Hallo liebes Trojaner-Board-Team,

wir haben 2010 den alten PC meiner Schwester bekommen, hatten allerdings bisher keine Verwendung dafür. Da sich das vor Kurzem geändert hat, haben wir den PC letzten Monat in Betrieb genommen. Der PC läuft derzeit mit Windows XP (ja, auch wenn die Sicherheitsupdates hierfür eingestellt worden sind). Ich habe Avast (vorher war Avira drauf) und Malwarebytes installiert & einen Virenscan durchgeführt, dabei haben beide Programme Trojaner und PUPs gefunden. Ich habe die Funde in Quarantäne verschoben & dann gelöscht. Da meine Mutter den PC aber u.a. für Online Banking nutzen will, möchte ich auf Nummer sicher gehen, dass keine Spuren im System zurückgeblieben sind. Der letzte Scan mit Malwarebytes zeigte keine Funde mehr.

Bitte um Angabe, ob/welche Scanlogs gewünscht werden (nur die aktuellsten oder die mit Funden?)

Vielen herzlichen Dank im Voraus

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-02-2015
Ran by Matze (administrator) on PC-WONNI on 25-02-2015 14:25:39
Running from C:\Dokumente und Einstellungen\Matze\Desktop
Loaded Profiles: Matze (Available profiles: Matze & Wonni & Administrator)
Platform: Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 6 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Programme\AVAST Software\Avast\AvastSvc.exe
(AVM Berlin) C:\Programme\avmwlanstick\WLanNetService.exe
(Microsoft Corporation) C:\WINDOWS\system32\cisvc.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(Logitech Inc.) C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\WINDOWS\system32\snmp.exe
(Analog Devices, Inc.) C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
(Logitech Inc.) C:\Programme\Logitech\iTouch\iTouch.exe
(Analog Devices, Inc.) C:\Programme\Analog Devices\SoundMAX\SMTray.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jusched.exe
(AVAST Software) C:\Programme\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\system32\cidaemon.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\plugin-container.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [zBrowser Launcher] => C:\Programme\Logitech\iTouch\iTouch.exe [631362 2002-11-23] (Logitech Inc.)
HKLM\...\Run: [Smapp] => C:\Programme\Analog Devices\SoundMAX\SMTray.exe [143360 2003-05-05] (Analog Devices, Inc.)
HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Java\jre6\bin\jusched.exe [149280 2009-10-11] (Sun Microsystems, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Programme\AVAST Software\Avast\AvastUI.exe [5225064 2015-02-10] (AVAST Software)
AppInit_DLLs: NVDESK32.DLL => NVDESK32.DLL File Not Found
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Programme\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1292428093-1844823847-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1292428093-1844823847-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1292428093-1844823847-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-1292428093-1844823847-839522115-1003 - Microsoft Url Sucheingriff - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\SHDOCVW.dll (Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing.
BHO: No Name -> {84B94901-3645-4D80-A6B7-4D0050B19455} ->  No File
BHO: No Name -> {CD9B7762-DFBC-42B1-BB30-02A78287B456} ->  No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
BHO: No Name -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} ->  No File
Toolbar: HKLM - No Name - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
DPF: {33564D57-9980-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\Parameters: [NameServer]  

