d0ba46],
PUP.Optional.Incredibar.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_DLNEMBNFBCPJNEPMFJMNGJENHHAJPDFD_0.LOCALSTORAGE, Quarantined, [5492a54aadce3303d444e14638cb20e0],
PUP.Optional.Incredibar.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_DLNEMBNFBCPJNEPMFJMNGJENHHAJPDFD_0.LOCALSTORAGE-JOURNAL, Quarantined, [7670c62922591b1b4eca8c9b0003e917],
PUP.Optional.Wajam.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_JPMBFLELDCGKLDADPDINHJJOPDFPJFJP_0.LOCALSTORAGE, Quarantined, [eef82bc47902af8701bd2803fe05c13f],
PUP.Optional.Wajam.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_JPMBFLELDCGKLDADPDINHJJOPDFPJFJP_0.LOCALSTORAGE-JOURNAL, Quarantined, [6680bf30c8b380b6318d37f4cd36f808],
PUP.Optional.PricePeep.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_LICJNKIFAMHPBAEFHDPACPMIHICFBOMB_0.LOCALSTORAGE, Quarantined, [b5316788de9d72c4c5ecafbead5739c7],
PUP.Optional.PricePeep.A, C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_LICJNKIFAMHPBAEFHDPACPMIHICFBOMB_0.LOCALSTORAGE-JOURNAL, Quarantined, [d51189663b40ec4a2889d8958282c937],
PUP.Optional.MaxStart.A, C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028"), Replaced,[9f4722cd007b89adb3c0a198d23335cb]

Physical Sectors: 0
(No malicious items detected)


(end)

adwcleaner logAdwCleaner Logfile:

# AdwCleaner v3.310 - Bericht erstellt am 21/09/2014 um 13:36:56
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Ilka_sa - IMBIMMOBILIEN
# Gestartet von : C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector
Ordner Gelöscht : C:\Program Files (x86)\WinZip Malware Protector

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Description

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.2 (x86 de)

[ Datei : C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\prefs.js ]


-\\ Google Chrome v37.0.2062.120

[ Datei : C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [34951 octets] - [18/09/2014 17:04:48]
AdwCleaner[R1].txt - [1671 octets] - [18/09/2014 17:11:41]
AdwCleaner[R2].txt - [1451 octets] - [21/09/2014 13:19:17]
AdwCleaner[S0].txt - [33207 octets] - [18/09/2014 17:06:56]
AdwCleaner[S1].txt - [1732 octets] - [18/09/2014 17:13:13]
AdwCleaner[S2].txt - [1372 octets] - [21/09/2014 13:36:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1432 octets] ##########
         

--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.9 (09.20.2014:1)
OS: Windows 7 Professional x64
Ran by Ilka_sa on 21.09.2014 at 13:57:15,32
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-821649888-3277952450-913666010-1000\Software\ib updater
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r343-n-bf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r343-n-bf_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r343-n-bf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r343-n-bf_RASMANCS



~~~ Files

Successfully deleted: [File] "C:\Users\Ilka_sa\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Ilka_sa\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"



~~~ FireFox

Emptied folder: C:\Users\Ilka_sa\AppData\Roaming\mozilla\firefox\profiles\6q0hwd6m.default-1361458601024\minidumps [34 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.09.2014 at 14:13:53,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Und ist mein System jetzt wieder sauber????????

