Windows XP: TR/Drop.softomat.an, TR/Trash.Gen, TR /Dropper Virus

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2014
Ran by Administrator (administrator) on HOME on 24-11-2014 03:39:07
Running from C:\Dokumente und Einstellungen\Administrator\Desktop
Loaded Profile: Administrator (Available profiles: Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) D:\Programme\Hi-Rez Studios\HiPatchService.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(NVIDIA Corporation) C:\Programme\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Rocket Division Software) C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe
(LogMeIn Inc.) C:\Programme\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Programme\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Program Files\ASUS\Six Engine\SixEngine.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(RealNetworks, Inc.) C:\Programme\Real\RealPlayer\Update\realsched.exe
(Adobe Systems Incorporated) C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Apple Inc.) D:\Ipod\iTunes\iTunesHelper.exe
(ScanSoft, Inc.) C:\Programme\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Programme\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(LogMeIn Inc.) C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.Systray.exe
(LogMeIn, Inc.) C:\Programme\LogMeIn Hamachi\LMIGuardianSvc.exe
(Safer-Networking Ltd.) C:\Programme\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Programme\Messenger\msmsgs.exe
(Dropbox, Inc.) C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox\bin\Dropbox.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe
(Google Inc.) C:\Programme\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Programme\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Programme\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Programme\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Programme\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Six Engine] => C:\Program Files\ASUS\Six Engine\SixEngine.exe [5964800 2008-06-03] ()
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16876032 2008-07-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TkBellExe] => C:\Programme\Real\RealPlayer\update\realsched.exe [273544 2011-06-15] (RealNetworks, Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [HTC Sync Loader] => "D:\htcUPCTLoader.exe" -startup
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => D:\Ipod\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [SSBkgdUpdate] => C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [185896 2006-09-28] (Nuance Communications, Inc.)
HKLM\...\Run: [OpwareSE4] => C:\Programme\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [75304 2006-10-11] (ScanSoft, Inc.)
HKLM\...\Run: [Nvtmru] => "C:\Programme\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [NvBackend] => C:\Programme\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [nwiz] => C:\Programme\NVIDIA Corporation\nview\nwiz.exe [2593056 2014-05-20] ()
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-11-03] (LogMeIn Inc.)
HKLM\...\Run: [Avira Systray] => C:\Programme\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SDTray] => C:\Programme\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\Run: [MSMSGS] => C:\Programme\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\Run: [Steam] => D:\Programme\Steam\Steam.exe [1940160 2014-11-12] (Valve Corporation)
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\Run: [AlcoholAutomount] => C:\Programme\Alcohol Soft\Alcohol 120\axcmd.exe [203928 2009-09-30] (Alcohol Soft Development Team)
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\MountPoints2: {26c26fe2-0f1d-11e2-958c-00248c485ffa} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\MountPoints2: {26c26fe6-0f1d-11e2-958c-00248c485ffa} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1123561945-573735546-839522115-500\...\MountPoints2: {bdf7dd87-64a1-11de-81c5-806d6172696f} - H:\.\Bin\ASSETUP.exe
Startup: C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1123561945-573735546-839522115-500\Software\Microsoft\Internet Explorer\Main,Local Page = hxxp://www.google.com/
HKU\S-1-5-21-1123561945-573735546-839522115-500\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1123561945-573735546-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.schuelervz.net/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = hxxp://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SearchScopes: HKU\S-1-5-21-1123561945-573735546-839522115-500 -> {CE46262B-A85E-4320-A7A9-808118219DBC} URL = hxxp://jookz.toolbaroptions.com/?tmp=toolbar_results_jookz_v2&prt=jkwbtb01ie&v=15&Keywords={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Programme\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> D:\Programme\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: foxy -> {DAEB27B6-FFA6-417F-B060-C5413E6269AA} -> C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\foxydeal\IE\foxyDeal.dll (foxyDeal.com)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\..\Interfaces\{A4DDA6B4-D1EA-4E68-9B79-91CEE8BFEEE7}: [NameServer] 192.168.178.222,217.237.150.97