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Mozilla\Firefox\Profiles\w7epqghc.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npnul32.dll (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Mozilla\Firefox\Profiles\w7epqghc.default\searchplugins\google-avast.xml
FF Extension: Amazon-Startcenter - C:\Programme\Mozilla Firefox\extensions\{144D1513-0819-4538-AD26-D515AF443AE7} [2015-02-10]
FF Extension: Home Extension - C:\Programme\Mozilla Firefox\extensions\{2E6861CA-9A88-4B7B-B935-F810DE84D259} [2015-02-10]
FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2015-02-10]
FF Extension: Google Kontextmen&#252; - C:\Programme\Mozilla Firefox\extensions\{3F4D6A2C-841D-403C-8CD8-48E54192DDEB} [2015-02-10]
FF Extension: eBay-Startcenter - C:\Programme\Mozilla Firefox\extensions\{7A7EF87E-95DB-4A84-83E8-E0FE7B20017F} [2015-02-10]
FF Extension: Preispiraten4 - C:\Programme\Mozilla Firefox\extensions\{A86278FF-6B63-446C-B109-DD4E1BAAC868} [2015-02-10]
FF Extension: eBay Statusbar Button - C:\Programme\Mozilla Firefox\extensions\{B1FC0AB8-EEDC-451A-9185-A0D5E308BBDD} [2015-02-10]
FF Extension: eBay Kontextmen&#252; - C:\Programme\Mozilla Firefox\extensions\{BD5A19C7-FAD9-4D84-A0CB-F7241D6443D0} [2015-02-10]
FF Extension: Preispiraten 4 Kontextmen&#252; - C:\Programme\Mozilla Firefox\extensions\{D2A8BC29-8CA3-4C0A-A206-631C44E9620F} [2015-02-10]
FF Extension: Amazon Kontextmen&#252; - C:\Programme\Mozilla Firefox\extensions\{EC1B67CA-A2CD-4931-915A-63D5341D1285} [2015-02-10]
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff [2008-12-10]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Programme\AVAST Software\Avast\WebRep\FF [2015-02-10]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Programme\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-02-10]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Programme\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-10]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Programme\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-10] (AVAST Software)
R2 AVM WLAN Connection Service; C:\Programme\avmwlanstick\WlanNetService.exe [364544 2008-09-05] (AVM Berlin) [File not signed]
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Programme\Java\jre6\bin\jqs.exe [153376 2009-10-11] (Sun Microsystems, Inc.)
S3 LPDSVC; C:\WINDOWS\System32\tcpsvcs.exe [19456 2001-08-18] (Microsoft Corporation)
R2 LVPrcSrv; C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe [154136 2009-10-07] (Logitech Inc.)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114800 2015-02-10] (Mozilla Foundation)
S3 NBService; C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe [724992 2006-08-22] (Nero AG) [File not signed]
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 SoundMAX Agent Service (default); C:\Programme\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-20] (Analog Devices, Inc.) [File not signed]
S2 gupdate; "C:\Programme\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Programme\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 InstallShield; "C:\WINDOWS\system32\itdriver.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACEDRV02; C:\WINDOWS\System32\drivers\ACEDRV02.sys [97280 2007-03-17] (ACE GmbH) [File not signed]
R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21035 2009-03-04] (Meetinghouse Data Communications) [File not signed]
R1 asuskbnt; C:\WINDOWS\System32\DRIVERS\asuskbnt.sys [17150 2003-04-24] (ASUSTeK COMPUTER INC.) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2015-02-10] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2015-02-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2015-02-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2015-02-10] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2015-02-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422760 2015-02-10] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2015-02-10] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2015-02-10] ()
S3 avmeject; C:\WINDOWS\System32\drivers\avmeject.sys [4352 2008-09-05] (AVM Berlin) [File not signed]
S3 BVRPMPR5; C:\WINDOWS\System32\drivers\BVRPMPR5.SYS [44224 2005-06-22] (BVRP Software) [File not signed]
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2004-08-03] (Microsoft Corporation)
R2 EIO; C:\WINDOWS\system32\drivers\EIO.sys [8703 2003-01-29] (ASUSTeK Computer Inc.) [File not signed]
S3 FilterService; C:\WINDOWS\System32\DRIVERS\lvuvcflt.sys [23832 2009-10-07] (Logitech Inc.)
S3 FWLANUSB; C:\WINDOWS\System32\DRIVERS\fwlanusb.sys [265088 2008-09-05] (AVM GmbH)
S3 itchfltr; C:\WINDOWS\System32\DRIVERS\itchfltr.sys [12640 2002-11-15] (Logitech, Inc.)
S3 L8042pr2; C:\WINDOWS\System32\DRIVERS\L8042pr2.Sys [52238 2002-11-08] (Logitech, Inc.)
R3 LCcfltr; C:\WINDOWS\System32\drivers\lccfltr.sys [14156 2002-11-08] (Logitech, Inc.)
S3 LHidUsb; C:\WINDOWS\System32\Drivers\LHidUsb.Sys [41420 2002-11-08] (Logitech, Inc.)
R3 LVPr2Mon; C:\WINDOWS\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2004-08-03] (Microsoft Corporation)
S3 pmxscan; C:\WINDOWS\System32\DRIVERS\usbscan.sys [15104 2004-08-03] (Microsoft Corporation)
R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [36528 2006-08-25] (Sonic Solutions) [File not signed]
R3 rtl8029; C:\WINDOWS\System32\DRIVERS\RTL8029.SYS [19017 2001-08-17] (Realtek Semiconductor Corporation)
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [28624 2015-02-10] () [File not signed]
R0 sfdrv01; C:\WINDOWS\System32\drivers\sfdrv01.sys [50688 2005-08-10] (Protection Technology) [File not signed]
R0 sfhlp02; C:\WINDOWS\System32\drivers\sfhlp02.sys [6656 2005-05-16] (Protection Technology) [File not signed]