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\Extension32.dll.vir Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\Extension64.dll.vir Variante von Win64/Toolbar.Perion.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\ExtensionUpdaterService.exe.vir Variante von Win32/Toolbar.BitCocktail.B evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\InstallerHelper.dll.vir Variante von Win32/Toolbar.BitCocktail.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\source.crx.vir Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\Firefox\chrome\content\main.js.vir Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\Firefox\chrome\content\resources\localscript.js.vir Win32/Toolbar.Perion.E evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files\IB Updater\resources\localscript.js.vir Win32/Toolbar.Perion.E evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe.vir Variante von Win32/Bundled.Toolbar.Ask.E potenziell unsichere Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\deltaApp.dll.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\deltaEng.dll.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\deltasrv.exe.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll.vir Win32/Toolbar.Babylon.G evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\uninstall.exe.vir Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll.vir Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\escortShld.dll.vir Win32/Toolbar.Funmoods evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolApp.dll.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolEng.dll.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolsrv.exe.vir Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll.vir Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\uninstall.exe.vir Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll.vir Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\IE\priam_bho.dll.vir Variante von Win32/Wajam.G evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\Updater\update.exe.vir Variante von Win32/Wajam.D evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Wajam\Updater\WajamUpdater.exe.vir Win32/Wajam.A evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZip Malware Protector\AppManager.exe.vir Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZip Malware Protector\filetypehelper.exe.vir Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZip Malware Protector\scandll.dll.vir Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe.vir Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.578_0\main.js.vir Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.578_0\resources\localscript.js.vir Win32/Toolbar.Perion.E evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Ilka_sa\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Ilka_sa\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe.vir Variante von Win32/DealPly.S evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Users\Ilka_sa\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe.vir Win32/DownWare.E evtl. unerwünschte Anwendung
C:\AdwCleaner\Quarantine\C\Windows\System32\sasnative64.exe.vir Win64/AdvancedSystemProtector.A evtl. unerwünschte Anwendung
C:\Qoobox\Quarantine\C\Program Files (x86)\Windows NT\pndydwnywqusghkzlvq.txt.vir Variante von Generik.KGQBCG Trojaner
C:\Users\Ilka_sa\Desktop\wzmp_8.exe Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
C:\Users\Ilka_sa\Downloads\CodecPackage.exe Win32/InstallCore.BN evtl. unerwünschte Anwendung
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[1].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[2].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[3].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[1] Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLB06YF\update[1] Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[1].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[2].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[3].7z Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[1] Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLB06YF\update[1] Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 17.zip Win32/Toolbar.Funmoods evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 27.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 29.zip Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 34.zip Win32/Somoto.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 35.zip Win32/InstallCore.BN evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 6.zip Variante von MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-11 190001\Backup files 8.zip Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-05-18 213134\Backup files 2.zip Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-06-02 002637\Backup files 2.zip Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-05-11 190001\Backup Files 2014-06-08 212036\Backup files 1.zip Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 17.zip Win32/Toolbar.Funmoods evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 27.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 28.zip Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 34.zip Win32/Somoto.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 6.zip Variante von MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-15 190001\Backup files 8.zip Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-06-15 190001\Backup Files 2014-06-30 004858\Backup files 1.zip Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 17.zip Win32/Toolbar.Funmoods evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 27.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 29.zip Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 35.zip Win32/Somoto.