Hallo, ich habe mir von youtube einpaar mp3´s runtergeladen und habe dann festgestellt das eine Datei nicht zu öffnen ist. Die Datei gibt sich als mp4 aus und lässt sich nicht löschen, nicht umbenennen nicht verschieben. Ich kann auch nicht die Eigenschaften aufrufen. Egal was ich damit machen will sobald ich es anklicke hängt sich mein Rechner sofort auf. Ich habe bereits Programme wie Unlocker und co. ausprobiert aber leider hat nichts geholfen. Mein Rechner ist seit dem sehr langsam cpu zeigt 100% an?. Sobald ich die Datei aufrufen will hängt sich mein Rechner auf. Ich habe probiert den Rechner im abgesicherten Modus hochzufahren aber leider hängt es sich dabei auch auf. Ich habe avast, spybot und Malewarebyts drüberlauffen lassen leider ohne Erfolg. Bin am Ende meines Lateins. Bitte hat jemand eine Idee? Mein Laptop LG E500 ist ca. 8 Jahre alt und es sind so viele Sachen darauf die ich nicht verlieren will. Ich habe Vista Home Premium 32Bit SP2 als Betriebssystem.

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Anhang 70906

Anhang 70907

jetzt ist es auch noch so das ich nach ca. 10min Laufzeit keine Fenster mehr öffnen kann... ich habe den Eindruck das es irgendwie schlimmer wird...

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-11-2014
Ran by Yater & Arif at 2014-11-19 11:56:58
Running from C:\Users\Yater & Arif\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2021 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Free YouTube Download version 3.2.34.430 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.34.430 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.50.1107 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1107 - DVDVideoSoft Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
HP Officejet Pro 8610 - Grundlegende Software für das Gerät (HKLM\...\{781953B2-8B78-4FC8-A6DC-B4950C32AC1B}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
HP Officejet Pro 8610 Hilfe (HKLM\...\{2466D8D5-4856-4492-BDEF-48A640F58866}) (Version: 32.0.0 - Hewlett Packard)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (HKLM\...\{052FDD78-A6EA-3187-8386-C82F4CA3A929}) (Version:  - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}) (Version:  - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version:  - )
Move Networks Media Player for Internet Explorer (HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Move Networks Player - IE) (Version:  - )
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Studie zur Verbesserung von HP Officejet Pro 8610 (HKLM\...\{503850FC-4683-4E0E-9959-CA655B4CE586}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-72662123-1577648568-398501129-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 -> C:\Program Files\7-Zip\7-zip.dll (Igor Pavlov)
CustomCLSID: HKU\S-1-5-21-72662123-1577648568-398501129-1000_Classes\CLSID\{e3e02f12-2adb-478c-8742-5f0819f9f0f4}\InprocServer32 -> C:\Users\Yater & Arif\AppData\Roaming\Move Networks\ie_bin\qsp2ie071303000004.dll (Move Networks)
CustomCLSID: HKU\S-1-5-21-72662123-1577648568-398501129-1000_Classes\CLSID\{e473a65c-8087-49a3-affd-c5bc4a10669b}\InprocServer32 -> C:\Users\Yater & Arif\AppData\Roaming\Move Networks\ie_bin\qsp2ie071303000004.dll (Move Networks)
CustomCLSID: HKU\S-1-5-21-72662123-1577648568-398501129-1000_Classes\CLSID\{fc345d4c-b8f4-4674-bff7-3c37d2e535ee}\InprocServer32 -> C:\Users\Yater & Arif\AppData\Roaming\Move Networks\ie_bin\qsp2ie071303000004.dll (Move Networks)
CustomCLSID: HKU\S-1-5-21-72662123-1577648568-398501129-1000_Classes\CLSID\{fd6484ed-ebe3-4c3d-938a-8238003b41b7}\InprocServer32 -> C:\Users\Yater & Arif\AppData\Roaming\Move Networks\ie_bin\qsp2ie071303000004.dll (Move Networks)