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\xujz2yaf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> D:\Ipod\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @gamersfirst.com/LiveLauncher -> C:\Programme\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin: @java.com/DTPlugin,version=1.6.0_37 -> C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Programme\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @perfectworld.com/npArcPlayNowPlugin -> D:\Programme\Perfect World Entertainment\Arc\plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin: @real.com/nppl3260;version=12.0.1.647 -> C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.647 -> C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.652 -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.652 -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 -> C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=0.9.9 -> C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1123561945-573735546-839522115-500: @unity3d.com/UnityPlayer,version=1.0 -> C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Extension: Avira Browser Safety - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\xujz2yaf.default\Extensions\abs@avira.com [2014-09-30]
FF Extension: Battlefield Heroes Updater - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Firefox\Profiles\xujz2yaf.default\Extensions\battlefieldheroespatcher@ea.com [2011-05-27]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-06-29]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-06-15]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff [2012-12-10]

Chrome: 
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Programme\Google\Chrome\Application\39.0.2171.65\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Programme\Google\Chrome\Application\39.0.2171.65\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Programme\Google\Chrome\Application\39.0.2171.65\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Programme\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Programme\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Programme\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (VLC Multimedia Plug-in) - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - D:\Ipod\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Profile: C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27]
CHR Extension: (YouTube) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-19]
CHR Extension: (Google-Suche) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-19]
CHR Extension: (Avira Browserschutz) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-28]
CHR Extension: (Google Wallet) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Google Mail) - C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-19]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-06-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [993584 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008 2012-12-21] (Apple Inc.)
R2 Avira.OE.ServiceHost; C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Programme\Gemeinsame Dateien\BattlEye\BEService.exe [45056 2013-01-28] () [File not signed]
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2014-10-27] (Google Inc.)
R2 Hamachi2Svc; C:\Programme\LogMeIn Hamachi\hamachi-2.exe [1894224 2014-11-03] (LogMeIn Inc.)
R2 HiPatchService; D:\Programme\Hi-Rez Studios\HiPatchService.exe [9216 2013-06-18] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-02-20] (Apple Inc.)
R2 JavaQuickStarterService; C:\Programme\Java\jre6\bin\jqs.exe [153584 2012-12-10] (Sun Microsystems, Inc.)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114288 2014-09-28] (Mozilla Foundation)
R2 NvNetworkService; C:\Programme\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2012-12-31] ()
R2 SDScannerService; C:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Programme\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 StarWindServiceAE; C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S3 Steam Client Service; C:\Programme\Gemeinsame Dateien\Steam\SteamService.exe [407336 2011-03-16] (Valve Corporation)
S3 TunngleService; D:\Programme\Tunngle\TnglCtrl.exe [745368 2012-11-26] (Tunngle.net GmbH) [File not signed]
R2 wlidsvc; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE [1529728 2009-08-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\WINDOWS\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 L1e; C:\WINDOWS\System32\DRIVERS\l1e51x86.sys [38400 2008-09-23] (Atheros Communications, Inc.)
