Trojaner-Board - gvu trojaner abgesicherter modus nicht möglich

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - gvu trojaner abgesicherter modus nicht möglich (https://www.trojaner-board.de/137244-gvu-trojaner-abgesicherter-modus-moeglich.html)

gvu trojaner abgesicherter modus nicht möglich

Hallo,

mein Rechner ist mit dem GVU Trojaner infiziert. Habe mit Kaspersky Recovery versucht den Virus zu entfernen aber es hilft nichts. Ich komme auch im AM nicht rein weil er sich sofort ausschaltet.
Ich habe wie in der Anleitung eine OTL Datei erstellt, weis aber nicht wie ich sie hier hochladen kann/anhängen kann.
Ich würde mich freuen, wenn ich hier Hilfe bekommen würde.

Gruß

Hi,

welches Betriebssystem?

WinXP.

Hab in der Eile dummerweise von einem anderen User (http://www.trojaner-board.de/135821-...odus-geht.html) den fix button mit den dort angegeben Text benutzt. Jetzt geht der PC wieder, weis aber nicht, ob es irgendwelche Nebeneffekte haben wird. Bis jetzt sieht alles gut aus alles läuft wie vorher. Nur kann ich Avira nicht installieren, weiss aber nicht ob das damit zusammenhängt, Meldung: Sie müssen mindestens WinXP 32 oder 64 benutzen. Das hab ich doch drauf.

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hey danke vielmals für die Unterstützung: hier sind die Daten:

Frst.txt:
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-06-2013 01

Ran by Intel (administrator) on 29-06-2013 15:03:55

Running from C:\Documents and Settings\Intel\Desktop

Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

() C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe

(Blabbers Communications LTD) C:\Program Files\BrowserCompanion\BCHelper.exe

() C:\WINDOWS\system32\PSIService.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Skype Technologies S.A.) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-14] (Adobe Systems Incorporated)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon [689488 2008-03-10] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [1848648 2008-03-17] (CANON INC.)

HKLM\...\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1230704 2011-03-21] ()

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)

HKLM\...\Run: [vspdfprsrv.exe] C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe --background [4229632 2011-01-20] ()

HKLM\...\Run: [Browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe /T=3 [182576 2011-08-08] (Blabbers Communications LTD)

HKLM\...\Run: [FreePDF Assistant] "C:\Program Files\FreePDF_XP\fpassist.exe" [371200 2011-02-23] (shbox.de)

HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" [74752 2012-06-20] (Nullsoft, Inc.)

HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)

HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKCU\...\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [1694208 2007-03-21] (Microsoft Corporation)

HKCU\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)

HKCU\...\Winlogon: [Shell] Explorer.exe <==== ATTENTION 

HKCU\...\Command Processor:  <======= ATTENTION

MountPoints2: {82edc5d0-1778-11e0-a2f3-000e2edf9b77} - F:\AutoRun.exe

MountPoints2: {82edc5d4-1778-11e0-a2f3-b34fdad64ed6} - F:\AutoRun.exe

HKU\Administrator\...\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 [x]

HKU\Administrator\...\RunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart [x]

HKU\Default User\...\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 [x]

HKU\Default User\...\RunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart [x]

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk

ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED7.ico ()

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\WINDOWS\system32\CbFsMntNtf3.dll (EldoS Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_2.dll (Conduit Ltd.)

URLSearchHook: ST-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\prxtbsof1.dll (Conduit Ltd.)

HKLM SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

HKCU SearchScopes: DefaultScope {9973DE62-B643-4114-A1CF-91AD71C4FDB1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms}

SearchScopes: HKCU - {9973DE62-B643-4114-A1CF-91AD71C4FDB1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms}

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559

BHO: Browser Companion Helper - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll ( )

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)

BHO: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Browser Companion Helper Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll ( )

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: ST-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\prxtbsof1.dll (Conduit Ltd.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_2.dll (Conduit Ltd.)

Toolbar: HKLM - BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_2.dll (Conduit Ltd.)

Toolbar: HKLM - ST-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\prxtbsof1.dll (Conduit Ltd.)

Toolbar: HKCU -BS Player Toolbar - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files\BS_Player\prxtbBS_2.dll (Conduit Ltd.)

Toolbar: HKCU -ST-de3 Toolbar - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\prxtbsof1.dll (Conduit Ltd.)

Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)

Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: msdaipp - No CLSID Value - 

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194
 

FireFox:

========

FF ProfilePath: C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default

FF SearchEngine: Google

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: Browser Companion Helper - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\bbrs_002@blabbers.com

FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: BitComet ????? - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

FF Extension: toolbar - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\toolbar@gmx.net.xpi

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa

FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
 

========================== Services (Whitelisted) =================
 

R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-09-27] (Cisco Systems, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

R2 ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [177704 2007-06-05] ()

R2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3290304 2012-11-22] (Skype Technologies S.A.)

R2 SoundMAX Agent Service (default); C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-21] (Analog Devices, Inc.)

S4 HidServ; %SystemRoot%\System32\hidserv.dll [x]

R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [20747 2009-07-27] (Meetinghouse Data Communications)

S3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [176640 2008-07-25] (Broadcom Corporation)

R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)

R2 CbmDev1; C:\Windows\System32\Drivers\CbmDev1.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev2; C:\Windows\System32\Drivers\CbmDev2.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev3; C:\Windows\System32\Drivers\CbmDev3.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2004-08-04] (Microsoft Corporation)

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)

R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2010-09-27] (Cisco Systems, Inc.)

R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)

R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [457216 2010-03-29] (Aladdin Knowledge Systems)

S3 NABTSFEC; C:\Windows\System32\DRIVERS\NABTSFEC.sys [85376 2004-08-04] (Microsoft Corporation)

S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2004-08-04] (Microsoft Corporation)

R3 RT61; C:\Windows\System32\DRIVERS\RT61.sys [356096 2005-10-28] (Ralink Technology Inc.)

S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2004-08-04] (Microsoft Corporation)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-05] ()

S3 streamip; C:\Windows\System32\DRIVERS\StreamIP.sys [15360 2004-08-04] (Microsoft Corporation)

S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)

S3 WSTCODEC; C:\Windows\System32\DRIVERS\WSTCODEC.SYS [19328 2004-08-04] (Microsoft Corporation)

U3 ax1crlx1; C:\Windows\System32\Drivers\ax1crlx1.sys [0 ] (Microsoft Corporation)

S4 Abiosdsk; No ImagePath

S4 abp480n5; No ImagePath

S4 adpu160m; No ImagePath

S4 Aha154x; No ImagePath

S4 aic78u2; No ImagePath

S4 aic78xx; No ImagePath

S4 AliIde; No ImagePath

S4 amsint; No ImagePath

S4 asc; No ImagePath

S4 asc3350p; No ImagePath

S4 asc3550; No ImagePath

S4 Atdisk; No ImagePath

S4 cd20xrnt; No ImagePath

S1 Changer; No ImagePath

S4 CmdIde; No ImagePath

S4 Cpqarray; No ImagePath

U4 dac2w2k; No ImagePath

S4 dac960nt; No ImagePath

S4 dpti2o; No ImagePath

S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]

S4 hpn; No ImagePath

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S1 i2omgmt; No ImagePath

S4 i2omp; No ImagePath

S4 ini910u; No ImagePath

S1 lbrtfdc; No ImagePath

S4 mraid35x; No ImagePath

S1 PCIDump; No ImagePath

S3 PDCOMP; No ImagePath

S3 PDFRAME; No ImagePath

S3 PDRELI; No ImagePath

S3 PDRFRAME; No ImagePath

S4 perc2; No ImagePath

S4 perc2hib; No ImagePath

S4 ql1080; No ImagePath

S4 Ql10wnt; No ImagePath

S4 ql12160; No ImagePath

S4 ql1240; No ImagePath

S4 ql1280; No ImagePath

S4 Simbad; No ImagePath

S4 Sparrow; No ImagePath

S4 symc810; No ImagePath

S4 symc8xx; No ImagePath

S4 sym_hi; No ImagePath

S4 sym_u3; No ImagePath

S4 TosIde; No ImagePath

S4 ultra; No ImagePath

S4 ViaIde; No ImagePath

S3 VirtualFD; \??\C:\Documents and Settings\Intel\Desktop\2\vfd.sys [x]

S3 WDICA; No ImagePath

U1 WS2IFSL; 

U2 wuaserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-27 02:21 - 2011-07-13 04:55 - 02237440 ___RA (OldTimer Tools) C:\OTLPE.exe

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 21:33 - 2013-06-29 11:59 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-26 17:35 - 2013-06-26 18:28 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-23 00:40 - 2013-06-23 13:38 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:19 - 2013-06-13 19:34 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-11 13:37 - 2013-06-11 16:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:24 - 2013-06-07 18:32 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 17:13 - 2013-06-07 18:10 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy
 

==================== One Month Modified Files and Folders ========
 

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-29 15:02 - 2009-07-05 01:58 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Skype