==================== Restore Points  =========================

24-10-2014 09:25:14 Windows Update
25-10-2014 09:24:40 Geplanter Prüfpunkt
27-10-2014 12:51:39 Geplanter Prüfpunkt
28-10-2014 08:56:02 Windows Update
04-11-2014 12:40:05 Windows Update
05-11-2014 12:02:57 Geplanter Prüfpunkt
06-11-2014 13:56:29 Geplanter Prüfpunkt
08-11-2014 11:30:49 Geplanter Prüfpunkt
10-11-2014 16:47:46 Geplanter Prüfpunkt
11-11-2014 10:38:21 Windows Update
12-11-2014 15:32:14 Geplanter Prüfpunkt
12-11-2014 16:22:13 Windows Update
14-11-2014 11:43:56 Geplanter Prüfpunkt
15-11-2014 09:50:27 Geplanter Prüfpunkt
18-11-2014 12:28:59 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2010-06-14 19:35 - 00404458 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	www.1001namen.com
127.0.0.1	1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123haustiereundmehr.com
127.0.0.1	123simsen.com
127.0.0.1	www.123simsen.com
127.0.0.1	www.123topsearch.com
127.0.0.1	123topsearch.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04CE3AA6-4C1B-49FB-846B-B5512F5C7818} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {06077D5A-4DA4-461E-9709-DD90BA67422B} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files\TuneUp Utilities 2012\OneClick.exe
Task: {12337F7A-2ACE-4512-8CCA-9285BC48FDDB} - System32\Tasks\4783 => Wscript.exe C:\Users\YATER&amp;~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {21472A3C-A15A-41E0-86F0-5667C10E9AFC} - System32\Tasks\{11862C70-B939-417B-B705-5FEFA52B21F6} => C:\Program Files\Skype\Phone\Skype.exe [2013-03-01] (Skype Technologies S.A.)
Task: {2901BAF2-ED59-428F-81C5-1D67FACEDE3B} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {2A5CA9A7-F092-4267-8894-204385BDF599} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {313BB04D-6C8F-403D-9BE1-C0BAD12C4D87} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {37934709-B7EE-4209-9EA9-7AF245B6E967} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2014-08-08] (AVAST Software)
Task: {444DD05F-1805-4151-B19F-FB1C664A9B7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000Core => C:\Users\Yater &amp; Arif\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {4DBE9C3C-D714-4381-8A18-D7ACAEC5CBE2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000UA => C:\Users\Yater &amp; Arif\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {62DFEC63-F02D-4715-98FA-C76D7B8DE9AD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-05-04] (Google Inc.)
Task: {71D54EC1-2CEC-41D6-9E9B-84C93E37F6C6} - System32\Tasks\HPCustParticipation HP Officejet Pro 8610 => C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPCustPartic.exe [2013-09-11] (Hewlett-Packard Co.)
Task: {85D3DC53-3048-444A-9681-5DD5FCFFE05D} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13] ()
Task: {8A926CB5-8669-4B91-9CD5-B3DC536CA8C9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: {A19EF92B-8251-42AB-A06F-72B62AA82826} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-29] (Piriform Ltd)
Task: {BE169E4F-D8D2-4751-9B17-D293984321B5} - System32\Tasks\HPCustParticipation HP Officejet Pro 8500 A910 => C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {BFC309B7-9902-4371-8ED0-DFDDEB75EC7B} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {D7072970-D575-4505-B3A9-0690E4487310} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {EBC2439E-AED8-461E-829C-80935A53E8E0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-05-04] (Google Inc.)
Task: {F1C4A331-00A1-446E-8F85-0DC3BC3D7D08} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard)
Task: {FBB1EE2C-2B20-4D6D-9424-F11DFF3E77DB} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Yater & Arif => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000Core.job => C:\Users\Yater & Arif\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000UA.job => C:\Users\Yater & Arif\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe

==================== Loaded Modules (whitelisted) =============

2014-04-02 10:32 - 2014-08-08 12:47 - 00301152 _____ () C:\Program Files\Alwil Software\Avast5\aswProperty.dll
2014-11-19 11:36 - 2014-11-19 11:36 - 02902528 _____ () C:\Program Files\Alwil Software\Avast5\defs\14111900\algo.dll
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2008-10-29 14:45 - 2007-08-23 14:37 - 00061440 _____ () C:\Program Files\LG Software\System Control Manager\edd.exe
2014-11-16 21:40 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-16 21:40 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-16 21:40 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-16 21:40 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-16 21:40 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2008-02-25 14:10 - 2008-02-25 14:10 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2008-10-29 14:45 - 2004-07-06 15:12 - 00290816 _____ () C:\Program Files\LG Software\System Control Manager\CmSuppX.dll
2008-10-29 14:45 - 2007-10-12 17:12 - 00110592 _____ () C:\Windows\system32\MGHwCtrl.dll
2008-10-29 14:45 - 2007-10-31 17:26 - 00053248 _____ () C:\Program Files\LG Software\System Control Manager\MGKBHook.dll
2013-02-13 03:37 - 2013-02-13 03:37 - 01263952 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-02-13 03:38 - 2013-02-13 03:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-12-15 19:13 - 2014-08-08 12:47 - 19329904 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2010-07-04 22:32 - 2010-07-04 22:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2014-10-30 10:41 - 2014-10-22 05:04 - 08910664 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll
2014-10-30 10:41 - 2014-10-22 05:04 - 01681224 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-72662123-1577648568-398501129-500 - Administrator - Disabled)
Gast (S-1-5-21-72662123-1577648568-398501129-501 - Limited - Enabled) => C:\Users\Gast
Yater & Arif (S-1-5-21-72662123-1577648568-398501129-1000 - Administrator - Enabled) => C:\Users\Yater & Arif

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/18/2014 04:42:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung Explorer.EXE, Version 6.0.6002.18005, Zeitstempel 0x49e01da5, fehlerhaftes Modul UnlockerHook.dll_unloaded, Version 0.0.0.0, Zeitstempel 0x4c30fdf5, Ausnahmecode 0xc0000005, Fehleroffset 0x10001117,
Prozess-ID 0x390, Anwendungsstartzeit Explorer.EXE0.

Error: (11/18/2014 04:31:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung mbam.exe, Version 1.0.1.711, Zeitstempel 0x542b53ec, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000005, Fehleroffset 0x00066609,
Prozess-ID 0x1204, Anwendungsstartzeit mbam.exe0.

Error: (11/18/2014 02:21:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.0.6002.18005 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: d24
Anfangszeit: 01d0032fe9db64b7
Zeitpunkt der Beendigung: 204

Error: (11/16/2014 09:28:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm CCleaner.exe, Version 4.19.0.4867 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: aa4
Anfangszeit: 01d001db816db09b
Zeitpunkt der Beendigung: 11325

Error: (11/16/2014 08:59:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.0.6002.18005 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 8f4
Anfangszeit: 01d001d67ecf328d
Zeitpunkt der Beendigung: 156

Error: (11/15/2014 01:10:26 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4

Error: (11/15/2014 01:10:24 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\system32\Secur32.dll4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\Windows\system32\esentprf.dll4


System errors:
=============
Error: (11/19/2014 11:38:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86

Error: (11/19/2014 11:37:24 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: 30000Eventlog

Error: (11/18/2014 04:41:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Media Player-Netzwerkfreigabedienst%%1053

Error: (11/18/2014 04:41:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Media Player-Netzwerkfreigabedienst

Error: (11/18/2014 04:38:14 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 18.11.2014 um 16:32:58 unerwartet heruntergefahren.