R0 sfsync02; C:\WINDOWS\System32\drivers\sfsync02.sys [19968 2005-08-10] (Protection Technology) [File not signed]
R1 SSHDRV61; C:\WINDOWS\System32\drivers\SSHDRV61.sys [36864 2007-01-05] () [File not signed]
S3 USBAAPL; C:\WINDOWS\System32\Drivers\usbaapl.sys [32000 2008-11-07] (Apple, Inc.) [File not signed]
R0 viaagp1; C:\WINDOWS\System32\DRIVERS\viaagp1.sys [26880 2002-12-27] (VIA Technologies, Inc.)
R0 viasraid; C:\WINDOWS\System32\drivers\viasraid.sys [75904 2003-06-12] (VIA Technologies inc,.ltd)
S3 vulfnths; C:\WINDOWS\System32\Drivers\vulfnth.sys [6912 2002-10-24] (VIA Technologies, Inc.) [File not signed]
S3 vulfntrs; C:\WINDOWS\System32\Drivers\vulfntr.sys [11392 2003-05-24] (VIA Technologies, Inc.) [File not signed]
S2 ASPI32; No ImagePath
S3 BtAudio; System32\DRIVERS\btaudio.sys [X]
S3 BTDriver; System32\DRIVERS\btport.sys [X]
S3 BTWDNDIS; System32\DRIVERS\btwdndis.sys [X]
S0 ElbyVCD; System32\DRIVERS\ElbyVCD.sys [X]
S0 IFP800; system32\drivers\ifp800.sys [X]
S4 IntelIde; No ImagePath
S3 RTLWUSB; system32\DRIVERS\wg111v2.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96256 2004-08-03] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 14:25 - 2015-02-25 14:26 - 00017540 _____ () C:\Dokumente und Einstellungen\Matze\Desktop\FRST.txt
2015-02-25 14:25 - 2015-02-25 14:25 - 01127424 _____ (Farbar) C:\Dokumente und Einstellungen\Matze\Desktop\FRST.exe
2015-02-25 14:25 - 2015-02-25 14:25 - 00000000 ____D () C:\FRST
2015-02-25 13:26 - 2015-02-25 13:26 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-08.dmp
2015-02-25 13:01 - 2015-02-25 13:01 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-07.dmp
2015-02-25 12:59 - 2015-02-25 12:59 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-06.dmp
2015-02-25 12:57 - 2015-02-25 12:57 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-05.dmp
2015-02-25 12:20 - 2015-02-25 13:22 - 00000000 ____D () C:\Programme\Temp
2015-02-25 12:20 - 1999-01-29 09:39 - 00057344 _____ () C:\WINDOWS\system\S6E10USD.DLL
2015-02-25 12:20 - 1999-01-04 14:33 - 00139776 _____ () C:\WINDOWS\system\A4USBEXT.DLL
2015-02-25 12:20 - 1998-09-16 17:45 - 00040960 _____ () C:\WINDOWS\system\S6E10CPL.CPL
2015-02-25 11:59 - 2015-02-25 11:59 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-04.dmp
2015-02-25 11:57 - 2015-02-25 11:57 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-03.dmp
2015-02-25 11:48 - 1998-07-07 14:42 - 00278528 _____ (Pixel Translations Incorporated) C:\WINDOWS\system32\PIXDFLTN.DLL
2015-02-25 11:48 - 1998-07-07 14:42 - 00046512 _____ () C:\WINDOWS\system32\EPSN.DLL
2015-02-25 11:48 - 1998-07-07 14:42 - 00026624 _____ (Pixel Translations Incorporated) C:\WINDOWS\system32\PIXPERMN.DLL
2015-02-25 11:48 - 1998-07-07 14:42 - 00014848 _____ (Pixel Translations Incorporated) C:\WINDOWS\system32\PIXLOCN.DLL
2015-02-25 11:48 - 1998-07-07 14:42 - 00012126 _____ () C:\WINDOWS\system32\PIXPCZ.DLL
2015-02-25 11:48 - 1998-07-07 14:42 - 00011934 _____ () C:\WINDOWS\system32\PIXPNR.DLL
2015-02-25 11:47 - 2015-02-25 11:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\WINDOWS
2015-02-25 11:47 - 1999-02-26 15:39 - 00299008 _____ (InstallShield Corporation, Inc.) C:\WINDOWS\unin0407.exe
2015-02-25 11:43 - 2015-02-25 11:43 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-02.dmp
2015-02-25 11:41 - 2015-02-25 11:41 - 00065536 _____ () C:\WINDOWS\Minidump\Mini022515-01.dmp
2015-02-25 11:38 - 2015-02-25 12:01 - 00000000 ____D () C:\Programme\1200 CP
2015-02-25 11:38 - 2015-02-25 11:38 - 00086400 _____ () C:\WINDOWS\~GLC0000.TMP
2015-02-25 11:38 - 1998-12-03 12:07 - 00103424 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Ltfil10n.dll
2015-02-25 11:38 - 1998-12-02 11:51 - 00010297 _____ () C:\WINDOWS\system\msfcepp2.vxd
2015-02-25 11:38 - 1998-12-01 14:00 - 00266752 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Lfcmp10n.dll
2015-02-25 11:38 - 1998-12-01 14:00 - 00122368 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Lftif10n.dll
2015-02-25 11:38 - 1998-12-01 13:59 - 00034304 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Lfbmp10n.dll
2015-02-25 11:38 - 1998-12-01 13:58 - 00297472 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Ltkrn10n.dll
2015-02-25 11:38 - 1998-11-30 13:51 - 00077824 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Lffax10n.dll
2015-02-25 11:38 - 1998-11-22 20:46 - 00600576 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\Ltwrp10n.dll
2015-02-25 11:38 - 1998-09-16 09:07 - 00041472 _____ () C:\WINDOWS\system32\Drivers\sfc4.sys
2015-02-25 11:38 - 1998-09-01 17:07 - 00001942 _____ () C:\WINDOWS\ACROREAD.INI
2015-02-25 11:38 - 1997-01-22 12:33 - 00349696 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LTKRN70N.DLL
2015-02-25 11:38 - 1997-01-20 19:51 - 00053760 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LTFIL70N.DLL
2015-02-25 11:38 - 1997-01-20 15:54 - 00066560 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFTIF70N.DLL
2015-02-25 11:38 - 1997-01-20 15:53 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFCAL70N.DLL
2015-02-25 11:38 - 1997-01-20 11:51 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFTGA70N.DLL
2015-02-25 11:38 - 1997-01-20 11:49 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFPCD70N.DLL
2015-02-25 11:38 - 1997-01-20 11:43 - 00024064 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFPCT70N.DLL
2015-02-25 11:38 - 1997-01-20 11:42 - 00025088 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFLMB70N.DLL
2015-02-25 11:38 - 1997-01-20 11:42 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFMAC70N.DLL
2015-02-25 11:38 - 1997-01-20 11:41 - 00029184 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFLMA70N.DLL
