Windows XP sauber nach Schädlingsbefall?

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by ***** (administrator) on WKS-BUERO2 on 19-09-2014 05:37:13
Running from C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(G Data Software AG) C:\Programme\Gemeinsame Dateien\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Programme\G Data\InternetSecurity\AVK\AVKWCtl.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Programme\Gemeinsame Dateien\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Programme\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(DATA BECKER GmbH & Co KG) C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(Nitro PDF Software) C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe
(Microsoft Corporation) C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(G Data Software AG) C:\Programme\G Data\InternetSecurity\AVKTray\AVKTray.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
() C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version5\TeamViewer.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Microsoft Corp.) C:\Programme\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
(Hewlett-Packard) C:\Programme\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Programme\Pando Networks\Media Booster\PMB.exe
(Spotify Ltd) C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Programme\Sony\Sony PC Companion\PCCompanion.exe
(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Programme\Sony\Sony PC Companion\PCCompanionInfo.exe
(OpenOffice.org) C:\Programme\OpenOffice.org 3\program\soffice.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Programme\OpenOffice.org 3\program\soffice.bin
(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Programme\HP\Digital Imaging\bin\hpqgpc01.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16804864 2008-07-23] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Bing Bar] => C:\Programme\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe [243544 2010-04-27] (Microsoft Corp.)
HKLM\...\Run: [Microsoft Default Manager] => C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288088 2009-11-11] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] => C:\Programme\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [152544 2012-12-12] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe,C:\Programme\G Data\InternetSecurity\AVKTray\AVKTray.exe,
HKLM\...99B7938DA9E4}\LocalServer32: [Default-wmiprvse]  <==== ATTENTION!
HKU\S-1-5-21-1573641348-3638421078-4280061803-1111\...\Run: [Pando Media Booster] => C:\Programme\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-11] ()
HKU\S-1-5-21-1573641348-3638421078-4280061803-1111\...\Run: [Spotify Web Helper] => C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-01] (Spotify Ltd)
HKU\S-1-5-21-1573641348-3638421078-4280061803-1111\...\Run: [Sony PC Companion] => C:\Programme\Sony\Sony PC Companion\PCCompanion.exe [467680 2014-07-30] (Sony)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Dokumente und Einstellungen\*****\Startmenü\Programme\Autostart\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Programme\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - @C:\Programme\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 %SYSTEMROOT%\system32\nvLsp.dll [167936] (NVIDIA)
Winsock: Catalog9 02 %SYSTEMROOT%\system32\nvLsp.dll [167936] (NVIDIA)
Winsock: Catalog9 03 %SYSTEMROOT%\system32\nvLsp.dll [167936] (NVIDIA)
Winsock: Catalog9 15 %SYSTEMROOT%\system32\nvLsp.dll [167936] (NVIDIA)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.10

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Programme\Microsoft Silverlight\3.0.40818.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @Microsoft.com/NpWinExt,version=5.0 -> C:\Programme\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nitropdf.com/NitroPDF -> C:\Programme\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Programme\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @protectdisc.com/NPPDLicenseHelper -> C:\Dokumente und Einstellungen\*****\Anwendungsdaten\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Programme\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\2020Player_IKEA@2020Technologies.com [2013-10-29]
FF Extension: Microsoft Default Manager - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\DefaultManager@Microsoft [2013-04-25]
FF Extension: Metaswitcher - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\metaswitcher@com.extensions.mattiasschlenker.de [2010-12-15]
FF Extension: printpdf - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\printpdf@pavlov.net [2010-12-15]
FF Extension: Forecastfox - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2012-10-08]
FF Extension: ColorfulTabs - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-08-20]
FF Extension: Garmin Communicator - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19]
FF Extension: Site Launcher - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} [2013-11-05]
FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-12-15]
FF Extension: Split Browser - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} [2010-12-15]