2013-06-29 14:55 - 2009-07-04 12:24 - 00000062 __ASH C:\Documents and Settings\Intel\Local Settings\desktop.ini

2013-06-29 14:55 - 2009-07-04 12:23 - 00000062 __ASH C:\Documents and Settings\LocalService\Local Settings\desktop.ini

2013-06-29 14:55 - 2009-07-04 12:23 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-29 14:55 - 2009-07-04 12:09 - 00000062 __ASH C:\Documents and Settings\NetworkService\Local Settings\desktop.ini

2013-06-29 14:55 - 2009-07-04 04:51 - 00000052 ____A C:\Windows\wiaservc.log

2013-06-29 14:55 - 2001-08-23 14:00 - 00002206 ____A C:\Windows\System32\wpa.dbl

2013-06-29 14:18 - 2012-07-19 13:06 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-29 11:59 - 2013-06-26 21:33 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-29 11:58 - 2009-07-04 04:51 - 00000278 ____A C:\Windows\wiadebug.log

2013-06-27 03:25 - 2009-07-04 12:24 - 00000178 ___SH C:\Documents and Settings\Intel\ntuser.ini

2013-06-27 03:25 - 2009-07-04 12:23 - 00032472 ____A C:\Windows\SchedLgU.Txt

2013-06-27 03:25 - 2009-07-04 12:04 - 01777576 ____A C:\Windows\WindowsUpdate.log

2013-06-27 03:23 - 2009-10-26 09:48 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\FreePDF_XP

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 18:28 - 2013-06-26 17:35 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0

2013-06-26 13:38 - 2011-02-27 14:23 - 00000178 __ASH C:\Documents and Settings\Administrator\ntuser.ini

2013-06-26 13:38 - 2011-02-27 14:23 - 00000062 __ASH C:\Documents and Settings\Administrator\Local Settings\desktop.ini

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-25 16:08 - 2010-03-12 00:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Formulare

2013-06-23 21:26 - 2013-01-28 22:37 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Winamp

2013-06-23 13:40 - 2009-11-13 11:44 - 00000900 __ASH C:\Windows\System32\KGyGaAvL.sys

2013-06-23 13:40 - 2009-08-02 01:53 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\Corel

2013-06-23 13:40 - 2009-08-01 23:27 - 00000000 ____D C:\Documents and Settings\Intel\My Documents\My PSP Files

2013-06-23 13:38 - 2013-06-23 00:40 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:34 - 2013-06-13 19:19 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-12 17:18 - 2012-07-19 13:06 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2013-06-12 17:18 - 2011-07-16 13:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2013-06-11 16:49 - 2013-06-11 13:37 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:32 - 2013-06-07 18:24 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 18:26 - 2009-07-05 09:01 - 00105472 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-06-07 18:20 - 2009-07-11 10:32 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\vlc

2013-06-07 18:10 - 2013-06-07 17:13 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ___RD C:\Program Files\Skype

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype

2013-06-06 19:08 - 2012-05-03 14:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-06-01 21:29 - 2013-04-09 09:16 - 00046890 ____A C:\Windows\setupapi.log

2013-05-30 19:40 - 2013-05-07 19:07 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\krispak

2013-05-30 19:24 - 2010-02-10 14:11 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\kleeland

2013-05-30 17:37 - 2013-05-23 15:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe

[2007-03-21 12:08] - [2007-03-21 12:08] - 1033216 ____A (Microsoft Corporation) 42d32722b805d7df42d30487a0bcbd78 
 

C:\Windows\System32\winlogon.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0502272 ____A (Microsoft Corporation) 01c3346c241652f43aed8e2149881bfe 
 

C:\Windows\System32\svchost.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0014336 ____A (Microsoft Corporation) 8f078ae4ed187aaabc0a305146de6716 
 

C:\Windows\System32\services.exe

[2004-08-04 01:56] - [2009-02-06 12:22] - 0110592 ____A (Microsoft Corporation) 4712531ab7a01b7ee059853ca17d39bd 
 

C:\Windows\System32\User32.dll

[2007-03-21 12:10] - [2007-03-21 12:10] - 0577024 ____A (Microsoft Corporation) 1800f293bccc8ede8a70e12b88d80036 
 

C:\Windows\System32\userinit.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0024576 ____A (Microsoft Corporation) 39b1ffb03c2296323832acbae50d2aff 
 

C:\Windows\System32\Drivers\volsnap.sys

[2004-08-04 00:00] - [2004-08-04 00:00] - 0052352 ____A (Microsoft Corporation) ee4660083deba849ff6c485d944b379b 
 