2015-02-25 11:38 - 1997-01-20 11:41 - 00020480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFIMG70N.DLL
2015-02-25 11:38 - 1997-01-20 11:40 - 00032768 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFGIF70N.DLL
2015-02-25 11:38 - 1997-01-20 11:40 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFICA70N.DLL
2015-02-25 11:38 - 1997-01-20 11:39 - 00035328 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFFPX70N.DLL
2015-02-25 11:38 - 1997-01-20 11:38 - 00175104 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFFAX70N.DLL
2015-02-25 11:38 - 1997-01-20 11:37 - 00186880 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFCMP70N.DLL
2015-02-25 11:38 - 1997-01-20 11:37 - 00024576 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFBMP70N.DLL
2015-02-25 11:38 - 1997-01-20 11:36 - 00017920 _____ (LEAD Technologies, Inc.) C:\WINDOWS\system\LFAVI70N.DLL
2015-02-25 11:38 - 1996-11-14 20:49 - 00091136 _____ () C:\WINDOWS\system\LFKODAK.DLL
2015-02-25 11:38 - 1996-09-11 16:33 - 00048640 _____ () C:\WINDOWS\system\INETWH32.DLL
2015-02-25 11:38 - 1996-08-28 08:48 - 00009136 _____ () C:\WINDOWS\system\INETWH16.DLL
2015-02-25 11:38 - 1996-06-25 15:46 - 00001901 _____ () C:\WINDOWS\ATM.INI
2015-02-25 11:38 - 1996-06-25 15:46 - 00000027 _____ () C:\WINDOWS\ACROGRAF.INI
2015-02-25 11:38 - 1996-04-02 20:36 - 00151552 _____ () C:\WINDOWS\system\HYPERTOP.DLL
2015-02-25 11:38 - 1996-02-23 13:39 - 00081408 _____ () C:\WINDOWS\system\CNT31.DLL
2015-02-25 11:38 - 1993-11-23 13:53 - 00021648 _____ () C:\WINDOWS\system\CTL3DV2.DLL
2015-02-25 11:31 - 2015-02-25 13:22 - 00000000 ____D () C:\Programme\Paint Shop Pro 6
2015-02-11 19:39 - 2015-02-11 19:39 - 00000000 ____D () C:\Dokumente und Einstellungen\Wonni\Lokale Einstellungen\Anwendungsdaten\Temp
2015-02-11 19:37 - 2015-02-11 19:37 - 00000000 ____D () C:\Dokumente und Einstellungen\Wonni\Anwendungsdaten\AVAST Software
2015-02-10 21:40 - 2015-02-10 21:40 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\VSRevoGroup
2015-02-10 21:10 - 2015-02-10 21:11 - 00377660 _____ () C:\Dokumente und Einstellungen\Matze\Eigene Dateien\cc_20150210_2110.reg
2015-02-10 20:13 - 2015-02-10 20:13 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Real
2015-02-10 19:41 - 2015-02-10 21:17 - 00000000 ____D () C:\WINDOWS\SxsCaPendDel
2015-02-10 17:57 - 2015-02-25 12:14 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-10 17:56 - 2015-02-10 17:56 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2015-02-10 17:56 - 2015-02-10 17:56 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2015-02-10 17:56 - 2015-02-10 17:56 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2015-02-10 17:56 - 2015-02-10 17:56 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2015-02-10 17:56 - 2014-11-21 06:14 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-10 17:56 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-02-10 17:55 - 2015-02-25 13:41 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-10 17:55 - 2015-02-10 17:55 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-10 17:55 - 2015-02-10 17:55 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-02-10 17:55 - 2015-02-10 17:55 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McAfee
2015-02-10 17:51 - 2015-02-10 17:56 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Lokale Einstellungen\Anwendungsdaten\Adobe
2015-02-10 17:44 - 2015-02-10 17:44 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Sun
2015-02-10 15:39 - 2015-02-10 15:39 - 00000000 __SHD () C:\WINDOWS\CSC
2015-02-10 15:27 - 2015-02-10 15:27 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Lokale Einstellungen\Anwendungsdaten\Temp
2015-02-10 15:25 - 2015-02-25 13:30 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-10 15:24 - 2015-02-10 15:24 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\AVAST Software
2015-02-10 15:23 - 2015-02-10 15:23 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2015-02-10 15:21 - 2015-02-25 13:30 - 00001086 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-10 15:21 - 2015-02-25 13:30 - 00000370 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-02-10 15:21 - 2015-02-10 15:21 - 00001695 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Avast Free Antivirus.lnk
2015-02-10 15:21 - 2015-02-10 15:21 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AVAST Software
2015-02-10 15:21 - 2015-02-10 15:21 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Google
2015-02-10 15:20 - 2015-02-10 15:20 - 00787800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00422760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-02-10 15:20 - 2015-02-10 15:20 - 00206248 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00070384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00057928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00055240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-02-10 15:20 - 2015-02-10 15:20 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-02-10 15:20 - 2015-02-10 15:20 - 00000000 ____D () C:\Programme\AVAST Software
2015-02-10 15:19 - 2015-02-10 15:20 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
2015-02-10 15:19 - 2015-02-10 15:19 - 00087888 _____ () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2015-02-10 15:02 - 2015-02-10 15:02 - 00000000 ____D () C:\Programme\Mozilla Firefox
2015-02-10 15:00 - 2015-02-10 15:00 - 00000939 _____ () C:\Dokumente und Einstellungen\Matze\Eigene Dateien\Meine freigegebenen Ordner.lnk
2015-02-10 14:53 - 2015-02-10 14:53 - 00000889 _____ () C:\Dokumente und Einstellungen\Matze\Desktop\Revo Uninstaller.lnk
2015-02-10 14:53 - 2015-02-10 14:53 - 00000000 ____D () C:\Programme\VS Revo Group