R0 Lbd; C:\WINDOWS\System32\DRIVERS\Lbd.sys [64288 2010-07-01] (Lavasoft AB)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R0 mv61xx; C:\WINDOWS\System32\DRIVERS\mv61xx.sys [151592 2008-07-22] (Marvell Semiconductor, Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R1 SAVRKBootTasks; C:\WINDOWS\system32\SAVRKBootTasks.sys [18816 2009-06-18] (Sophos Plc) [File not signed]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [722416 2011-11-18] () [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH)
R2 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [File not signed]
R3 tap0901t; C:\WINDOWS\System32\DRIVERS\tap0901t.sys [27136 2009-09-16] (Tunngle.net) [File not signed]
U3 aadyv1ag; C:\WINDOWS\system32\Drivers\aadyv1ag.sys [0 ] (Microsoft Corporation)
U3 at49avjd; C:\WINDOWS\system32\Drivers\at49avjd.sys [0 ] (Microsoft Corporation)
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S4 IntelIde; No ImagePath
S3 LVUSBSta; system32\drivers\LVUSBSta.sys [X]
S3 MEMSWEEP2; \??\C:\WINDOWS\system32\14.tmp [X]
S3 PID_0928; system32\DRIVERS\LV561AV.SYS [X]
S3 RT61; system32\DRIVERS\RT61.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-24 00:41 - 2014-11-24 00:41 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\luio.bmp
2014-11-23 22:28 - 2014-11-23 22:28 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Desktop\FRST-OlderVersion
2014-11-21 15:09 - 2014-11-24 03:39 - 00027952 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\FRST.txt
2014-11-21 15:08 - 2014-11-21 15:09 - 00075866 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Addition.txt
2014-11-21 15:07 - 2014-11-23 22:28 - 01110016 _____ (Farbar) C:\Dokumente und Einstellungen\Administrator\Desktop\FRST.exe
2014-11-21 00:49 - 2014-11-18 03:05 - 00012587 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\AdwCleaner[R2].txt
2014-11-21 00:48 - 2014-10-31 11:32 - 00021227 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\AdwCleaner[R0].txt
2014-11-21 00:31 - 2014-11-20 23:40 - 00000716 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\defogger_disable.log
2014-11-21 00:17 - 2014-11-21 00:17 - 00010189 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Gmer.txt
2014-11-20 23:54 - 2014-11-21 15:08 - 00044180 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\FRST1.txt
2014-11-20 23:28 - 2014-11-20 23:28 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT\Startmenü\Programme
2014-11-20 23:28 - 2014-11-20 23:28 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT\Startmenü
2014-11-20 23:25 - 2014-11-24 01:09 - 00000636 _____ () C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-11-20 23:25 - 2014-11-20 23:41 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2014-11-20 23:25 - 2014-11-20 23:25 - 00001806 _____ () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Spybot-S&D Start Center.lnk
2014-11-20 23:25 - 2014-11-20 23:25 - 00001806 _____ () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Spybot-S&D Start Center.lnk
2014-11-20 23:25 - 2014-11-20 23:25 - 00001800 _____ () C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Spybot-S&D Start Center.lnk
2014-11-20 23:25 - 2014-11-20 23:25 - 00000608 _____ () C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-11-20 23:25 - 2014-11-20 23:25 - 00000438 _____ () C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-11-20 23:25 - 2014-11-20 23:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Spybot - Search & Destroy 2
2014-11-20 23:25 - 2014-11-20 23:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Spybot - Search & Destroy 2
2014-11-20 23:25 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-11-20 23:24 - 2014-11-20 23:28 - 00000000 ____D () C:\Programme\Spybot - Search & Destroy 2
2014-11-20 22:00 - 2014-11-20 22:00 - 00019020 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Trojanerboard 2.odt
2014-11-20 21:58 - 2014-11-20 21:58 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Trojanerboard.bmp
2014-11-20 17:58 - 2014-11-20 18:53 - 00022598 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Handout luiser.odt
2014-11-18 03:15 - 2014-11-18 03:15 - 00000750 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\JRT.txt
2014-11-17 17:38 - 2014-11-17 17:38 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Oral b.bmp
2014-11-17 00:56 - 2014-11-17 00:56 - 00098304 _____ () C:\WINDOWS\Minidump\Mini111714-01.dmp
2014-11-16 23:12 - 2014-11-16 23:12 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leia sonnenbrand.bmp
2014-11-16 20:15 - 2014-11-16 20:14 - 00098304 _____ () C:\WINDOWS\Minidump\Mini111614-01.dmp
2014-11-14 00:50 - 2014-11-14 00:50 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\luuuuuuu.bmp
2014-11-14 00:50 - 2014-11-14 00:50 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\luuuu.bmp