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-06-2013 01

Ran by Intel at 2013-06-29 15:04:30

Running from C:\Documents and Settings\Intel\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

Adobe AIR (Version: 1.1.0.5790)

Adobe Anchor Service CS3 (Version: 1.0)

Adobe Anchor Service CS4 (Version: 2.0)

Adobe Asset Services CS3 (Version: 3)

Adobe Bridge CS3 (Version: 2)

Adobe Bridge CS4 (Version: 3)

Adobe Bridge Start Meeting (Version: 1.0)

Adobe Camera Raw 4.0 (Version: 4.0)

Adobe CMaps CS4 (Version: 2.0)

Adobe Color - Photoshop Specific (Version: 1.0)

Adobe Color Common Settings (Version: 1.0)

Adobe Color EU Extra Settings (Version: 1.0)

Adobe Color JA Extra Settings (Version: 1.0)

Adobe Color NA Recommended Settings (Version: 1.0)

Adobe CSI CS4 (Version: 1)

Adobe Default Language CS4 (Version: 2.0)

Adobe Device Central CS3 (Version: 1.0)

Adobe Device Central CS4 (Version: 2)

Adobe Dreamweaver CS4 (Version: 10.0)

Adobe ExtendScript Toolkit 2 (Version: 2.0)

Adobe ExtendScript Toolkit CS4 (Version: 3.0.0)

Adobe Extension Manager CS4 (Version: 2.0)

Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)

Adobe Flash Player 11 Plugin (Version: 11.7.700.224)

Adobe Fonts All (Version: 1.0)

Adobe Help Viewer CS3 (Version: 1)

Adobe Linguistics CS3 (Version: 3.0.0)

Adobe Media Player (Version: 0.0.0)

Adobe Media Player (Version: 1.1)

Adobe Output Module (Version: 2.0)

Adobe PDF Library Files CS4 (Version: 9.0)

Adobe Photoshop CS3 (Version: 10)

Adobe Photoshop CS3 (Version: 10.0)

Adobe Reader XI (11.0.02) - Deutsch (Version: 11.0.02)

Adobe Search for Help (Version: 1.0)

Adobe Service Manager Extension (Version: 1.0)

Adobe Setup (Version: 1.0)

Adobe Setup (Version: 2.0)

Adobe Stock Photos CS3 (Version: 1.5)

Adobe Type Support CS4 (Version: 9.0)

Adobe Update Manager CS3 (Version: 5.1.0)

Adobe Update Manager CS4 (Version: 6.0.0)

Adobe Version Cue CS3 Client (Version: 3)

Adobe WinSoft Linguistics Plugin (Version: 1.0)

Adobe XMP Panels CS3 (Version: 1.0)

Adobe XMP Panels CS4 (Version: 2.0)

Apple Application Support (Version: 2.3.3)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (Version: 2.1.3.127)

ATTC CityLine

ATTC Coordination2

Avanquest update (Version: 1.31)

BDE5

BitComet 1.29 (Version: 1.29)

Bonjour (Version: 3.0.0.10)

Broadcom NetXtreme Ethernet Controller (Version: 11.32.03)

BrowserCompanion

BS_Player Toolbar (Version: )

Bulgarian (Phonetic) (Version: 1.0.3.40)

Canon MP Navigator EX 2.0

Canon MP540 series MP Drivers

Canon MP540 series User Registration

Canon Utilities Easy-PhotoPrint EX

Canon Utilities My Printer

Canon Utilities Solution Menu

CCleaner (Version: 3.02)

Cisco Systems VPN Client 5.0.07.0410 (Version: 5.0.7)

Compatibility Pack fur 2007 Office System (Version: 12.0.6425.1000)

Connect (Version: 1.0.0.1)

Corel Paint Shop Pro Photo X2 (Version: 12.00.0000)

DivX-Setup (Version: 2.5.0.8)

Dlubal-Anwendungen RSTAB Demo

DSL Connection Manager (Version: 2.0.0.17)

eMule

Expert PDF 7 Professional (Version: 7.0.1370.0)

ExplorerXP (remove only)

FormatFactory 2.60 (Version: 2.60)

Free PDF to Word Converter 4.2.3.183 (Version: 4.2.3.183)

FreePDF (Remove only)

FVPN Connect (Version: 1.6.0.0)

GPL Ghostscript (Version: 9.05)

HD Tune 2.55

Intel(R) Graphics Media Accelerator Driver

iTunes (Version: 11.0.2.26)

Java 7 Update 17 (Version: 7.0.170)

Java Auto Updater (Version: 2.1.9.0)

kuler (Version: 2.0)