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 14:26 - 2010-05-01 12:38 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze\Lokale Einstellungen\Temp
2015-02-25 13:35 - 2001-08-18 11:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-25 13:31 - 2008-03-14 21:38 - 01037227 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-25 13:30 - 2006-10-03 11:26 - 00032180 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-25 13:29 - 2006-10-03 13:06 - 00000000 ____D () C:\WINDOWS\system32\ias
2015-02-25 13:29 - 2006-10-03 12:13 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-02-25 13:29 - 2006-10-03 12:13 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-02-25 13:29 - 2006-10-03 11:19 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-25 13:28 - 2010-05-01 12:38 - 00000190 ___SH () C:\Dokumente und Einstellungen\Matze\ntuser.ini
2015-02-25 13:28 - 2006-10-03 12:12 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-02-25 13:25 - 2007-12-09 20:35 - 1609383936 _____ () C:\WINDOWS\MEMORY.DMP
2015-02-25 13:22 - 2009-06-22 18:26 - 00000495 _____ () C:\stub.log
2015-02-25 13:22 - 2006-10-03 13:06 - 00000000 ____D () C:\WINDOWS\system
2015-02-25 13:15 - 2006-10-03 12:12 - 00000000 ___RD () C:\Programme
2015-02-25 13:13 - 2008-10-17 18:49 - 00737167 _____ () C:\WINDOWS\setupapi.log
2015-02-25 12:59 - 2006-10-13 19:34 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-25 12:02 - 2010-05-01 12:38 - 00000000 ___RD () C:\Dokumente und Einstellungen\Matze\Startmenü\Programme\Autostart
2015-02-25 12:00 - 2006-10-03 12:12 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
2015-02-25 11:47 - 2010-05-01 12:38 - 00000000 ____D () C:\Dokumente und Einstellungen\Matze
2015-02-25 11:38 - 2006-10-03 13:06 - 00000000 ____D () C:\WINDOWS\twain_32
2015-02-19 11:32 - 2006-10-03 11:16 - 00000000 ____D () C:\WINDOWS\Registration
2015-02-12 01:04 - 2010-05-01 12:41 - 00000190 ___SH () C:\Dokumente und Einstellungen\Wonni\ntuser.ini
2015-02-12 01:04 - 2010-05-01 12:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Wonni\Lokale Einstellungen\Temp
2015-02-12 01:04 - 2010-05-01 12:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Wonni
2015-02-10 21:11 - 2009-11-07 14:15 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Bounty Bay Online
2015-02-10 21:11 - 2008-06-23 09:11 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Meine CEWE FOTOWELT
2015-02-10 21:11 - 2006-11-19 17:16 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ICQ 5.1
2015-02-10 21:11 - 2006-10-15 15:27 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Macromedia Dreamweaver 3
2015-02-10 21:11 - 2006-10-03 12:12 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü
2015-02-10 21:08 - 2010-05-01 12:38 - 00000000 ___RD () C:\Dokumente und Einstellungen\Matze\Eigene Dateien\Eigene Bilder
2015-02-10 21:00 - 2006-10-03 12:12 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Microsoft Shared
2015-02-10 20:53 - 2006-10-03 12:12 - 00004161 ____C () C:\WINDOWS\ODBCINST.INI
2015-02-10 20:48 - 2006-10-03 13:00 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Samsung ML-1510_700 Series
2015-02-10 20:48 - 2006-10-03 11:35 - 00000000 ___HD () C:\Programme\InstallShield Installation Information
2015-02-10 20:41 - 2006-10-03 13:06 - 00000000 ____D () C:\WINDOWS\Help
2015-02-10 20:32 - 2010-05-01 12:38 - 00000772 _____ () C:\Dokumente und Einstellungen\Matze\Startmenü\Programme\Windows Media Player.lnk
2015-02-10 20:32 - 2010-05-01 12:38 - 00000000 ___RD () C:\Dokumente und Einstellungen\Matze\Startmenü\Programme
2015-02-10 20:32 - 2009-11-01 17:18 - 00006238 _____ () C:\WINDOWS\wmsetup.log
2015-02-10 20:25 - 2008-08-17 21:02 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ifolor
2015-02-10 20:20 - 2010-01-15 21:25 - 00000000 ___RD () C:\Programme\Skype
2015-02-10 20:13 - 2006-10-07 17:13 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Real
2015-02-10 20:01 - 2007-01-05 12:39 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Ascaron
2015-02-10 19:59 - 2007-02-17 21:40 - 00000371 ____C () C:\WINDOWS\wininit.ini
2015-02-10 18:40 - 2007-02-09 18:47 - 00000000 ____D () C:\WINDOWS\Sun
2015-02-10 17:28 - 2006-10-03 12:12 - 00946822 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-10 15:44 - 2006-12-21 22:05 - 00000190 __SHC () C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2015-02-10 15:39 - 2015-01-23 16:42 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2015-02-10 15:28 - 2015-01-23 16:42 - 00000684 _____ () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
2015-02-10 15:28 - 2009-12-22 07:41 - 00000684 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2015-02-10 15:21 - 2006-12-21 22:05 - 00000000 ____D () C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp
2015-02-10 15:16 - 2009-12-19 10:04 - 00013661 _____ () C:\WINDOWS\DtcInstall.log
2015-02-10 14:59 - 2006-10-22 14:10 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\EA GAMES
2015-02-10 14:58 - 2002-03-25 19:02 - 00028624 ____C () C:\WINDOWS\system32\Drivers\secdrv.sys
2015-02-10 14:56 - 2006-10-21 22:43 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Valve
2015-02-10 14:15 - 2008-11-15 19:03 - 00001293 _____ () C:\WINDOWS\setupact.log