2014-11-13 00:46 - 2014-11-13 00:46 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leia jabi+.bmp
2014-11-11 00:48 - 2014-11-11 00:48 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\lupinglouei.bmp
2014-11-10 23:17 - 2014-11-10 23:17 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leia dance.bmp
2014-11-10 00:51 - 2014-11-10 00:51 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leia 10.11.bmp
2014-11-06 23:21 - 2014-11-06 23:21 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\liaa.bmp
2014-11-06 22:26 - 2014-11-06 22:26 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\luiea.bmp
2014-11-06 22:14 - 2014-11-06 22:14 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leiur.bmp
2014-11-06 22:09 - 2014-11-06 22:09 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\wewe.bmp
2014-11-06 22:05 - 2014-11-06 22:05 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\thththtth.bmp
2014-11-06 21:08 - 2014-11-06 21:08 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\luiii.bmp
2014-11-06 00:43 - 2014-11-06 00:43 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leiaaa.bmp
2014-11-06 00:34 - 2014-11-06 00:34 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\jhfj.bmp
2014-11-06 00:34 - 2014-11-06 00:34 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\ewaewa.bmp
2014-11-05 22:08 - 2014-11-05 22:08 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leiadiesüße.bmp
2014-11-04 19:42 - 2014-11-07 16:49 - 00000834 _____ () C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Avira.lnk
2014-11-04 12:44 - 2014-11-04 12:44 - 00000000 ____D () C:\Programme\LogMeIn Hamachi
2014-11-04 12:44 - 2014-11-04 12:44 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\LogMeIn Hamachi
2014-11-04 12:44 - 2014-11-04 12:44 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\LogMeIn Hamachi
2014-11-04 01:22 - 2014-11-04 01:22 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leiiiiui.bmp
2014-11-04 01:21 - 2014-11-04 01:21 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leeiiia.bmp
2014-11-03 23:56 - 2014-11-03 23:56 - 06220854 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\leeiii.bmp
2014-10-31 12:21 - 2014-10-31 12:21 - 00000889 _____ () C:\Dokumente und Einstellungen\Administrator\Desktop\Revo Uninstaller.lnk
2014-10-31 12:21 - 2014-10-31 12:21 - 00000000 ____D () C:\Programme\VS Revo Group
2014-10-31 12:17 - 2014-11-24 03:39 - 00000000 ____D () C:\FRST
2014-10-31 12:07 - 2014-10-31 12:07 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-10-31 11:42 - 2014-11-20 19:20 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-10-31 11:42 - 2014-10-31 11:42 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-31 11:42 - 2014-10-31 11:42 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2014-10-31 11:42 - 2014-10-31 11:42 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-10-31 11:42 - 2014-10-31 11:42 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-10-31 11:42 - 2014-10-01 11:11 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-10-31 11:42 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-10-31 11:31 - 2014-11-20 19:37 - 00000000 ____D () C:\AdwCleaner
2014-10-27 03:44 - 2014-10-27 03:44 - 00000000 ____D () C:\Programme\GUME19.tmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-24 03:39 - 2009-06-29 11:09 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp
2014-11-24 03:27 - 2013-01-04 14:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-24 03:21 - 2013-08-14 20:49 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
2014-11-24 02:54 - 2011-06-15 19:55 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-24 01:13 - 2009-06-29 11:53 - 01406080 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-24 01:11 - 2013-12-04 20:32 - 00034500 _____ () C:\WINDOWS\system32\nvAppTimestamps
2014-11-24 01:10 - 2013-08-14 20:49 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
2014-11-24 01:10 - 2012-09-10 21:31 - 00000000 ___RD () C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Dropbox
2014-11-24 01:10 - 2012-09-10 21:29 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox
2014-11-24 01:10 - 2009-06-29 11:03 - 01231324 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-24 01:09 - 2011-06-15 19:56 - 00000294 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-573735546-839522115-500.job
2014-11-24 01:09 - 2011-06-15 19:56 - 00000286 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-573735546-839522115-500.job