McAfee Security Scan Plus (Version: 3.0.318.3)

Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)

Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6012.5000)

Microsoft Choice Guard (Version: 2.0.48.0)

Microsoft Flight Simulator X (Version: 10.0.60905)

Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

Microsoft Keyboard Layout Creator 1.4 (Version: 1.4.6000)

Microsoft Office XP Professional mit FrontPage (Version: 10.0.2701.0)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)

Microsoft Windows Media Video 9 VCM

Mozilla Firefox 21.0 (x86 de) (Version: 21.0)

Mozilla Maintenance Service (Version: 21.0)

MSN

MSVCRT (Version: 14.0.1468.721)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0)

MSXML 6 Service Pack 2 (KB973686) (Version: 6.20.2003.0)

MyPhoneExplorer (Version: 1.8.2)

Nero 6 Ultra Edition

PDF Settings (Version: 1.0)

Photoshop Camera Raw (Version: 5.0)

Prьfungsfragen-CD Version 1.8 (Version: 1.8)

QuickTime (Version: 7.73.80.64)

RedMon - Redirection Port Monitor

Safari (Version: 5.34.57.2)

Segoe UI (Version: 14.0.4327.805)

Skype Click to Call (Version: 6.4.11328)

Skype™ 6.3 (Version: 6.3.107)

Skyr@cer PCI 2101gmr (Version: 1.00.01)

softonic-de3 Toolbar (Version: 6.8.5.1)

Software Update for Web Folders (Version: 9.60.6715.0)

SoundMAX (Version: 5.12.01.4070)

SPIRIT 11

Suite Shared Configuration CS4 (Version: 1.0)

Sun ODF Plugin for Microsoft Office 3.2 (Version: 3.2.9483)

ToPilots FQ Software (Version: 11.1)

ToPilots FQ-Trainingssoftware 2.0

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Windows Internet Explorer 7 (KB976749) (Version: 1)

Update for Windows XP (KB932823-v3) (Version: 3)

Update for Windows XP (KB955759) (Version: 1)

Update for Windows XP (KB961503) (Version: 1)

Update for Windows XP (KB967715) (Version: 1)

Update for Windows XP (KB968389) (Version: 1)

Update for Windows XP (KB971737) (Version: 1)

Update for Windows XP (KB973687) (Version: 1)

Update for Windows XP (KB973815) (Version: 1)

VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)

VISSIM 5.40-06 (Demo) 32 Bit (Version: 5.40-06 (Demo))

VLC media player 1.0.0 (Version: 1.0.0)

Winamp (Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Imaging Component (Version: 3.0.0.0)

Windows Installer 3.1 (KB893803)

Windows Internet Explorer 8 (Version: 20090308.140743)

Windows Live Anmelde-Assistent (Version: 5.000.818.5)

Windows Live Call (Version: 14.0.8064.0206)

Windows Live Communications Platform (Version: 14.0.8098.930)

Windows Live Essentials (Version: 14.0.8089.0726)

Windows Live Essentials (Version: 14.0.8089.726)

Windows Live Messenger (Version: 14.0.8089.0726)

Windows Live-Uploadtool (Version: 14.0.8014.1029)

Windows XP Hotfix - KB885884 (Version: 20040924.025457)

WinRAR

XP Codec Pack

Yahoo! Detect
 

==================== Restore Points  =========================
 

25-06-2013 15:49:34 System Checkpoint

26-06-2013 20:07:22 System Checkpoint
 

==================== Hosts content: ==========================

127.0.0.1       localhost

127.0.0.1                                activate.adobe.com

127.0.0.1                                practivate.adobe.com

127.0.0.1                                ereg.adobe.com

127.0.0.1                                activate.wip3.adobe.com

127.0.0.1                                wip3.adobe.com

127.0.0.1                                3dns-3.adobe.com

127.0.0.1                                3dns-2.adobe.com

127.0.0.1                                adobe-dns.adobe.com

127.0.0.1                                adobe-dns-2.adobe.com

127.0.0.1                                adobe-dns-3.adobe.com

127.0.0.1                                ereg.wip3.adobe.com

127.0.0.1                                activate-sea.adobe.com

127.0.0.1                                wwis-dubc1-vip60.adobe.com

127.0.0.1                                activate-sjc0.adobe.com

74.208.10.249 gs.apple.com
 
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom NetXtreme Gigabit Ethernet

Description: Broadcom NetXtreme Gigabit Ethernet

Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}

Manufacturer: Broadcom

Service: b57w2k

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: PS/2 Compatible Mouse

Description: PS/2 Compatible Mouse

Class Guid: {4D36E96F-E325-11CE-BFC1-08002BE10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: Cisco Systems VPN Adapter

Description: Cisco Systems VPN Adapter

Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}

Manufacturer: Cisco Systems

Service: CVirtA

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/29/2013 11:59:43 AM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/27/2013 00:38:21 AM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/26/2013 10:19:02 PM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/26/2013 09:36:03 PM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/26/2013 09:33:24 PM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/26/2013 01:44:01 PM) (Source: LoadPerf) (User: )

Description: Unable to read the performance counter strings of the 01A language ID.