==================== Files in the root of some directories =======

2007-02-05 21:36 - 2007-02-05 21:37 - 6334360 ____C (Mozilla) C:\Programme\Thunderbird Setup 1.5.0.9.exe

Some zero byte size files/folders:
==========================
C:\Windows\System32\eraseme_45856.exe
C:\Windows\System32\Drivers\nkjrlxof.sys

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-02-2015
Ran by Matze at 2015-02-25 14:26:31
Running from C:\Dokumente und Einstellungen\Matze\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AntiVir Desktop (Enabled - Out of date) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 4.42 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
ASUSDVD XP (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version:  - )
AusLogics Disk Defrag (HKLM\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: version 1.1 - AusLogics, Inc.)
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software)
AVM FRITZ!WLAN (HKLM\...\AVMWLANCLI) (Version:  - AVM Berlin)
CCleaner (remove only) (HKLM\...\CCleaner) (Version:  - )
Google Update Helper (Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
J2SE Runtime Environment 5.0 Update 10 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0150100}) (Version: 1.5.0.100 - Sun Microsystems, Inc.)
J2SE Runtime Environment 5.0 Update 11 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0150110}) (Version: 1.5.0.110 - Sun Microsystems, Inc.)
Java(TM) 6 Update 17 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216010FF}) (Version: 6.0.170 - Sun Microsystems, Inc.)
Java(TM) 6 Update 5 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160050}) (Version: 1.6.0.50 - Sun Microsystems, Inc.)
Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
Logitech Desktop Messenger (HKLM\...\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}) (Version:  - )
Logitech iTouch Software (HKLM\...\{036AA4D4-6D32-11D4-9875-00105ACE7734}) (Version:  - )
Logitech MouseWare 9.75  (HKLM\...\{5809E7CF-4DCF-11D4-9875-00105ACE7734}) (Version:  - )
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 2.0 (HKLM\...\Microsoft .NET Framework 2.0) (Version:  - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Word 2000 (HKLM\...\{00170407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft Works 2000 (HKLM\...\{56364334-9530-11D2-BFFC-00C04FA329AA}) (Version: 1.0.0.0000 - Microsoft Corporation)
Microsoft Works 2000-Setup-Start (HKLM\...\Works2kSetup) (Version:  - )
Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
Nero 7 Premium (HKLM\...\{B123EBD8-89B7-4834-B06D-F758815E1031}) (Version: 7.01.9436 - Nero AG)
Nero Media Player (HKLM\...\NMPUninstallKey) (Version:  - )
NeroVision Express 2 (HKLM\...\NeroVision!UninstallKey) (Version:  - )
NVIDIA Display Driver (HKLM\...\NVIDIA Display Driver) (Version:  - )
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 4.1 (HKLM\...\{D103C4BA-F905-437A-8049-DB24763BBE36}) (Version: 4.1.179 - Skype Technologies S.A.)
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 5.12.01.3620 - Analog Devices)
VideoLAN VLC media player 0.8.4a (HKLM\...\VLC media player) (Version: 0.8.4a - VideoLAN Team)
WebFldrs XP (Version: 9.50.6513 - Microsoft Corporation) Hidden
Windows Installer 3.1 (KB893803) (HKLM\...\KB893803v2) (Version:  - Microsoft Corporation)
Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 10 (HKLM\...\Windows Media Player) (Version:  - )
Windows XP Service Pack 2 (HKLM\...\Windows XP Service Pack) (Version: 20040803.231317 - Microsoft Corporation)
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )
WinZip (HKLM\...\WinZip) (Version:  8.1  (4331g) - WinZip Computing, Inc.)
Word in Works Suite-Add-In (HKLM\...\{5DC02603-6642-11D3-80AC-00C04F348408}) (Version: 1.0.0.0000 - Microsoft Corporation)
XPclean (HKLM\...\{39EE2257-DA3C-4FBA-9D59-893104A1EB4F}) (Version: 7.5.0.0 - Armin Krämer)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