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 36.zip Win32/InstallCore.BN evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 6.zip Variante von MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-07 160615\Backup files 8.zip Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-14 000624\Backup files 2.zip Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-07-27 190003\Backup files 2.zip Variante von Win32/Wajam.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-08-10 193208\Backup files 1.zip Variante von MSIL/AdvancedSystemProtector.E evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-07-07 160615\Backup Files 2014-08-10 193208\Backup files 2.zip Variante von Win32/Wajam.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-17 204358\Backup files 18.zip Win32/Toolbar.Funmoods evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-17 204358\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-17 204358\Backup files 6.zip Variante von Win32/Bundled.Toolbar.Ask.E potenziell unsichere Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-17 204358\Backup files 8.zip Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-24 213424\Backup files 1.zip Variante von Win32/Wajam.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-24 213424\Backup files 12.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-31 221657\Backup files 3.zip Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-08-17 204358\Backup Files 2014-08-31 221657\Backup files 9.zip Win32/Somoto.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-09-21 202926\Backup Files 2014-09-21 202926\Backup files 1.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
D:\IMBIMMOBILIEN\Backup Set 2014-09-21 202926\Backup Files 2014-09-21 202926\Backup files 32.zip Variante von Generik.KGQBCG Trojaner
D:\IMBIMMOBILIEN\Backup Set 2014-09-21 202926\Backup Files 2014-09-21 202926\Backup files 38.zip Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung
D:\IMBWS01\IMB Immobilien\Objekte\nicht verkaufte oder vermittelte Objekte\MFHser Krefeld\Düren Wilhelm 21\iLividSetup-r343-n-bf.exe Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung
D:\IMBWS01\IMB Immobilien\Objekte\nicht verkaufte oder vermittelte Objekte\MFHser Krefeld\Düren Wilhelm 21\SkypeSetup.exe Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung
D:\IMBWS01\IMB Immobilien\Privat\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Backup Set 2012-12-23 203031\Backup Files 2012-12-23 203031\Backup files 2.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
I:\Backup Set 2012-12-23 203031\Backup Files 2012-12-23 203031\Backup files 5.zip Win32/Somoto.D evtl. unerwünschte Anwendung
I:\Backup Set 2012-12-23 203031\Backup Files 2012-12-23 203031\Backup files 8.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
I:\Backup Set 2013-03-10 235125\Backup Files 2013-03-10 235125\Backup files 11.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
I:\Backup Set 2013-03-10 235125\Backup Files 2013-03-10 235125\Backup files 13.zip Win32/Somoto.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-05-19 202342\Backup Files 2013-05-19 202342\Backup files 11.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
I:\Backup Set 2013-05-19 202342\Backup Files 2013-05-19 202342\Backup files 13.zip Win32/Somoto.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-05-19 202342\Backup Files 2013-05-19 202342\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-05-19 202342\Backup Files 2013-05-19 202342\Backup files 5.zip Win64/24x7Help.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-05-19 202342\Backup Files 2013-05-19 202342\Backup files 6.zip Win32/Somoto.D evtl. unerwünschte Anwendung
I:\Backup Set 2013-06-17 112150\Backup Files 2013-06-17 112150\Backup files 12.zip Win32/Toolbar.Perion.D evtl. unerwünschte Anwendung
I:\Backup Set 2013-06-17 112150\Backup Files 2013-06-17 112150\Backup files 18.zip Win32/Somoto.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-06-17 112150\Backup Files 2013-06-17 112150\Backup files 3.zip Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-06-17 112150\Backup Files 2013-06-17 112150\Backup files 5.zip Win64/24x7Help.A evtl. unerwünschte Anwendung
I:\Backup Set 2013-06-17 112150\Backup Files 2013-06-17 112150\Backup files 6.zip Win32/Somoto.D evtl. unerwünschte Anwendung
I:\IMB Immobilien\Privat\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\IMBWS01 Sicherung Jan 2013\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Notebook Sicherung Okt 2013\IMBWS01\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Notebook Sicherung Okt 2013\IMBWS01\IMB Immobilien\Objekte\Aktuelle Aufträge\Verkauf\MFHser Krefeld\Düren Wilhelm 21\SkypeSetup.exe Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung
I:\Notebook Sicherung Okt 2013\IMBWS01\IMB Immobilien\Privat\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Notebook Sicherung Sep 2014\Objekte\nicht verkaufte oder vermittelte Objekte\MFHser Krefeld\Düren Wilhelm 21\iLividSetup-r343-n-bf.exe Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung
I:\Notebook Sicherung Sep 2014\Objekte\nicht verkaufte oder vermittelte Objekte\MFHser Krefeld\Düren Wilhelm 21\SkypeSetup.exe Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung
I:\PLATTE E VISTA\sICHERUNG\IMBWS01\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Sicherung Server 25.06.2010\IMBWS01\IMB Immobilien\Privat\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung
I:\Sicherung Server 31.07.2009\IMBWS01\IMB Immobilien\Privat\Daten_alter_PC\Laufwerk E\eigene dateien\felix.exe Win32/Joke.ScreenMate potenziell unsichere Anwendung