Error: (11/18/2014 03:36:16 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 18.11.2014 um 15:31:39 unerwartet heruntergefahren.

Error: (11/18/2014 03:31:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Ati External Event Utility1

Error: (11/18/2014 03:31:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Adobe Acrobat Update Service1

Error: (11/18/2014 03:31:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Apple Mobile Device1600001Neustart des Diensts

Error: (11/18/2014 03:30:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Agere Modem Call Progress Audio1


Microsoft Office Sessions:
=========================
Error: (11/18/2014 04:42:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Explorer.EXE6.0.6002.1800549e01da5UnlockerHook.dll_unloaded0.0.0.04c30fdf5c00000051000111739001d00345b4d6844f

Error: (11/18/2014 04:31:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.1.711542b53ecntdll.dll6.0.6002.1888151da3e27c000000500066609120401d003407ba3761a

Error: (11/18/2014 02:21:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.0.6002.18005d2401d0032fe9db64b7204

Error: (11/16/2014 09:28:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: CCleaner.exe4.19.0.4867aa401d001db816db09b11325

Error: (11/16/2014 08:59:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.0.6002.180058f401d001d67ecf328d156

Error: (11/15/2014 01:10:26 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\Windows\system32\wbem\wmiaprpl.dll4

Error: (11/15/2014 01:10:24 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\Windows\system32\msdtcuiu.DLL4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\system32\Secur32.dll4

Error: (11/15/2014 01:10:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\Windows\system32\esentprf.dll4


CodeIntegrity Errors:
===================================
  Date: 2014-11-19 11:54:57.592
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-19 11:54:55.102
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-19 11:54:52.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-19 11:54:49.971
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-19 11:36:38.585
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-18 16:55:57.947
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-18 16:55:56.749
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-18 16:55:55.445
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-18 16:55:54.202
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-18 16:49:12.019
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz
Percentage of memory in use: 66%
Total physical RAM: 2046.64 MB
Available physical RAM: 681.84 MB
Total Pagefile: 4340.51 MB
Available Pagefile: 2764.12 MB
Total Virtual: 2047.88 MB
Available Virtual: 1893.37 MB

==================== Drives ================================

Drive c: (SYSTEM) (Fixed) (Total:185.31 GB) (Free:66.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 186.3 GB) (Disk ID: 31E1331B)
Partition 1: (Not Active) - (Size=1 GB) - (Type=27)
Partition 2: (Active) - (Size=185.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-11-2014
Ran by Yater & Arif (administrator) on LAPTOP-PC on 19-11-2014 11:47:05
Running from C:\Users\Yater & Arif\Downloads
Loaded Profile: Yater & Arif (Available profiles: Yater & Arif & Gast)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\LG Software\System Control Manager\edd.exe
(O2Micro International) C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(MSI) C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Akamai Technologies, Inc.) C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe
(Akamai Technologies, Inc.) C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\browsercleanup.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4718592 2007-12-17] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [815104 2006-11-22] (Synaptics, Inc.)
HKLM\...\Run: [MGSysCtrl] => C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe [565248 2007-11-21] (MSI)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-04-15] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4085896 2014-08-08] (AVAST Software)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1104288 2014-09-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [HP Officejet Pro 8610 (NET)] => C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe [2425888 2013-09-11] (Hewlett-Packard Co.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\RunOnce: [Shockwave Updater] => C:\Windows\System32\Adobe\Shockwave 12\SwHelper_1213153.exe [1307848 2014-06-24] (Adobe Systems, Inc.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {28371e2e-0a64-11df-988f-86c9e6355503} - E:\LaunchU3.exe -a
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {5d564440-ed55-11e3-ad8b-fe7c91fae133} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {62aff6a2-d862-11e3-8ce0-d085bf29ccd5} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {e9b48524-8dc2-11e3-af5e-9391c9072cd6} - E:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll File Not Found
AppInit_DLLs:  C:\PROGRA~1\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL => C:\PROGRA~1\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL File Not Found
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-72662123-1577648568-398501129-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> {55CA39F1-2B07-4510-8340-B1159CEDC3F1} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default
FF DefaultSearchEngine: webssearches
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-72662123-1577648568-398501129-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Yater & Arif\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Extension: No Name - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-10-05]
FF Extension: No Name - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\e20dc619-d8c4-48f1-ae07-641cefb43165@3c4d943f-ad97-4f6e-aa94-d9671175a3d0.com [2014-10-05]
FF Extension: No Name - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\quick_start@gmail.com [2014-04-13]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-07-16]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-09-03]
FF Extension: DownloadHelper - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-10-05]
FF Extension: JavaScript Deobfuscator - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\jsdeobfuscator@adblockplus.org.xpi [2012-08-15]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-23]
FF Extension: Adblock Plus - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-06-30]
FF Extension: QuickJava - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2012-08-15]
FF Extension: JavaScript Debugger - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi [2012-08-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2014-05-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-03-11]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-05-14]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-05-24]