The Win32 status returned by the call is the first DWORD in Data section.
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 45846516
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 45846516
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (06/26/2013 01:00:07 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 45844500
 
 

System errors:

=============

Error: (06/26/2013 09:31:34 PM) (Source: Dhcp) (User: )

Description: The IP address lease 192.168.1.33 for the Network Card with network address 000E2EDF9B77 has been

denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
 

Error: (06/26/2013 06:22:53 PM) (Source: DCOM) (User: NT AUTHORITY)

Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments ""

in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}
 

Error: (06/26/2013 04:08:40 PM) (Source: Dhcp) (User: )

Description: The IP address lease 192.168.1.35 for the Network Card with network address 000E2EDF9B77 has been

denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
 

Error: (06/26/2013 03:32:08 PM) (Source: Dhcp) (User: )

Description: The IP address lease 192.168.1.34 for the Network Card with network address 000E2EDF9B77 has been

denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
 

Error: (06/26/2013 01:44:31 PM) (Source: DCOM) (User: NT AUTHORITY)

Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments ""

in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}
 

Error: (06/26/2013 01:41:05 PM) (Source: Service Control Manager) (User: )

Description: The following boot-start or system-start driver(s) failed to load: 

AFD

Fips

intelppm

IPSec

MRxSmb

NetBIOS

NetBT

RasAcd

Rdbss

sptd

Tcpip
 

Error: (06/26/2013 01:41:05 PM) (Source: Service Control Manager) (User: )

Description: The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: 

%%31
 

Error: (06/26/2013 01:41:05 PM) (Source: Service Control Manager) (User: )

Description: The Dienst "Bonjour" service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: 

%%31
 

Error: (06/26/2013 01:41:05 PM) (Source: Service Control Manager) (User: )

Description: The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: 

%%31
 

Error: (06/26/2013 01:41:05 PM) (Source: Service Control Manager) (User: )

Description: The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: 

%%31
 
 

Microsoft Office Sessions:

=========================

Error: (06/29/2013 11:59:43 AM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/27/2013 00:38:21 AM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/26/2013 10:19:02 PM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/26/2013 09:36:03 PM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/26/2013 09:33:24 PM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/26/2013 01:44:01 PM) (Source: LoadPerf)(User: )

Description: 01A
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 45846516
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 45846516
 

Error: (06/26/2013 01:00:09 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (06/26/2013 01:00:07 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 45844500
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 76%

Total physical RAM: 1015.43 MB

Available physical RAM: 239.83 MB

Total Pagefile: 2444.79 MB

Available Pagefile: 1823.19 MB

Total Virtual: 2047.88 MB

Available Virtual: 1951.36 MB
 

==================== Drives ================================
 

Drive c: (System) (Fixed) (Total:18.55 GB) (Free:1.43 GB) NTFS ==>[Drive with boot components (Windows XP)]

Drive d: (Downloads) (Fixed) (Total:18.71 GB) (Free:4.26 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 37 GB) (Disk ID: 81EBA330)

Partition 1: (Active) - (Size=19 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=19 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

--- --- ---

Fix mit FRST
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKCU\...\Winlogon: [Shell] Explorer.exe <==== ATTENTION 

HKCU\...\Command Processor:  <======= ATTENTION

HKU\Administrator\...\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 [x]

HKU\Administrator\...\RunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart [x]

HKU\Default User\...\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 [x]

HKU\Default User\...\RunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart [x]

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Fix Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST Log bitte.

Fixlog.txt:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 29-06-2013 01
Ran by Intel at 2013-06-29 15:46:10 Run:1
Running from C:\Documents and Settings\Intel\Desktop
Boot Mode: Normal

==============================================

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon => Key deleted successfully.
HKCU\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
HKU\Administrator\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix => Value deleted successfully.
HKU\Administrator\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IE7-11 => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ShowDeskFix => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IE7-11 => Value deleted successfully.