Beim Aufrufen von Sec Check kommt folgende Meldung, ich komme nicht weiter
UNSUPPORTED OPERATING SYSTEM! ABORTED!

dann noch den Rest bitte

Beim Aufrufen von Sec Check kommt folgende Meldung, ich komme nicht weiter
UNSUPPORTED OPERATING SYSTEM! ABORTED!

Lass Securitycheck weg. Frisches FRST log bitte noch und Antwort auf meine Frage

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-09-2014 01
Ran by Ilka_sa (administrator) on IMBIMMOBILIEN on 25-09-2014 17:29:23
Running from C:\Users\Ilka_sa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B7KCDHDX
Loaded Profiles: Ilka_sa & UpdatusUser (Available profiles: Ilka_sa & UpdatusUser & DefaultAppPool)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Windows\SysWOW64\ASGT.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
() C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskservice.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
() C:\Program Files (x86)\Haufe\iDesk\iDeskService\ideskpython.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Spotify Ltd) C:\Users\Ilka_sa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(LG Electronics) C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\TestDDCCI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TODO: <Company name>) C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\SmartHookTestApp.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\nis.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(FlowFact AG, Info-Line +49(0)2236 88 00, www.flowfact.de, info@flowfact.de) C:\Program Files (x86)\FlowFact\FlowFact.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-10] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-10] (Atheros Communications)
HKLM\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2045440 2010-09-02] (Eastman Kodak Company)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064 2012-09-14] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [178848 2012-07-17] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [EKIJ5000StatusMonitor] => C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.EXE
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-11-06] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [srvlvideo] => C:\Program Files (x86)\Windows NT\srvlvideo.lnk [682 2014-09-18] ()
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-11-06] (Samsung)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\Run: [Spotify Web Helper] => C:\Users\Ilka_sa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-06] (Spotify Ltd)
HKU\S-1-5-21-821649888-3277952450-913666010-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe [814472 2013-06-22] (Adobe Systems Incorporated)
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] => "C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe"
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-23] (Google Inc.)
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {16b6a9c7-4c84-11e2-92eb-806e6f6e6963} - E:\Autorun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9aa-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {875fe9c6-4c84-11e2-92e1-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-21-821649888-3277952450-913666010-1014\...\MountPoints2: {9113187d-4cdc-11e2-9cd0-20689dbf4fcf} - F:\AutoRun.exe
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2589184 2012-08-09] (ASUS)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [247144 2012-09-17] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203112 2012-09-17] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dual Smart Solution.lnk
ShortcutTarget: Dual Smart Solution.lnk -> C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe (LG Electronics)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0B0ACDDE94E0CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=NIS&pvid=20.4.0.40
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchURL = hxxp://home.microsoft.com/access/autosearch.asp?p=%s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.5.0.19\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: haufereader - No CLSID Value - 
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll No File
Handler-x32: haufereader - No CLSID Value - 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024
FF SearchEngineOrder.1: Ask Search
FF Homepage: hxxp://www.max-start.com/?babsrc=HP_ss_mib2&mntrId=EA1720689DBF4FCF&affID=125035&tsp=5028
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ask Toolbar - C:\Users\Ilka_sa\AppData\Roaming\Mozilla\Firefox\Profiles\6q0hwd6m.default-1361458601024\Extensions\toolbar_ORJ-V7C@apn.ask.com.xpi [2013-11-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\coFFPlgn [2014-09-25]