FF Extension: SearchPreview - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-05-21]
FF Extension: AutoPager - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\autopager@mozilla.org.xpi [2012-02-21]
FF Extension: Cliqz Beta - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\cliqz@cliqz.com.xpi [2014-09-17]
FF Extension: Personal Menu - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\CompactMenuCE@Merci.chao.xpi [2012-02-21]
FF Extension: Lazarus: Form Recovery - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\lazarus@interclue.com.xpi [2012-02-21]
FF Extension: Session Manager - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2012-02-21]
FF Extension: Minimap Addon - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{398e77b8-2304-11dc-8314-0800200c9a66}.xpi [2012-02-21]
FF Extension: CoolPreviews - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}.xpi [2012-02-21]
FF Extension: BetterPrivacy - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2012-02-21]
FF Extension: DownThemAll! - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2012-02-21]
FF Extension: FoxTab - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\Extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi [2012-02-21]
FF Extension: AutoPager - C:\Programme\Mozilla Firefox\extensions\autopager@mozilla.org [2014-09-13]
FF Extension: COMPUTER BILD Fox Config Helper - C:\Programme\Mozilla Firefox\extensions\cbsf-config@com.extensions.mattiasschlenker.de [2014-09-13]
FF Extension: Personal Menu - C:\Programme\Mozilla Firefox\extensions\CompactMenuCE@Merci.chao [2014-09-13]
FF Extension: Lazarus: Form Recovery - C:\Programme\Mozilla Firefox\extensions\lazarus@interclue.com [2014-09-13]
FF Extension: Metaswitcher - C:\Programme\Mozilla Firefox\extensions\metaswitcher@com.extensions.mattiasschlenker.de [2014-09-13]
FF Extension: printpdf - C:\Programme\Mozilla Firefox\extensions\printpdf@pavlov.net [2014-09-13]
FF Extension: Forecastfox - C:\Programme\Mozilla Firefox\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-09-13]
FF Extension: ColorfulTabs - C:\Programme\Mozilla Firefox\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-09-13]
FF Extension: Session Manager - C:\Programme\Mozilla Firefox\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30} [2014-09-13]
FF Extension: Site Launcher - C:\Programme\Mozilla Firefox\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} [2014-09-13]
FF Extension: Split Browser - C:\Programme\Mozilla Firefox\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} [2014-09-13]
FF Extension: Minimap Addon - C:\Programme\Mozilla Firefox\extensions\{398e77b8-2304-11dc-8314-0800200c9a66} [2014-09-13]
FF Extension: CoolPreviews - C:\Programme\Mozilla Firefox\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} [2014-09-13]
FF Extension: BetterPrivacy - C:\Programme\Mozilla Firefox\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2014-09-13]
FF Extension: DownThemAll! - C:\Programme\Mozilla Firefox\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2014-09-13]
FF Extension: FoxTab - C:\Programme\Mozilla Firefox\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} [2014-09-13]
FF Extension: GooglePreview - C:\Programme\Mozilla Firefox\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-09-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-11-16]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff [2009-07-15]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-01-08]
FF HKLM\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Programme\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Programme\MSN Toolbar\Platform\5.0.1449.0\Firefox [2013-01-08]
FF HKLM\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2013-01-08]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Mozilla\Firefox\Profiles\i9ojumdd.default\extensions\cliqz@cliqz.com

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184 2012-08-11] (Apple Inc.)
R2 AVKProxy; C:\Programme\Gemeinsame Dateien\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Programme\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Programme\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-31] (Apple Inc.)
S2 c16_server; O:\Goecom\C16Serv\c16_serv_svc_win.dll [203592 2008-10-22] (vectorsoft AG)
R2 DBService; C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe [189776 2010-10-28] (DATA BECKER GmbH & Co KG)
R2 ForceWare Intelligent Application Manager (IAM); C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [598016 2008-04-24] () [File not signed]
R3 GDScan; C:\Programme\Gemeinsame Dateien\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R3 hpqcxs08; C:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll [254824 2010-05-28] (Hewlett-Packard Co.)
R2 hpqddsvc; C:\Programme\HP\Digital Imaging\bin\hpqddsvc.dll [138600 2010-05-28] (Hewlett-Packard Co.)
R2 HPSLPSVC; C:\Programme\HP\Digital Imaging\bin\HPSLPSVC32.DLL [701288 2010-05-28] (Hewlett-Packard Co.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553440 2012-12-12] (Apple Inc.)