Chrome: 
=======
CHR HomePage: Default -> https://www.google.de/
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSearchURL: Default -> hxxp://search.zonealarm.com/search?src=sp&tbid=HFA5&Lan=DE&q={searchTerms}&gu=bda03ae188e84c50bf1caa9c93902e8e&tu=11Jiy00Fk1D13P0&sku=&tstsId=&ver=&
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-28]
CHR Extension: (YouTube) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-01]
CHR Extension: (Google-Suche) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-01]
CHR Extension: (Avast SafePrice) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-08-08]
CHR Extension: (Avast Online Security) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-09-29]
CHR Extension: (Google Wallet) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]
CHR Extension: (Mehr Leistung und Videoformate für dein HTML5 video>) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-05-26]
CHR Extension: (Google Mail) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-01]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-08]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-08-08]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-08-08] (AVAST Software)
S2 KMService; C:\Windows\system32\srvany.exe [8192 2003-04-18] () [File not signed]
S2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 NishService; C:\Program Files\LG Software\System Control Manager\edd.exe [61440 2007-08-23] () [File not signed]
R2 o2flash; C:\Program Files\O2Micro Oz128 Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [File not signed]
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-08-08] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-08-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55112 2014-08-08] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-08-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-08-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-08-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57800 2014-08-08] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-08-08] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 MGHwCtrl; C:\Windows\system32\drivers\MGHwCtrl.sys [19456 2006-12-22] (Windows (R) Codename Longhorn DDK provider) [File not signed]
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [132608 2012-07-30] (Prolific Technology Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2012-02-22] () [File not signed]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-19 11:47 - 2014-11-19 11:49 - 00023159 _____ () C:\Users\Yater & Arif\Downloads\FRST.txt
2014-11-19 11:46 - 2014-11-19 11:47 - 00000000 ____D () C:\FRST
2014-11-19 11:45 - 2014-11-19 11:45 - 01108992 _____ (Farbar) C:\Users\Yater & Arif\Downloads\FRST.exe
2014-11-18 16:01 - 2014-11-19 11:37 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-18 16:00 - 2014-11-18 16:00 - 00000865 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-18 16:00 - 2014-11-18 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-18 16:00 - 2014-11-18 16:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-18 16:00 - 2014-11-18 16:00 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-11-18 16:00 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-18 16:00 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-18 16:00 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-18 15:57 - 2014-11-18 15:59 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Yater & Arif\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-18 13:59 - 2014-11-18 16:37 - 00001992 _____ () C:\Windows\PFRO.log
2014-11-18 13:55 - 2014-11-18 13:55 - 00092672 _____ (Option^Explicit Software vbtechcd@gmail.com) C:\Users\Yater & Arif\Downloads\KillBox.exe
2014-11-18 13:55 - 2014-11-18 13:55 - 00000000 ____D () C:\!KillBox
2014-11-18 13:45 - 2014-11-18 13:45 - 00000545 _____ () C:\Windows\wininit.ini
2014-11-16 21:41 - 2014-11-19 11:35 - 00000644 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-11-16 21:41 - 2014-11-17 16:18 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-11-16 21:41 - 2014-11-17 16:18 - 00000446 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-11-16 21:40 - 2014-11-16 21:40 - 00001936 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-11-16 21:40 - 2014-11-16 21:40 - 00001924 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-11-16 21:40 - 2014-11-16 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-11-16 21:40 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2014-11-16 21:36 - 2014-11-16 21:38 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Yater & Arif\Downloads\spybot-2.4.exe
2014-11-16 21:00 - 2014-11-16 21:03 - 00000000 ____D () C:\Program Files\Unlocker
2014-11-16 21:00 - 2014-11-16 21:00 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-11-15 14:11 - 2014-11-15 14:35 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\Neuer Ordner
2014-11-14 16:38 - 2014-11-14 16:38 - 00000000 ____D () C:\Program Files\Free Codec Pack
2014-11-14 16:26 - 2014-11-14 16:27 - 34712552 _____ (DVDVideoSoft Ltd. ) C:\Users\Yater & Arif\Downloads\FreeYouTubeToMP3Converter_3.12.50.1107.exe
2014-11-12 17:40 - 2014-10-10 02:01 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 17:40 - 2014-10-10 02:00 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 17:40 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 17:40 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 17:39 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 17:39 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 17:38 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 17:38 - 2014-09-19 01:50 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 17:34 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 17:31 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 17:30 - 2014-10-18 02:08 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 17:22 - 2014-10-13 00:34 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 14:17 - 2014-10-27 20:02 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 14:17 - 2014-10-27 19:59 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 14:17 - 2014-10-27 19:59 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 14:17 - 2014-10-27 19:58 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 14:17 - 2014-10-27 19:57 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-12 14:17 - 2014-10-27 19:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 14:17 - 2014-10-27 19:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 14:17 - 2014-10-27 19:55 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-12 14:17 - 2014-10-27 19:55 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-12 14:17 - 2014-10-27 19:54 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 14:16 - 2014-10-27 20:10 - 12366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 14:16 - 2014-10-27 20:05 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 14:16 - 2014-10-27 19:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-10 14:48 - 2014-11-10 14:48 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\gez Y
2014-11-10 14:47 - 2014-11-10 15:14 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\gez A
2014-10-22 12:42 - 2014-10-25 13:36 - 00000000 _____ () C:\Users\Yater & Arif\Desktop\filme.txt
2014-10-21 16:05 - 2014-10-21 16:05 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-21 16:04 - 2014-10-21 16:03 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-21 16:03 - 2014-10-21 16:03 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-21 16:03 - 2014-10-21 16:03 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-21 16:03 - 2014-10-21 16:03 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-19 11:48 - 2008-10-29 14:12 - 01556349 _____ () C:\Windows\WindowsUpdate.log
2014-11-19 11:40 - 2012-06-20 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-19 11:38 - 2012-05-04 14:34 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-19 11:35 - 2012-05-04 14:34 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-19 11:34 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-19 11:34 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-19 11:34 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-18 18:46 - 2007-01-09 19:49 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-11-18 18:46 - 2006-11-02 14:01 - 00032628 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-18 18:07 - 2014-04-13 08:23 - 00000000 ____D () C:\Program Files\SupTab
2014-11-18 17:33 - 2012-01-24 11:23 - 00001166 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000UA.job
2014-11-16 21:51 - 2013-03-03 09:08 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-11-16 21:40 - 2008-11-06 14:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-15 14:09 - 2010-12-08 19:53 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\vlc
2014-11-15 13:58 - 2014-09-10 08:58 - 00000018 _____ () C:\Users\Yater & Arif\Desktop\tr 2014.txt
2014-11-14 16:39 - 2014-09-03 12:50 - 00002073 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-14 16:39 - 2014-09-03 12:50 - 00000998 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-14 16:39 - 2011-08-13 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-14 16:39 - 2011-08-13 20:02 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-11-14 16:38 - 2014-09-03 12:48 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\RHEng
2014-11-14 16:38 - 2011-08-13 20:02 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\DVDVideoSoft
2014-11-14 16:38 - 2011-02-21 17:24 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-11-14 11:02 - 2011-11-17 20:17 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Local\Akamai
2014-11-13 10:24 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 09:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-11-13 09:25 - 2008-10-29 14:22 - 00100752 _____ () C:\Users\Yater & Arif\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 09:22 - 2006-11-02 13:47 - 00381680 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 09:18 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-12 17:42 - 2012-06-30 16:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 17:29 - 2013-08-15 21:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 17:23 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-11-12 16:40 - 2012-04-02 19:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 16:40 - 2011-05-14 19:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-10 16:51 - 2012-08-09 09:43 - 00002577 _____ () C:\Users\Yater & Arif\Desktop\Microsoft Word 2010.lnk
2014-11-07 16:08 - 2006-11-02 11:33 - 01567294 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-05 12:37 - 2008-10-29 14:21 - 00000680 _____ () C:\Users\Yater & Arif\AppData\Local\d3d9caps.dat
2014-11-04 14:30 - 2009-10-03 09:37 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-04 09:56 - 2012-01-21 15:18 - 00000000 ___RD () C:\Users\Yater & Arif\Desktop\Fahrzeuge@Susan
2014-11-03 16:25 - 2012-12-05 19:06 - 00000770 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-03 16:25 - 2012-12-05 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-03 16:25 - 2012-12-05 19:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-03 14:00 - 2014-04-13 08:23 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\SupTab
2014-10-30 15:03 - 2009-11-02 15:00 - 00000000 ____D () C:\Users\Yater & Arif\Documents\Yeter
2014-10-30 10:41 - 2012-07-01 12:15 - 00001929 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-22 10:37 - 2012-08-09 09:43 - 00002579 _____ () C:\Users\Yater & Arif\Desktop\Microsoft Excel 2010.lnk
2014-10-22 10:35 - 2012-06-30 16:01 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Local\Microsoft Help
2014-10-21 16:26 - 2014-10-18 13:04 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\htc yeter
2014-10-21 16:20 - 2008-11-29 15:44 - 00000139 _____ () C:\Users\Yater & Arif\AppData\default.pls
2014-10-21 16:05 - 2013-09-29 08:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-21 16:03 - 2008-10-30 18:26 - 00000000 ____D () C:\Program Files\Java