2014-11-24 01:09 - 2009-09-21 20:09 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-11-24 01:09 - 2009-09-21 20:09 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-11-24 01:09 - 2007-10-29 13:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-11-24 01:08 - 2014-03-27 15:39 - 00000238 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2014-11-24 01:08 - 2011-06-15 19:55 - 00001086 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-24 01:08 - 2009-06-29 11:09 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-24 00:46 - 2009-06-29 13:45 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Skype
2014-11-23 22:24 - 2009-06-29 16:01 - 00000000 ___RD () C:\Programme
2014-11-23 18:17 - 2010-07-01 17:18 - 00000470 _____ () C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
2014-11-23 01:45 - 2012-12-11 23:56 - 00894958 _____ () C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1123561945-573735546-839522115-500-0.dat
2014-11-23 01:45 - 2012-12-11 23:56 - 00181438 _____ () C:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2014-11-23 01:45 - 2009-06-29 11:09 - 00032560 _____ () C:\WINDOWS\SchedLgU.Txt
2014-11-23 01:45 - 2009-06-29 11:09 - 00000190 __SHC () C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2014-11-23 01:45 - 2009-06-29 11:09 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator
2014-11-23 00:16 - 2009-07-31 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\dvdcss
2014-11-22 00:25 - 2010-05-25 16:29 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TS3Client
2014-11-21 23:11 - 2014-01-27 21:20 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Battle.net
2014-11-21 22:10 - 2012-09-23 13:15 - 00000276 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2014-11-21 02:33 - 2013-11-21 10:03 - 00395092 _____ () C:\WINDOWS\setupapi.log
2014-11-20 23:32 - 2010-07-01 16:23 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Spybot - Search & Destroy
2014-11-20 23:32 - 2010-07-01 16:23 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Spybot - Search & Destroy
2014-11-20 23:28 - 2009-06-29 11:06 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT
2014-11-20 23:25 - 2009-06-29 11:53 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme
2014-11-20 23:25 - 2009-06-29 11:53 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme
2014-11-20 21:05 - 2009-06-29 12:56 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-11-20 19:48 - 2009-06-29 15:07 - 00000000 ____D () C:\WINDOWS\Registration
2014-11-18 03:06 - 2009-07-31 18:13 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\ICQ
2014-11-18 03:06 - 2009-07-31 18:13 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\ICQ
2014-11-18 02:40 - 2009-06-29 13:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\vlc
2014-11-15 15:19 - 2009-06-29 11:09 - 00000000 ___RD () C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
2014-11-15 15:18 - 2012-09-10 21:29 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Dropbox
2014-11-13 20:31 - 2013-11-21 10:03 - 00002170 _____ () C:\WINDOWS\setupact.log
2014-11-13 12:21 - 2009-07-31 18:47 - 00103424 ____C () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-12 19:28 - 2012-07-15 11:50 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-11-12 19:28 - 2011-08-30 19:25 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-11-12 15:43 - 2013-08-09 00:29 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-12 15:39 - 2009-06-29 12:45 - 100445232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-08 15:15 - 2014-03-27 15:39 - 00000232 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2014-11-07 18:44 - 2014-08-27 17:16 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Package Cache
2014-11-07 18:44 - 2014-08-27 17:16 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Package Cache
2014-11-07 16:49 - 2014-01-06 21:08 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Avira
2014-11-07 16:49 - 2014-01-06 21:08 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Avira
2014-11-07 16:48 - 2014-01-06 21:07 - 00000000 ____D () C:\Programme\Avira
2014-11-06 16:30 - 2011-03-07 18:19 - 00191488 ___SH () C:\Dokumente und Einstellungen\Administrator\Desktop\Thumbs.db
2014-11-04 01:20 - 2009-06-29 11:09 - 00000000 ___RD () C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Eigene Bilder
2014-10-31 12:21 - 2009-06-29 11:09 - 00000000 ___RD () C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme
2014-10-31 12:00 - 2009-06-29 10:20 - 00000000 ____D () C:\WINDOWS\l2schemas
2014-10-31 11:42 - 2010-07-01 16:27 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Malwarebytes
2014-10-31 11:42 - 2010-07-01 16:27 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Malwarebytes
2014-10-28 11:55 - 2012-07-09 15:14 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Desktop\Dies Das Open Office
2014-10-28 02:24 - 2014-01-24 22:36 - 00010101 _____ () C:\WINDOWS\wmsetup.log

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpa4ua6x.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================