10-02-2015 20:08:48 Revo Uninstaller's restore point - VirtualCloneDrive
10-02-2015 20:10:15 Remove Virtual CloneDrive
10-02-2015 20:12:31 Revo Uninstaller's restore point - RealPlayer
10-02-2015 20:18:05 Revo Uninstaller's restore point - Safari
10-02-2015 20:18:32 Safari wird entfernt
10-02-2015 20:19:53 Revo Uninstaller's restore point - Skype web features
10-02-2015 20:20:09 Removed Skype web features
10-02-2015 20:25:22 Revo Uninstaller's restore point - ifolor Designer
10-02-2015 20:30:29 Revo Uninstaller's restore point - Samsung Druckerstatusmonitor
10-02-2015 20:40:26 Revo Uninstaller's restore point - PrimaScan 2400U
10-02-2015 20:43:06 Revo Uninstaller's restore point - Scanner
10-02-2015 20:45:03 Revo Uninstaller's restore point - ftp-uploader
10-02-2015 20:47:46 Revo Uninstaller's restore point - ML-1510_700 Series
10-02-2015 20:49:27 Revo Uninstaller's restore point - Apple Mobile Device Support
10-02-2015 20:51:08 Apple Mobile Device Support wird entfernt
10-02-2015 20:53:18 Revo Uninstaller's restore point - MySQL Connector/ODBC 3.51
10-02-2015 20:53:30 Removed MySQL Connector/ODBC 3.51
10-02-2015 20:55:09 Revo Uninstaller's restore point - Adobe Flash Player 9 ActiveX
10-02-2015 20:57:07 Revo Uninstaller's restore point - Arrange Startup 2.3
10-02-2015 20:59:11 Revo Uninstaller's restore point - Microsoft Visual C++ 2005 Redistributable
10-02-2015 20:59:21 Microsoft Visual C++ 2005 Redistributable wird entfernt
10-02-2015 21:00:11 Revo Uninstaller's restore point - Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
10-02-2015 21:00:22 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
10-02-2015 21:01:26 Revo Uninstaller's restore point - Registry Mechanic 6.0
14-02-2015 00:13:58 Systemprüfpunkt
19-02-2015 10:26:48 Systemprüfpunkt
21-02-2015 20:33:59 Systemprüfpunkt
25-02-2015 13:14:58 Revo Uninstaller's restore point - DriverDoc

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2001-08-18 11:00 - 2001-08-18 11:00 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Programme\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-25 11:22 - 2015-02-25 11:22 - 02912256 _____ () C:\Programme\AVAST Software\Avast\defs\15022502\algo.dll
2006-10-03 13:23 - 2006-09-16 21:19 - 00126976 _____ () C:\Programme\WinRAR\rarext.dll
2006-05-14 05:23 - 2006-05-14 05:23 - 00138752 _____ () C:\Programme\7-Zip\7-zip.dll
2015-02-10 15:20 - 2015-02-10 15:20 - 38562088 _____ () C:\Programme\AVAST Software\Avast\libcef.dll
2015-02-10 15:02 - 2015-02-10 15:02 - 03925104 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
2015-02-10 17:55 - 2015-02-10 17:55 - 16852144 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\WINDOWS\NFS: Carbon (testo) Setup Log.txt

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UploadMgr => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1292428093-1844823847-839522115-1003\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\Matze\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-1292428093-1844823847-839522115-500 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Administrator
Gast (S-1-5-21-1292428093-1844823847-839522115-501 - Limited - Enabled)
Hilfeassistent (S-1-5-21-1292428093-1844823847-839522115-1000 - Limited - Disabled)
Matze (S-1-5-21-1292428093-1844823847-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Matze
Peter (S-1-5-21-1292428093-1844823847-839522115-1007 - Limited - Enabled)
SUPPORT_388945a0 (S-1-5-21-1292428093-1844823847-839522115-1002 - Limited - Disabled)
Wonni (S-1-5-21-1292428093-1844823847-839522115-1004 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Wonni

==================== Faulty Device Manager Devices =============

Name: RAID-Controller
Description: RAID-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/25/2015 01:05:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung itouch.exe, Version 2.15.264.0, fehlgeschlagenes Modul itouch.exe, Version 2.15.264.0, Fehleradresse 0x0002c28c.
Das medienspezifische Ereignis für [itouch.exe!ws!] wird verarbeitet.

Error: (02/25/2015 00:05:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung itouch.exe, Version 2.15.264.0, fehlgeschlagenes Modul itouch.exe, Version 2.15.264.0, Fehleradresse 0x0002c28c.
Das medienspezifische Ereignis für [itouch.exe!ws!] wird verarbeitet.

Error: (02/25/2015 00:02:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung instantaccess.exe, Version 0.0.0.0, fehlgeschlagenes Modul mfc42.dll, Version 6.2.4131.0, Fehleradresse 0x0005c2bd.
Das medienspezifische Ereignis für [instantaccess.exe!ws!] wird verarbeitet.

Error: (02/25/2015 11:58:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung itouch.exe, Version 2.15.264.0, fehlgeschlagenes Modul itouch.exe, Version 2.15.264.0, Fehleradresse 0x0002c28c.
Das medienspezifische Ereignis für [itouch.exe!ws!] wird verarbeitet.

Error: (02/25/2015 11:48:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung instantaccess.exe, Version 0.0.0.0, fehlgeschlagenes Modul mfc42.dll, Version 6.2.4131.0, Fehleradresse 0x0005c2bd.
Das medienspezifische Ereignis für [instantaccess.exe!ws!] wird verarbeitet.