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\DivXSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-19 11:42

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Hallo, ich habe gestern das Programm Trojan Remover laufenlassen. Es hat zwei Sachen gefunden:

C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll

C:\PROGRA~1\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL

leider ist die mp4 Datei immer noch da und immer noch nicht löschbar. Wenn ich mein Rechner hochfahre ist für ca. 5 min alles normal. Danach wird er sehr langsam und ich kann keine Fenster bzw. Ordner mehr öffnen.

Gruß und Danke im voraus

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 21.11.2014 11:03:39, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Starting, 
Protection, 21.11.2014 11:03:40, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Started, 
Protection, 21.11.2014 11:03:47, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, 
Update, 21.11.2014 11:03:57, SYSTEM, LAPTOP-PC, Manual, Rootkit Database, 2014.9.18.1, 2014.11.18.1, 
Update, 21.11.2014 11:04:06, SYSTEM, LAPTOP-PC, Manual, Malware Database, 2014.9.19.5, 2014.11.21.5, 
Protection, 21.11.2014 11:05:42, SYSTEM, LAPTOP-PC, Protection, Refresh, Starting, 
Protection, 21.11.2014 11:05:45, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, 
Protection, 21.11.2014 11:05:45, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 21.11.2014 11:05:46, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 21.11.2014 11:09:17, SYSTEM, LAPTOP-PC, Protection, Refresh, Success, 
Protection, 21.11.2014 11:09:21, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, 
Protection, 21.11.2014 11:11:21, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, 
Update, 21.11.2014 13:26:03, SYSTEM, LAPTOP-PC, Scheduler, Malware Database, 2014.11.21.5, 2014.11.21.6, 
Protection, 21.11.2014 13:26:03, SYSTEM, LAPTOP-PC, Protection, Refresh, Starting, 
Protection, 21.11.2014 13:26:03, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 21.11.2014 13:26:04, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 21.11.2014 13:28:19, SYSTEM, LAPTOP-PC, Protection, Refresh, Success, 
Protection, 21.11.2014 13:28:19, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, 
Protection, 21.11.2014 13:29:04, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, 
Scan, 21.11.2014 14:18:48, SYSTEM, LAPTOP-PC, Manual, Start: % 1 "% 2", Dauer: % 1 min 40 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 89-Malwareerkennung, 
Update, 21.11.2014 14:38:45, SYSTEM, LAPTOP-PC, Scheduler, Rootkit Database, 2014.11.18.1, 2014.11.21.1, 
Protection, 21.11.2014 14:38:45, SYSTEM, LAPTOP-PC, Protection, Refresh, Starting, 
Protection, 21.11.2014 14:38:45, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 21.11.2014 14:38:45, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 21.11.2014 14:38:57, SYSTEM, LAPTOP-PC, Protection, Refresh, Success, 
Protection, 21.11.2014 14:39:13, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, 
Protection, 21.11.2014 14:39:14, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, 
Protection, 21.11.2014 15:17:33, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Starting, 
Protection, 21.11.2014 15:17:33, SYSTEM, LAPTOP-PC, Protection, Malware Protection, Started, 
Protection, 21.11.2014 15:17:33, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Starting, 
Protection, 21.11.2014 15:19:20, SYSTEM, LAPTOP-PC, Protection, Malicious Website Protection, Started, 