R2 JavaQuickStarterService; C:\Programme\Java\jre6\bin\jqs.exe [153376 2011-02-02] (Sun Microsystems, Inc.)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114288 2014-09-13] (Mozilla Foundation)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NitroReaderDriverReadSpool2; C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe [196912 2011-10-10] (Nitro PDF Software)
R2 nSvcIp; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [176128 2008-04-24] () [File not signed]
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145248 2008-10-24] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SeaPort; C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [242048 2010-01-14] (Microsoft Corporation)
S3 Sony PC Companion; C:\Programme\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 TeamViewer5; C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe [185640 2010-01-12] (TeamViewer GmbH)
R2 wlidsvc; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE [1529728 2009-08-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 acedrv11; C:\WINDOWS\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [327168 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [100096 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [38400 2009-06-09] (Samsung Electronics Co., Ltd.) [File not signed]
R0 GDBehave; C:\WINDOWS\System32\drivers\GDBehave.sys [44544 2014-09-18] (G Data Software AG)
R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [101504 2014-09-18] (G Data Software AG)
R2 GDTdiInterceptor; C:\WINDOWS\system32\drivers\GDTdiIcpt.sys [53248 2014-09-18] (G Data Software AG)
R2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [46976 2014-09-18] (G Data Software AG)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [54400 2008-03-25] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [22016 2008-03-25] (NVIDIA Corporation)
R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361600 2008-06-20] (Microsoft Corporation) [File not signed]
S1 bybxoasv; \??\C:\WINDOWS\system32\drivers\bybxoasv.sys [X]
S3 catchme; \??\C:\DOKUME~1\T5D1C~1.HAH\LOKALE~1\Temp\catchme.sys [X]
S4 IntelIde; No ImagePath
S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]
S3 XDva397; \??\C:\WINDOWS\system32\XDva397.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 05:18 - 2014-09-19 05:37 - 00000000 ____D () C:\FRST
2014-09-19 04:58 - 2014-09-19 04:58 - 00115696 _____ () C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2014-09-19 04:54 - 2014-09-19 04:54 - 00407896 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-19 04:42 - 2014-09-19 04:42 - 00214770 _____ () C:\Dokumente und Einstellungen\*****\Eigene Dateien\cc_20140919_044224.reg
2014-09-18 19:48 - 2014-09-18 19:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2014-09-18 16:52 - 2014-09-18 16:52 - 00000000 ____D () C:\WINDOWS\system32\MpEngineStore
2014-09-18 12:37 - 2014-09-18 12:45 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\G Data InternetSecurity CBE
2014-09-18 12:31 - 2014-09-18 12:31 - 00001660 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\G Data InternetSecurity CBE.lnk
2014-09-18 12:29 - 2014-09-18 12:29 - 00053248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDTdiIcpt.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00101504 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00046976 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00044544 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys
2014-09-18 12:23 - 2014-09-18 12:23 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\G Data
2014-09-18 11:32 - 2014-09-18 11:32 - 00007806 _____ () C:\Dokumente und Einstellungen\*****\Desktop\gdat.odt
2014-09-18 11:30 - 2014-09-18 11:30 - 00000075 _____ () C:\WINDOWS\wininit.ini
2014-09-17 09:57 - 2014-09-17 09:57 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme
2014-09-17 09:57 - 2014-09-17 09:57 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Startmenü
2014-09-17 09:49 - 2014-09-18 11:33 - 00000000 ____D () C:\Programme\Spybot - Search & Destroy 2
2014-09-17 09:49 - 2014-09-18 11:30 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2014-09-17 09:49 - 2014-09-18 08:32 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-09-17 09:47 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\WINDOWS\system32\dhRichClient3.dll
2014-09-17 09:47 - 2011-03-25 20:42 - 00338432 _____ () C:\WINDOWS\system32\sqlite36_engine.dll
2014-09-13 20:08 - 2014-09-13 20:08 - 00000000 ____D () C:\Programme\Mozilla Firefox
2014-09-10 16:07 - 2014-09-10 16:07 - 00000000 ____D () C:\WINDOWS\pss
2014-08-24 10:14 - 2014-08-24 10:14 - 00000076 _____ () C:\WINDOWS\DVWIN32.INI

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 05:37 - 2014-09-19 05:18 - 00000000 ____D () C:\FRST
2014-09-19 05:37 - 2013-02-11 12:47 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\PMB Files
2014-09-19 05:37 - 2012-02-07 16:42 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\temp
2014-09-19 05:32 - 2009-06-22 15:34 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-09-19 05:32 - 2009-06-22 14:39 - 01150195 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-19 05:32 - 2008-04-14 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-09-19 05:31 - 2014-04-09 11:26 - 00000226 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2014-09-19 05:31 - 2009-06-29 17:18 - 00000112 _____ () C:\WINDOWS\system32\config\netlogon.ftl