==== End of Fixlog ====

ADWCleaner:AdwCleaner Logfile:

Code:

# AdwCleaner v2.303 - Logfile created 06/29/2013 at 15:49:26

# Updated 08/06/2013 by Xplode

# Operating system : Microsoft Windows XP Service Pack 2 (32 bits)

# User : Intel - BRITISH

# Boot Mode : Normal

# Running from : C:\Documents and Settings\Intel\Desktop\adwcleaner.exe

# Option [Delete]
 
 

***** [Services] *****
 
 

***** [Files / Folders] *****
 

Deleted on reboot : C:\Program Files\BrowserCompanion

File Deleted : C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\searchplugins\11-suche.xml

Folder Deleted : C:\Documents and Settings\Intel\AppData\LocalLow\bbrs_002.tb

Folder Deleted : C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Conduit

Folder Deleted : C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\extensions\bbrs_002@blabbers.com

Folder Deleted : C:\Documents and Settings\Intel\Application Data\PriceGong

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\BS_Player

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\Conduit

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\ConduitEngine

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\PackageAware

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\softonic-de3

Folder Deleted : C:\Documents and Settings\Intel\Local Settings\Application Data\Wondershare

Folder Deleted : C:\Program Files\BS_Player

Folder Deleted : C:\Program Files\Common Files\Wondershare

Folder Deleted : C:\Program Files\Conduit

Folder Deleted : C:\Program Files\ConduitEngine

Folder Deleted : C:\Program Files\DAEMON Tools Toolbar

Folder Deleted : C:\Program Files\softonic-de3

Folder Deleted : C:\Program Files\Wondershare
 

***** [Registry] *****
 

Key Deleted : HKCU\Software\Blabbers

Key Deleted : HKCU\Software\BrowserCompanion

Key Deleted : HKCU\Software\BS_Player

Key Deleted : HKCU\Software\Conduit

Key Deleted : HKCU\Software\conduitEngine

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{36B8DFC3-4FBD-4AB2-BF2D-4BA53BF45171}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}

Key Deleted : HKCU\Software\PriceGong

Key Deleted : HKCU\Software\SmartBar

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\softonic-de3

Key Deleted : HKCU\Software\YahooPartnerToolbar

Key Deleted : HKCU\Toolbar

Key Deleted : HKLM\Software\BrowserCompanion

Key Deleted : HKLM\Software\BS_Player

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{17F2B719-FFC2-4C95-8C00-93CF7AE59419}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{36B8DFC3-4FBD-4AB2-BF2D-4BA53BF45171}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A8A80CC-08F7-4E7B-B76F-433E9C7964CC}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9E8C81CD-C588-4872-A2A4-9F11BFC8BDB6}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F2E37DA1-2D5E-422C-92FE-0CFC641DA21D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}

Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}

Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64

Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome

Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox

Key Deleted : HKLM\SOFTWARE\Classes\tdataprotocol.CTData

Key Deleted : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1750559

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2431245

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}

Key Deleted : HKLM\SOFTWARE\Classes\updatebho.TimerBHO

Key Deleted : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1

Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO

Key Deleted : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2

Key Deleted : HKLM\Software\Conduit

Key Deleted : HKLM\Software\conduitEngine

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1124A946-D8B7-413C-BBE0-FEFAA9B8F248}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{388B4D41-097B-463A-A963-219B50F6D7F5}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39FDCB46-91CA-4B65-8A85-460DB3B12268}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4884B973-62FF-4D50-9778-28E47AEE48E9}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C430930A-E5F8-45C7-B23E-0C6E32F2E74B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BS_Player Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\softonic-de3 Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{17F2B719-FFC2-4C95-8C00-93CF7AE59419}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{36B8DFC3-4FBD-4AB2-BF2D-4BA53BF45171}

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BS_Player Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Conduit Engine 

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\softonic-de3 Toolbar

Key Deleted : HKLM\Software\softonic-de3

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Browser companion helper]
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v8.0.6001.18702
 

[OK] Registry is clean.
 

-\\ Mozilla Firefox v21.0 (de)
 

File : C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\prefs.js
 

Deleted : user_pref("CT2431245.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Deleted : user_pref("CT2431245.CTID", "CT2431245");

Deleted : user_pref("CT2431245.CurrentServerDate", "12-6-2010");

Deleted : user_pref("CT2431245.DialogsAlignMode", "LTR");

Deleted : user_pref("CT2431245.EMailNotifierPollDate", "Sat Jun 12 2010 14:35:01 GMT+0200");

Deleted : user_pref("CT2431245.FeedLastCount129009402595187825", 894);