(end)
         

# AdwCleaner v4.101 - Bericht erstellt am 21/11/2014 um 16:23:01
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-07.1 [Local]
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : Yater & Arif - LAPTOP-PC
# Gestartet von : C:\Users\Yater & Arif\Downloads\AdwCleaner_4.101.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : KMService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Users\Yater & Arif\AppData\Local\lollipop
Ordner Gelöscht : C:\Users\Yater & Arif\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\Yater & Arif\AppData\Roaming\RHEng
[!] Ordner Gelöscht : C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
Datei Gelöscht : C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}.xpi
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\system32\srvany.exe

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Movie2KDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E00DE9B9-B128-4C39-B732-B5D85013FA48}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gelöscht : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16592


-\\ Mozilla Firefox v27.0.1 (de)

[ime3vu20.default\prefs.js] - Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
[ime3vu20.default\prefs.js] - Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
[ime3vu20.default\prefs.js] - Zeile gelöscht : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.ae20dc619d8c448f1ae07641cefb431653c4d943fad974f6eaa94d9671175a3d0com54255.54255.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start@gmail.com.install-event-fired", true);
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
[0gina3s8.default\prefs.js] - Zeile gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

-\\ Google Chrome v38.0.2125.111

[C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [6897 octets] - [21/11/2014 16:10:56]
AdwCleaner[S0].txt - [6887 octets] - [21/11/2014 16:23:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6947 octets] ##########
         

Junkware Removal Tool verschwindet einfach nach dem Scan? Habe es zwei mal laufen lasse und es ist beides mal einfach verschwunden ohne irgend ein Bericht.


FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-11-2014
Ran by Yater & Arif (administrator) on LAPTOP-PC on 22-11-2014 10:31:25
Running from C:\Users\Yater & Arif\Downloads
Loaded Profile: Yater & Arif (Available profiles: Yater & Arif & Gast)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files\LG Software\System Control Manager\edd.exe
(O2Micro International) C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avpui.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(MSI) C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Akamai Technologies, Inc.) C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe
(Akamai Technologies, Inc.) C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4718592 2007-12-17] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [815104 2006-11-22] (Synaptics, Inc.)
HKLM\...\Run: [MGSysCtrl] => C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe [565248 2007-11-21] (MSI)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-04-15] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [UnlockerAssistant] => "C:\Program Files\Unlocker\UnlockerAssistant.exe"
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Yater & Arif\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1104288 2014-09-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\Run: [HP Officejet Pro 8610 (NET)] => C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe [2425888 2013-09-11] (Hewlett-Packard Co.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\RunOnce: [Shockwave Updater] => C:\Windows\System32\Adobe\Shockwave 12\SwHelper_1213153.exe [1307848 2014-06-24] (Adobe Systems, Inc.)
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: E - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {28371e2e-0a64-11df-988f-86c9e6355503} - E:\LaunchU3.exe -a
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {5d564440-ed55-11e3-ad8b-fe7c91fae133} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {62aff6a2-d862-11e3-8ce0-d085bf29ccd5} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-72662123-1577648568-398501129-1000\...\MountPoints2: {e9b48524-8dc2-11e3-af5e-9391c9072cd6} - E:\HTC_Sync_Manager_PC.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-72662123-1577648568-398501129-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-72662123-1577648568-398501129-1000 -> {55CA39F1-2B07-4510-8340-B1159CEDC3F1} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @kaspersky.com/content_blocker -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin: @kaspersky.com/virtual_keyboard -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-72662123-1577648568-398501129-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Yater & Arif\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-07-16]
FF Extension: DownloadHelper - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-10-05]
FF Extension: JavaScript Deobfuscator - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\jsdeobfuscator@adblockplus.org.xpi [2012-08-15]
FF Extension: Adblock Plus - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-06-30]
FF Extension: QuickJava - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2012-08-15]
FF Extension: JavaScript Debugger - C:\Users\Yater & Arif\AppData\Roaming\Mozilla\Firefox\Profiles\0gina3s8.default\Extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi [2012-08-15]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2014-05-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-03-11]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-05-24]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com [2014-11-20]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Bàn phím ảo - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-11-20]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com [2014-11-20]
FF Extension: No Name - C:\Program Files\Alwil Software\Avast5\WebRep\FF [Not Found]