Chrome: 
=======
CHR HomePage: Default -> F6F7D93D1618F7ACAC734B16B8BC0054425F78E5D720C239F5AC81A5B58E3051
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchURL: Default -> hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321902&octid=EB_ORIGINAL_CTID&ISID=MD0ADA291-542A-47DF-A494-DF90116487F0&SearchSource=58&CUI=&UM=5&UP=SPD9923E70-D736-4EF7-A2B4-C27F35D833EC&q=UCM_SEARCH_TERM&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.120\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Profile: C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-10]
CHR Extension: (YouTube) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-23]
CHR Extension: (Google-Suche) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-23]
CHR Extension: (Norton Identity Safe) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-10]
CHR Extension: (Google Wallet) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02]
CHR Extension: (Google Mail) - C:\Users\Ilka_sa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [File not signed]
R2 HRService; C:\Program Files (x86)\Haufe\iDesk\iDeskService\iDeskService.exe [71472 2007-05-22] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 MsDtsServer; C:\Program Files (x86)\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe [202592 2011-03-25] (Microsoft Corporation)
R2 msftesql; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe [91992 2010-03-26] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29294432 2011-03-25] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.5.0.19\NIS.exe [276376 2014-07-31] (Symantec Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)
S3 SQLSERVERAGENT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE [346976 2010-12-10] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\BASHDefs\20140912.003\BHDrvx64.sys [1586904 2014-09-13] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-08-10] (Qualcomm Atheros)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1505000.013\ccSetx64.sys [162392 2014-02-25] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-10] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-10] (Symantec Corporation)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\IPSDefs\20140925.001\IDSvia64.sys [633560 2014-08-29] (Symantec Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-23] (ASUSTeK Computer Inc.)
S3 LGDDCDevice; C:\Windows\SysWOW64\LGI2CDriver.sys [16384 2012-10-17] (LG Soft India) [File not signed]
S3 LGII2CDevice; C:\Windows\SysWOW64\LGPII2CDriver.sys [10752 2012-11-23] (LG Soft India) [File not signed]
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140924.019\ENG64.SYS [129752 2014-08-23] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.2.0.38\Definitions\VirusDefs\20140924.019\EX64.SYS [2137304 2014-08-23] (Symantec Corporation)
S3 rt70x64; C:\Windows\System32\DRIVERS\netr7064.sys [388448 2010-04-27] (Ralink Technology Corp.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1505000.013\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1505000.013\SRTSPX64.SYS [36952 2013-10-30] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1505000.013\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1505000.013\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-04-20] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1505000.013\Ironx64.SYS [264280 2013-10-30] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1505000.013\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GPUZ; \??\C:\Users\Ilka_sa\AppData\Local\Temp\GPUZ.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-25 16:36 - 2014-09-25 16:36 - 00000627 _____ () C:\Users\Ilka_sa\Desktop\JRT.txt
2014-09-24 10:00 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 10:00 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-23 14:23 - 2014-09-23 14:23 - 00854417 _____ () C:\Users\Ilka_sa\Desktop\SecurityCheck(1).exe
2014-09-23 14:16 - 2014-09-23 14:16 - 00018501 _____ () C:\Users\Ilka_sa\Desktop\eset bedrohungen erkannt.txt
2014-09-22 16:31 - 2014-09-23 15:00 - 00854417 _____ () C:\Users\Ilka_sa\Desktop\SecurityCheck.exe
2014-09-22 16:30 - 2014-09-22 16:31 - 02347384 _____ (ESET) C:\Users\Ilka_sa\Desktop\esetsmartinstaller_deu.exe
2014-09-21 13:57 - 2014-09-21 13:57 - 00000000 ____D () C:\Windows\ERUNT
2014-09-20 21:21 - 2014-09-20 21:21 - 01027006 _____ (Thisisu) C:\Users\Ilka_sa\Desktop\JRT.exe
2014-09-20 21:18 - 2014-09-20 21:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-20 21:17 - 2014-09-20 21:18 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ilka_sa\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-20 21:14 - 2014-09-21 13:14 - 00003114 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-09-20 21:14 - 2014-09-20 21:14 - 04892480 _____ (WinZip International LLC ) C:\Users\Ilka_sa\Desktop\wzmp_8.exe
2014-09-20 21:14 - 2014-09-20 21:14 - 00001200 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-09-20 21:14 - 2014-09-20 21:14 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Nico Mak Computing
2014-09-20 21:14 - 2014-09-20 21:14 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-09-20 21:14 - 2013-03-15 17:10 - 00020480 _____ () C:\Windows\system32\wsusnative64.exe