Error: (02/19/2015 09:57:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung itouch.exe, Version 2.15.264.0, fehlgeschlagenes Modul itouch.exe, Version 2.15.264.0, Fehleradresse 0x0002c28c.
Das medienspezifische Ereignis für [itouch.exe!ws!] wird verarbeitet.

Error: (02/13/2015 10:35:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung itouch.exe, Version 2.15.264.0, fehlgeschlagenes Modul itouch.exe, Version 2.15.264.0, Fehleradresse 0x0002c28c.
Das medienspezifische Ereignis für [itouch.exe!ws!] wird verarbeitet.

Error: (02/10/2015 09:38:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung ssmmgr.exe, Version 1.1.3.0, fehlgeschlagenes Modul mfc42.dll, Version 6.2.4131.0, Fehleradresse 0x0000439a.
Das medienspezifische Ereignis für [ssmmgr.exe!ws!] wird verarbeitet.

Error: (02/10/2015 07:41:15 PM) (Source: crypt32) (EventID: 11) (User: )
Description: Die Extrahierung der Drittanbieterstammlisten aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.

Error: (02/10/2015 07:41:15 PM) (Source: crypt32) (EventID: 11) (User: )
Description: Die Extrahierung der Drittanbieterstammlisten aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.


System errors:
=============
Error: (02/25/2015 01:31:11 PM) (Source: System Error) (EventID: 1003) (User: )
Description: Fehlercode 00000019, 1. Parameter 00000020, 2. Parameter b89d7d15, 3. Parameter b89d82d5, 4. Parameter e8b89db0.

Error: (02/25/2015 01:29:53 PM) (Source: RemoteAccess) (EventID: 20106) (User: )
Description: Die Schnittstelle "{10D5BDCF-90AA-460F-8923-1A7EC98CD110}" kann nicht zu dem Router-Manager für das Protokoll IP hinzugefügt werden.
Fehler: Die Funktion kann nicht abgeschlossen werden.

Error: (02/25/2015 01:29:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
ElbyVCD

Error: (02/25/2015 01:29:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (02/25/2015 01:29:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ASPI32" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/25/2015 01:28:44 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Bei DCOM ist der Fehler "%%1084" aufgetreten, als der Dienst "EventSystem" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (02/25/2015 01:27:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
asuskbnt
aswRvrt
aswSnx
aswSP
aswTdi
aswVmm
ElbyVCD
Fips
Processor

Error: (02/25/2015 01:26:56 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Bei DCOM ist der Fehler "%%1084" aufgetreten, als der Dienst "EventSystem" mit den Argumenten ""
gestartet wurde, um den folgenden Server zu verwenden:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (02/25/2015 01:26:16 PM) (Source: 0) (EventID: 12) (User: )
Description: 

Error: (02/25/2015 01:06:50 PM) (Source: System Error) (EventID: 1003) (User: )
Description: Fehlercode 00000019, 1. Parameter 00000020, 2. Parameter b8a62d15, 3. Parameter b8a632d5, 4. Parameter e8b8a660.


Microsoft Office Sessions:
=========================
Error: (02/25/2015 01:05:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: itouch.exe2.15.264.0itouch.exe2.15.264.00002c28c

Error: (02/25/2015 00:05:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: itouch.exe2.15.264.0itouch.exe2.15.264.00002c28c

Error: (02/25/2015 00:02:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: instantaccess.exe0.0.0.0mfc42.dll6.2.4131.00005c2bd

Error: (02/25/2015 11:58:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: itouch.exe2.15.264.0itouch.exe2.15.264.00002c28c

Error: (02/25/2015 11:48:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: instantaccess.exe0.0.0.0mfc42.dll6.2.4131.00005c2bd

Error: (02/19/2015 09:57:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: itouch.exe2.15.264.0itouch.exe2.15.264.00002c28c

Error: (02/13/2015 10:35:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: itouch.exe2.15.264.0itouch.exe2.15.264.00002c28c

Error: (02/10/2015 09:38:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ssmmgr.exe1.1.3.0mfc42.dll6.2.4131.00000439a

Error: (02/10/2015 07:41:15 PM) (Source: crypt32) (EventID: 11) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (02/10/2015 07:41:15 PM) (Source: crypt32) (EventID: 11) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.


==================== Memory info =========================== 

Processor: AMD Athlon(tm) 64 Processor 3000+
Percentage of memory in use: 47%
Total physical RAM: 1534.73 MB
Available physical RAM: 810.51 MB
Total Pagefile: 3430.7 MB
Available Pagefile: 2857 MB
Total Virtual: 2047.88 MB
Available Virtual: 1942.57 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:25.39 GB) (Free:10.51 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (D) (Fixed) (Total:63.47 GB) (Free:63.4 GB) NTFS
Drive e: (E) (Fixed) (Total:63.79 GB) (Free:63.71 GB) NTFS
Drive g: (MaliWo) (Fixed) (Total:186.31 GB) (Free:42.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 152.7 GB) (Disk ID: ECF3ECF3)
Partition 1: (Active) - (Size=25.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=127.3 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 186.3 GB) (Disk ID: B8C306B4)
Partition 1: (Not Active) - (Size=186.3 GB) - (Type=42)

==================== End Of Log ============================
         

Sorry, aber bei XP ohne SP3 ist alles ausser formatieren und neu aufsetzen fahrlässig.

War mir fast klar, Versuch war's wert. Thema damit also erledigt.

ok