Chrome: 
=======
CHR HomePage: Default -> https://www.google.de/
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSearchURL: Default -> hxxp://search.zonealarm.com/search?src=sp&tbid=HFA5&Lan=DE&q={searchTerms}&gu=bda03ae188e84c50bf1caa9c93902e8e&tu=11Jiy00Fk1D13P0&sku=&tstsId=&ver=&
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-28]
CHR Extension: (YouTube) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-01]
CHR Extension: (Google-Suche) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-01]
CHR Extension: (Kaspersky Protection) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-11-21]
CHR Extension: (Avast Online Security) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-09-29]
CHR Extension: (Google Wallet) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]
CHR Extension: (Mehr Leistung und Videoformate für dein HTML5 video>) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-05-26]
CHR Extension: (Google Mail) - C:\Users\Yater & Arif\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-01]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 NishService; C:\Program Files\LG Software\System Control Manager\edd.exe [61440 2007-08-23] () [File not signed]
R2 o2flash; C:\Program Files\O2Micro Oz128 Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135264 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112136 2014-11-20] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [34400 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [644808 2014-11-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [24672 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145888 2014-03-26] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-22] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 MGHwCtrl; C:\Windows\system32\drivers\MGHwCtrl.sys [19456 2006-12-22] (Windows (R) Codename Longhorn DDK provider) [File not signed]
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [132608 2012-07-30] (Prolific Technology Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2012-02-22] () [File not signed]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-22 10:31 - 2014-11-22 10:33 - 00022257 _____ () C:\Users\Yater & Arif\Downloads\FRST.txt
2014-11-22 10:30 - 2014-11-22 10:31 - 01108992 _____ (Farbar) C:\Users\Yater & Arif\Downloads\FRST.exe
2014-11-21 16:45 - 2014-11-21 16:45 - 01707532 _____ (Thisisu) C:\Users\Yater & Arif\Downloads\JRT (1).exe
2014-11-21 16:37 - 2014-11-21 16:37 - 00000000 ____D () C:\Windows\ERUNT
2014-11-21 16:33 - 2014-11-21 16:36 - 01707532 _____ (Thisisu) C:\Users\Yater & Arif\Downloads\JRT.exe
2014-11-21 16:09 - 2014-11-21 16:23 - 00000000 ____D () C:\AdwCleaner
2014-11-21 16:06 - 2014-11-21 16:07 - 02140160 _____ () C:\Users\Yater & Arif\Downloads\AdwCleaner_4.101.exe
2014-11-21 16:04 - 2014-11-21 16:04 - 00003236 _____ () C:\Users\Yater & Arif\Desktop\mbam.txt
2014-11-21 14:38 - 2014-11-21 16:28 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\58A55122.sys
2014-11-21 14:18 - 2014-11-21 14:18 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\035D41F1.sys
2014-11-21 11:03 - 2014-11-22 10:22 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-21 11:02 - 2014-11-21 11:02 - 00000865 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-21 11:02 - 2014-11-21 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-21 11:02 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-21 11:02 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-21 11:02 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-21 11:01 - 2014-11-21 11:02 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-11-21 10:59 - 2014-11-21 11:00 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Yater & Arif\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-20 15:17 - 2014-11-20 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-11-20 15:17 - 2014-11-20 15:16 - 00000990 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-11-20 15:11 - 2014-11-22 10:22 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-11-20 15:11 - 2014-11-20 15:11 - 00000000 ____D () C:\Program Files\Kaspersky Lab
2014-11-20 15:07 - 2014-11-20 15:31 - 00644808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-11-20 15:07 - 2014-11-20 15:31 - 00112136 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-11-20 15:07 - 2014-04-10 17:25 - 00034400 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-11-20 14:51 - 2014-11-20 14:51 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-20 14:51 - 2014-11-20 14:51 - 00000000 _____ () C:\Windows\setupact.log
2014-11-20 14:27 - 2014-11-20 14:31 - 175400560 _____ () C:\Users\Yater & Arif\Downloads\kav15.0.0.463de-de.exe
2014-11-20 13:56 - 2014-11-20 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft
2014-11-20 13:56 - 2014-11-20 13:56 - 00000000 ____D () C:\Program Files\Media Preview
2014-11-20 11:01 - 2014-11-20 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileASSASSIN
2014-11-20 11:01 - 2014-11-20 11:01 - 00000000 ____D () C:\Program Files\FileASSASSIN
2014-11-19 17:55 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 17:03 - 2014-11-20 09:59 - 00000000 ____D () C:\ProgramData\TEMP
2014-11-19 17:03 - 2014-11-19 17:03 - 00000000 ____D () C:\ProgramData\Licenses
2014-11-19 16:29 - 2014-11-19 16:29 - 00000000 ____D () C:\1d6dba4d0c79533689ae9b59fe6e
2014-11-19 16:25 - 2014-11-19 16:25 - 00000000 ____D () C:\ProgramData\Simply Super Software
2014-11-19 15:56 - 2014-11-19 15:56 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\LavasoftStatistics
2014-11-19 11:46 - 2014-11-22 10:31 - 00000000 ____D () C:\FRST
2014-11-18 16:00 - 2014-11-18 16:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-18 13:59 - 2014-11-21 16:25 - 00699536 _____ () C:\Windows\PFRO.log
2014-11-18 13:55 - 2014-11-18 13:55 - 00000000 ____D () C:\!KillBox
2014-11-16 21:00 - 2014-11-19 17:26 - 00000000 ____D () C:\Program Files\Unlocker
2014-11-15 14:11 - 2014-11-15 14:35 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\Neuer Ordner
2014-11-12 17:40 - 2014-10-10 02:01 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 17:40 - 2014-10-10 02:00 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 17:40 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 17:40 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 17:39 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 17:39 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 17:38 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 17:38 - 2014-09-19 01:50 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 17:34 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 17:31 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 17:31 - 2014-10-03 02:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 17:30 - 2014-10-18 02:08 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 17:22 - 2014-10-13 00:34 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 14:17 - 2014-10-27 20:02 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 14:17 - 2014-10-27 19:59 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 14:17 - 2014-10-27 19:59 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 14:17 - 2014-10-27 19:58 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 14:17 - 2014-10-27 19:57 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-12 14:17 - 2014-10-27 19:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 14:17 - 2014-10-27 19:56 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 14:17 - 2014-10-27 19:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 14:17 - 2014-10-27 19:55 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-12 14:17 - 2014-10-27 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-12 14:17 - 2014-10-27 19:55 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-12 14:17 - 2014-10-27 19:54 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 14:16 - 2014-10-27 20:10 - 12366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 14:16 - 2014-10-27 20:05 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 14:16 - 2014-10-27 19:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-10 14:48 - 2014-11-10 14:48 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\gez Y
2014-11-10 14:47 - 2014-11-10 15:14 - 00000000 ____D () C:\Users\Yater & Arif\Desktop\gez A