2014-09-19 16:07 - 2014-09-19 16:07 - 00027633 ____C () C:\ComboFix.txt
2014-09-19 15:57 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-19 15:57 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-19 15:57 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-19 15:57 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-19 15:57 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-19 15:57 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-19 15:57 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-19 15:57 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-19 15:56 - 2014-09-19 16:07 - 00000000 ___DC () C:\Qoobox
2014-09-19 15:55 - 2014-09-19 16:06 - 00000000 ____D () C:\Windows\erdnt
2014-09-19 15:54 - 2014-09-19 15:54 - 05578824 ____R (Swearware) C:\Users\Ilka_sa\Desktop\ComboFix.exe
2014-09-19 14:00 - 2014-09-25 17:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-18 17:16 - 2014-09-18 17:17 - 00045340 _____ () C:\Users\Ilka_sa\Desktop\Addition.txt
2014-09-18 17:15 - 2014-09-25 17:29 - 00000000 ___DC () C:\FRST
2014-09-18 17:15 - 2014-09-19 15:34 - 00048217 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt
2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe
2014-09-18 17:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-18 17:04 - 2014-09-21 13:36 - 00000000 ___DC () C:\AdwCleaner
2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
2014-09-16 16:47 - 2014-09-18 10:45 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log
2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2014-09-16 16:46 - 2014-09-16 16:47 - 00011850 _____ () C:\Windows\avmfwlanci.log
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver
2014-09-16 16:46 - 2012-08-21 01:00 - 00982784 _____ (AVM GmbH) C:\Windows\system32\Drivers\fwlanusb5.sys
2014-09-16 16:46 - 2012-08-21 01:00 - 00099840 _____ (AVM Berlin) C:\Windows\system32\fwlan5ci.dll
2014-09-16 16:46 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2014-09-16 16:10 - 2014-09-23 16:09 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung
2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-09-16 14:44 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon
2014-09-16 14:43 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual
2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING
2014-09-16 14:42 - 2012-04-16 05:00 - 00389120 _____ (CANON INC.) C:\Windows\system32\CNMLMBA.DLL
2014-09-16 14:42 - 2012-03-28 19:01 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2014-09-16 14:42 - 2012-03-28 19:01 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2014-09-16 14:41 - 2014-09-16 16:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-09-11 06:57 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-11 06:57 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-11 06:57 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-11 06:57 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-11 06:57 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-11 06:57 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-11 06:57 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-11 06:57 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-11 06:57 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-11 06:57 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-11 06:57 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-11 06:57 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-11 06:57 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-11 06:57 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-11 06:57 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-11 06:57 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-11 06:57 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-11 06:57 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-11 06:57 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-11 06:57 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-11 06:57 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-11 06:57 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-11 06:57 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-11 06:57 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-11 06:57 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-11 06:57 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-11 06:57 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-11 06:57 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-11 06:57 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-11 06:57 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-11 06:57 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-11 06:57 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-11 06:57 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-11 06:57 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-11 06:57 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-11 06:57 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-11 06:57 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-11 06:57 