2014-09-19 05:31 - 2009-06-22 15:34 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-09-19 05:31 - 2009-06-22 14:44 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-19 05:30 - 2009-06-22 14:44 - 00032746 _____ () C:\WINDOWS\SchedLgU.Txt
2014-09-19 04:58 - 2014-09-19 04:58 - 00115696 _____ () C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2014-09-19 04:54 - 2014-09-19 04:54 - 00407896 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-19 04:54 - 2009-06-22 16:24 - 00000000 ____D () C:\WINDOWS\security
2014-09-19 04:42 - 2014-09-19 04:42 - 00214770 _____ () C:\Dokumente und Einstellungen\*****\Eigene Dateien\cc_20140919_044224.reg
2014-09-19 04:39 - 2009-07-13 15:51 - 00000000 ____D () C:\Dokumente und Einstellungen\*****
2014-09-19 04:13 - 2009-06-22 15:31 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-09-19 04:11 - 2009-06-22 15:32 - 00000000 ___RD () C:\Programme
2014-09-19 04:10 - 2012-04-28 04:22 - 00000000 ____D () C:\BAECK2officeServer
2014-09-19 04:09 - 2012-04-28 04:23 - 00000000 ____D () C:\BÄCK²office
2014-09-19 04:09 - 2009-07-13 15:51 - 00000000 ___RD () C:\Dokumente und Einstellungen\*****\Startmenü\Programme\Autostart
2014-09-18 20:15 - 2009-06-22 14:37 - 00000000 ____D () C:\WINDOWS\Registration
2014-09-18 19:48 - 2014-09-18 19:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2014-09-18 19:47 - 2009-07-13 17:28 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Tobit
2014-09-18 17:25 - 2009-07-13 15:40 - 00000906 _____ () C:\WINDOWS\Tobit.ini
2014-09-18 16:56 - 2014-08-15 03:53 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\G Data
2014-09-18 16:52 - 2014-09-18 16:52 - 00000000 ____D () C:\WINDOWS\system32\MpEngineStore
2014-09-18 14:21 - 2013-06-03 04:41 - 00002347 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk
2014-09-18 12:45 - 2014-09-18 12:37 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\G Data InternetSecurity CBE
2014-09-18 12:31 - 2014-09-18 12:31 - 00001660 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\G Data InternetSecurity CBE.lnk
2014-09-18 12:29 - 2014-09-18 12:29 - 00053248 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDTdiIcpt.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00101504 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00046976 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys
2014-09-18 12:25 - 2014-09-18 12:25 - 00044544 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys
2014-09-18 12:25 - 2014-08-16 03:17 - 00001558 _____ () C:\Dokumente und Einstellungen\*****\Anwendungsdaten\gdscan.log
2014-09-18 12:23 - 2014-09-18 12:23 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\G Data
2014-09-18 12:23 - 2014-08-16 03:14 - 00000000 ____D () C:\Programme\G Data
2014-09-18 12:17 - 2009-06-22 16:24 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-09-18 12:15 - 2009-06-22 16:24 - 00000000 ____D () C:\WINDOWS\system32\mui
2014-09-18 11:33 - 2014-09-17 09:49 - 00000000 ____D () C:\Programme\Spybot - Search & Destroy 2
2014-09-18 11:32 - 2014-09-18 11:32 - 00007806 _____ () C:\Dokumente und Einstellungen\*****\Desktop\gdat.odt
2014-09-18 11:30 - 2014-09-18 11:30 - 00000075 _____ () C:\WINDOWS\wininit.ini
2014-09-18 11:30 - 2014-09-17 09:49 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2014-09-18 08:33 - 2012-05-03 16:17 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2014-09-18 08:32 - 2014-09-17 09:49 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-09-17 09:57 - 2014-09-17 09:57 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Startmenü\Programme
2014-09-17 09:57 - 2014-09-17 09:57 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Startmenü
2014-09-17 09:57 - 2009-06-22 14:44 - 00000000 __SHD () C:\Dokumente und Einstellungen\LocalService
2014-09-13 20:08 - 2014-09-13 20:08 - 00000000 ____D () C:\Programme\Mozilla Firefox
2014-09-11 12:42 - 2010-05-18 07:15 - 00001836 ____H () C:\Dokumente und Einstellungen\*****\Eigene Dateien\Default.rdp
2014-09-10 16:36 - 2012-02-22 21:59 - 00000000 ___RD () C:\Dokumente und Einstellungen\*****\Eigene Dateien\Dropbox
2014-09-10 16:36 - 2012-02-22 21:56 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Dropbox
2014-09-10 16:07 - 2014-09-10 16:07 - 00000000 ____D () C:\WINDOWS\pss
2014-09-10 15:56 - 2013-06-25 19:43 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Spotify
2014-09-10 15:50 - 2009-07-13 15:51 - 00000190 ___SH () C:\Dokumente und Einstellungen\*****\ntuser.ini
2014-09-10 15:46 - 2013-06-25 19:43 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\Spotify
2014-09-10 15:46 - 2009-06-22 15:32 - 01071860 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-10 03:00 - 2009-06-22 15:11 - 98758480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-09-08 16:35 - 2014-04-09 11:26 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2014-09-08 11:29 - 2011-10-25 05:36 - 00000000 ____D () C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Nitro PDF
2014-08-24 10:14 - 2014-08-24 10:14 - 00000076 _____ () C:\WINDOWS\DVWIN32.INI
2014-08-23 04:32 - 2014-03-12 12:10 - 00001710 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Sony PC Companion 2.1.lnk
2014-08-23 04:32 - 2014-03-12 12:10 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Sony
2014-08-23 04:32 - 2009-06-22 14:47 - 00000000 ___HD () C:\Programme\InstallShield Installation Information
2014-08-23 04:32 - 2009-06-22 14:43 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================