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-22 10:22 - 2012-05-04 14:34 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-22 09:40 - 2012-06-20 11:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-22 09:39 - 2012-07-01 12:15 - 00001929 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-22 09:39 - 2012-05-04 14:34 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-22 09:24 - 2008-10-29 14:12 - 01678600 _____ () C:\Windows\WindowsUpdate.log
2014-11-22 09:16 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-22 09:16 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-22 09:16 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-21 16:24 - 2007-01-09 19:49 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-11-21 16:24 - 2006-11-02 14:01 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-21 15:17 - 2012-01-24 11:23 - 00001166 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-72662123-1577648568-398501129-1000UA.job
2014-11-20 15:15 - 2008-10-29 14:21 - 00000000 ____D () C:\Users\Yater & Arif
2014-11-20 15:03 - 2012-07-06 18:53 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-20 15:03 - 2009-10-10 11:00 - 00000000 ____D () C:\Program Files\Alwil Software
2014-11-20 08:34 - 2013-03-03 09:08 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-11-19 17:53 - 2011-08-13 20:02 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\DVDVideoSoft
2014-11-19 17:26 - 2008-11-06 14:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-15 14:09 - 2010-12-08 19:53 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Roaming\vlc
2014-11-15 13:58 - 2014-09-10 08:58 - 00000018 _____ () C:\Users\Yater & Arif\Desktop\tr 2014.txt
2014-11-14 11:02 - 2011-11-17 20:17 - 00000000 ____D () C:\Users\Yater & Arif\AppData\Local\Akamai
2014-11-13 10:24 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 09:40 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-11-13 09:25 - 2008-10-29 14:22 - 00100752 _____ () C:\Users\Yater & Arif\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 09:22 - 2006-11-02 13:47 - 00381680 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 09:18 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-12 17:42 - 2012-06-30 16:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 17:29 - 2013-08-15 21:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 16:40 - 2012-04-02 19:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-12 16:40 - 2011-05-14 19:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-10 16:51 - 2012-08-09 09:43 - 00002577 _____ () C:\Users\Yater & Arif\Desktop\Microsoft Word 2010.lnk
2014-11-07 16:08 - 2006-11-02 11:33 - 01567294 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-05 12:37 - 2008-10-29 14:21 - 00000680 _____ () C:\Users\Yater & Arif\AppData\Local\d3d9caps.dat
2014-11-04 14:30 - 2009-10-03 09:37 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-04 09:56 - 2012-01-21 15:18 - 00000000 ___RD () C:\Users\Yater & Arif\Desktop\Fahrzeuge@Susan
2014-11-03 16:25 - 2012-12-05 19:06 - 00000770 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-03 16:25 - 2012-12-05 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-03 16:25 - 2012-12-05 19:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-31 23:25 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-10-30 15:03 - 2009-11-02 15:00 - 00000000 ____D () C:\Users\Yater & Arif\Documents\Yeter
2014-10-25 13:36 - 2014-10-22 12:42 - 00000000 _____ () C:\Users\Yater & Arif\Desktop\filme.txt

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\DivXSetup.exe
C:\Users\Yater & Arif\AppData\Local\Temp\MediaPreviewSetup.exe
C:\Users\Yater & Arif\AppData\Local\Temp\Quarantine.exe
C:\Users\Yater & Arif\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-22 09:34

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

die sogenannte "mp4" Datei ist immer noch da und immer noch nicht löschbar. Meinem Rechner aber geht es besser. Wenn ich die mp4 Datei nicht aufrufe sind die restlichen Funktionen wieder anwendbar nur halt alles sehr langsamer wie sonst. Wenn ich aber die mp4 Datei anklicke oder gar löschen möchte hängt sich mein Rechner wieder auf.

Bitte ich brauche Hilfe oder einen Rat? was soll ich tun?

Genauer Name und SPeicherort der MP4?

Name: Az Bi Mesafe - Işın Karaca (Lyric Video)_youtube_original

Speicherort: Im Musik Ordner (also wenn ich auf das Windows Zeichen klicke und dann rechts der Musik Ordner.

Also Benutzerkonto / Musik

Versuch die Datei mal umzubennen.

Hallo, ich habe mir von youtube einpaar mp3´s runtergeladen und habe dann festgestellt das eine Datei nicht zu öffnen ist. Die Datei gibt sich als mp4 aus und lässt sich nicht löschen, nicht umbenennen nicht verschieben. Ich kann auch nicht die Eigenschaften aufrufen. Egal was ich damit machen will sobald ich es anklicke hängt sich mein Rechner sofort auf. Ich habe bereits Programme wie Unlocker und co. ausprobiert aber leider hat nichts geholfen. Mein Rechner ist seit dem sehr langsam cpu zeigt 100% an?. Sobald ich die Datei aufrufen will hängt sich mein Rechner auf. Ich habe probiert den Rechner im abgesicherten Modus hochzufahren aber leider hängt es sich dabei auch auf. Ich habe avast, spybot und Malewarebyts drüberlauffen lassen leider ohne Erfolg. Bin am Ende meines Lateins. Bitte hat jemand eine Idee? Mein Laptop LG E500 ist ca. 8 Jahre alt und es sind so viele Sachen darauf die ich nicht verlieren will. Ich habe Vista Home Premium 32Bit SP2 als Betriebssystem.

kann mir hier keiner helfen? hallo?

hör auf zu stressen! geht es dir nicht schnell genug geh in nen laden und leg 150 Euro die Stunde hin!
Das hier ist für Lau, und wir müssen neben dem Spass hier auch noch richtig arbeiten!


ICh weiß schon warum die sich nit löschen lässt, hab aber bis jetzt keinen Schimmer wie wir das umgehen sollen. Das ist ein Windows Bug.

Scan mit SystemLook

Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit)

• Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
  

  :filefind
  Az Bi Mesafe
           

• Klicke nun auf den Button Look, um den Scan zu starten.
• Der Suchlauf kann einige Zeit dauern.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.