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 06:57 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-11 06:57 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-11 06:57 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-11 06:57 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-11 06:57 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-11 06:57 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-11 06:57 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-11 06:57 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-11 06:57 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-11 06:57 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-11 06:57 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-11 06:57 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-11 06:57 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-11 06:57 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-11 06:42 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 06:42 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 16:49 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 16:49 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 16:49 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 16:49 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 16:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 16:49 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 16:49 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-10 16:49 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 16:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-09-03 13:38 - 2014-09-10 09:37 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax
2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016
2014-08-28 12:07 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 12:07 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 12:07 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-25 17:29 - 2014-09-18 17:15 - 00000000 ___DC () C:\FRST
2014-09-25 17:12 - 2014-09-19 14:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-25 17:12 - 2012-12-23 02:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-25 17:12 - 2012-12-23 01:53 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-25 16:36 - 2014-09-25 16:36 - 00000627 _____ () C:\Users\Ilka_sa\Desktop\JRT.txt
2014-09-25 16:30 - 2013-01-03 17:35 - 00000000 ____D () C:\ProgramData\Kodak
2014-09-25 16:28 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-25 16:28 - 2009-07-14 06:45 - 00022528 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-25 16:24 - 2012-12-23 00:16 - 01793624 _____ () C:\Windows\WindowsUpdate.log
2014-09-25 16:21 - 2014-02-10 16:38 - 00000440 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-25 16:20 - 2012-12-23 01:53 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-25 16:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-25 16:19 - 2009-07-14 06:51 - 00054884 _____ () C:\Windows\setupact.log
2014-09-25 15:01 - 2012-12-25 20:51 - 00000000 ____D () C:\Users\Ilka_sa\Documents\FlowFact
2014-09-24 21:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-09-23 18:53 - 2013-01-17 14:46 - 00363664 _____ () C:\Users\Ilka_sa\AppData\Local\installer.log
2014-09-23 16:09 - 2014-09-16 16:10 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Canon
2014-09-23 15:00 - 2014-09-22 16:31 - 00854417 _____ () C:\Users\Ilka_sa\Desktop\SecurityCheck.exe
2014-09-23 14:23 - 2014-09-23 14:23 - 00854417 _____ () C:\Users\Ilka_sa\Desktop\SecurityCheck(1).exe
2014-09-23 14:16 - 2014-09-23 14:16 - 00018501 _____ () C:\Users\Ilka_sa\Desktop\eset bedrohungen erkannt.txt
2014-09-22 18:23 - 2011-04-12 09:43 - 03389996 _____ () C:\Windows\system32\perfh007.dat
2014-09-22 18:23 - 2011-04-12 09:43 - 01027636 _____ () C:\Windows\system32\perfc007.dat
2014-09-22 18:23 - 2009-07-14 07:13 - 00008928 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-22 16:31 - 2014-09-22 16:30 - 02347384 _____ (ESET) C:\Users\Ilka_sa\Desktop\esetsmartinstaller_deu.exe
2014-09-21 13:57 - 2014-09-21 13:57 - 00000000 ____D () C:\Windows\ERUNT
2014-09-21 13:57 - 2012-12-23 21:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\CrashDumps
2014-09-21 13:38 - 2010-11-21 05:47 - 02047834 _____ () C:\Windows\PFRO.log
2014-09-21 13:36 - 2014-09-18 17:04 - 00000000 ___DC () C:\AdwCleaner
2014-09-21 13:14 - 2014-09-20 21:14 - 00003114 _____ () C:\Windows\System32\Tasks\WinZip Malware Protector_startup
2014-09-21 13:11 - 2013-04-18 18:28 - 00000000 ____D () C:\Windows\Minidump
2014-09-20 21:21 - 2014-09-20 21:21 - 01027006 _____ (Thisisu) C:\Users\Ilka_sa\Desktop\JRT.exe
2014-09-20 21:18 - 2014-09-20 21:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-20 21:18 - 2014-09-20 21:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Ilka_sa\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-20 21:14 - 2014-09-20 21:14 - 04892480 _____ (WinZip International LLC ) C:\Users\Ilka_sa\Desktop\wzmp_8.exe
2014-09-20 21:14 - 2014-09-20 21:14 - 00001200 _____ () C:\Users\Public\Desktop\WinZip Malware Protector.lnk
2014-09-20 21:14 - 2014-09-20 21:14 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Roaming\Nico Mak Computing
2014-09-20 21:14 - 2014-09-20 21:14 - 00000000 ____D () C:\ProgramData\Nico Mak Computing
2014-09-19 16:07 - 2014-09-19 16:07 - 00027633 ____C () C:\ComboFix.txt
2014-09-19 16:07 - 2014-09-19 15:56 - 00000000 ___DC () C:\Qoobox
2014-09-19 16:07 - 2014-04-22 23:19 - 00000000 ____D () C:\Users\dub_cm_auto
2014-09-19 16:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-09-19 16:06 - 2014-09-19 15:55 - 00000000 ____D () C:\Windows\erdnt
2014-09-19 16:05 - 2009-07-14 04:34 - 00000215 ____C () C:\Windows\system.ini
2014-09-19 16:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files (x86)\Windows NT
2014-09-19 15:54 - 2014-09-19 15:54 - 05578824 ____R (Swearware) C:\Users\Ilka_sa\Desktop\ComboFix.exe
2014-09-19 15:34 - 2014-09-18 17:15 - 00048217 _____ () C:\Users\Ilka_sa\Desktop\FRST.txt
2014-09-18 17:17 - 2014-09-18 17:16 - 00045340 _____ () C:\Users\Ilka_sa\Desktop\Addition.txt
2014-09-18 17:14 - 2014-09-18 17:14 - 02105856 _____ (Farbar) C:\Users\Ilka_sa\Desktop\FRST64.exe
2014-09-18 17:06 - 2012-12-23 00:19 - 00000000 ____D () C:\Users\Ilka_sa
2014-09-18 17:00 - 2014-09-18 17:00 - 01373475 _____ () C:\Users\Ilka_sa\Desktop\AdwCleaner_3.310.exe
2014-09-18 11:11 - 2012-12-23 02:32 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-18 10:45 - 2014-09-16 16:47 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2014-09-18 03:56 - 2013-07-27 05:25 - 00000095 _____ () C:\Users\Ilka_sa\AppData\Roaming\WB.CFG
2014-09-17 10:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-17 10:12 - 2012-12-25 11:35 - 00000000 ____D () C:\Program Files (x86)\FlowFact
2014-09-16 16:52 - 2014-09-16 14:41 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-09-16 16:47 - 2014-09-16 16:47 - 00011197 _____ () C:\Windows\AVMInstall.Log
2014-09-16 16:47 - 2014-09-16 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2014-09-16 16:47 - 2014-09-16 16:46 - 00011850 _____ () C:\Windows\avmfwlanci.log
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Windows\AVM_Driver
2014-09-16 16:46 - 2014-09-16 16:46 - 00000000 ____D () C:\Users\Ilka_sa\AVM_Driver
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJQuickMenu
2014-09-16 16:09 - 2014-09-16 16:09 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2014-09-16 14:48 - 2014-09-16 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Benutzerregistrierung
2014-09-16 14:48 - 2013-01-03 17:38 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-09-16 14:47 - 2014-09-16 14:47 - 00002034 _____ () C:\Users\Public\Desktop\Canon Quick Menu.lnk
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\ProgramData\CanonIJWSpt
2014-09-16 14:47 - 2014-09-16 14:47 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-09-16 14:47 - 2014-09-16 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2014-09-16 14:44 - 2014-09-16 14:44 - 00000000 ____D () C:\Program Files\Canon
2014-09-16 14:44 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series Manual
2014-09-16 14:43 - 2014-09-16 14:43 - 00002375 _____ () C:\Users\Public\Desktop\Canon iP7200 series Online-Handbuch.lnk
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-16 14:43 - 2014-09-16 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP7200 series
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-16 14:42 - 2014-09-16 14:42 - 00000000 ____D () C:\Windows\system32\STRING
2014-09-16 14:41 - 2014-09-16 14:41 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-09-11 07:00 - 2012-12-23 01:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-11 06:55 - 2013-08-06 03:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-11 06:43 - 2012-12-23 19:36 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 09:59 - 2014-09-10 09:59 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-09-10 09:53 - 2014-04-20 15:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-09-10 09:53 - 2014-04-20 09:01 - 00002528 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-09-10 09:53 - 2012-12-25 02:43 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-09-10 09:53 - 2012-12-25 02:43 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-09-10 09:37 - 2014-09-03 13:38 - 00000000 ____D () C:\Users\Ilka_sa\Documents\Fax
2014-09-10 00:11 - 2014-09-24 10:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-09 23:47 - 2014-09-24 10:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-03 13:45 - 2013-07-05 18:53 - 00052736 ___SH () C:\Users\Ilka_sa\Thumbs.db
2014-08-29 08:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-29 06:47 - 2009-07-14 06:45 - 00421368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 13:28 - 2014-08-28 13:28 - 00000000 ___DC () C:\Gebührenrechnung 2014016
2014-08-28 12:20 - 2013-12-10 16:26 - 00000000 ____D () C:\Users\Ilka_sa\AppData\Local\Deployment

Files to move or delete:
====================
C:\Users\Ilka_sa\Setup.exe


Some content of TEMP:
====================
C:\Users\Ilka_sa\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 10:35

==================== End Of Log ============================
         

--- --- ---

Antwort auf welche Frage ?