Deleted : user_pref("CT2431245.FeedPollDate7470634014180506963", "Sat Jun 12 2010 14:24:29 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634014269327586", "Sat Jun 12 2010 14:24:16 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634014329599698", "Sat Jun 12 2010 14:24:21 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634014537505092", "Sat Jun 12 2010 14:24:16 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634014970726540", "Sat Jun 12 2010 14:24:23 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634015410831318", "Sat Jun 12 2010 12:24:17 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634015483395460", "Sat Jun 12 2010 14:24:28 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634015636754705", "Sat Jun 12 2010 14:24:28 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634015768347545", "Sat Jun 12 2010 14:24:23 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634015855543602", "Sat Jun 12 2010 14:24:17 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016030710453", "Sat Jun 12 2010 14:24:12 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016114705611", "Sat Jun 12 2010 14:24:33 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016129205152", "Sat Jun 12 2010 12:24:16 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016143724791", "Sat Jun 12 2010 12:24:18 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016271239162", "Sat Jun 12 2010 12:24:20 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016568520719", "Sat Jun 12 2010 14:24:29 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634016726993788", "Sat Jun 12 2010 14:24:12 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017109031809", "Sat Jun 12 2010 14:24:28 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017132743740", "Sat Jun 12 2010 14:24:26 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017299547668", "Sat Jun 12 2010 14:24:31 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017302327846", "Sat Jun 12 2010 14:24:25 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017344111490", "Sat Jun 12 2010 14:24:21 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017478360748", "Sat Jun 12 2010 12:24:21 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017732797593", "Sat Jun 12 2010 14:24:17 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634017821686064", "Sat Jun 12 2010 12:24:18 GMT+0200");

Deleted : user_pref("CT2431245.FeedPollDate7470634018090228721", "Sat Jun 12 2010 14:24:30 GMT+0200");

Deleted : user_pref("CT2431245.FeedTTL7470634014269327586", 5);

Deleted : user_pref("CT2431245.FeedTTL7470634014537505092", 5);

Deleted : user_pref("CT2431245.FeedTTL7470634015636754705", 5);

Deleted : user_pref("CT2431245.FeedTTL7470634016568520719", 30);

Deleted : user_pref("CT2431245.FirstServerDate", "11-6-2010");

Deleted : user_pref("CT2431245.FirstTime", true);

Deleted : user_pref("CT2431245.FirstTimeFF3", true);

Deleted : user_pref("CT2431245.FixPageNotFoundErrors", true);

Deleted : user_pref("CT2431245.GroupingServerCheckInterval", 1440);

Deleted : user_pref("CT2431245.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Deleted : user_pref("CT2431245.Initialize", true);

Deleted : user_pref("CT2431245.InitializeCommonPrefs", true);

Deleted : user_pref("CT2431245.InstalledDate", "Fri Jun 11 2010 16:24:07 GMT+0200");

Deleted : user_pref("CT2431245.InvalidateCache", false);

Deleted : user_pref("CT2431245.IsGrouping", false);

Deleted : user_pref("CT2431245.IsMulticommunity", false);

Deleted : user_pref("CT2431245.IsOpenThankYouPage", false);

Deleted : user_pref("CT2431245.IsOpenUninstallPage", true);

Deleted : user_pref("CT2431245.LanguagePackLastCheckTime", "Fri Jun 11 2010 16:24:16 GMT+0200");

Deleted : user_pref("CT2431245.LanguagePackReloadIntervalMM", 1440);

Deleted : user_pref("CT2431245.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Deleted : user_pref("CT2431245.LastLogin_2.5.8.6", "Sat Jun 12 2010 12:24:14 GMT+0200");

Deleted : user_pref("CT2431245.LatestVersion", "2.1.0.18");

Deleted : user_pref("CT2431245.Locale", "de-de");

Deleted : user_pref("CT2431245.LoginCache", 4);

Deleted : user_pref("CT2431245.MCDetectTooltipHeight", "83");

Deleted : user_pref("CT2431245.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Deleted : user_pref("CT2431245.MCDetectTooltipWidth", "295");

Deleted : user_pref("CT2431245.RadioIsPodcast", false);

Deleted : user_pref("CT2431245.RadioLastCheckTime", "Fri Jun 11 2010 16:24:12 GMT+0200");

Deleted : user_pref("CT2431245.RadioLastUpdateIPServer", "3");

Deleted : user_pref("CT2431245.RadioLastUpdateServer", "129167771525870000");

Deleted : user_pref("CT2431245.RadioMediaID", "20503672");

Deleted : user_pref("CT2431245.RadioMediaType", "Media Player");

Deleted : user_pref("CT2431245.RadioMenuSelectedID", "EBRadioMenu_CT243124520503672");

Deleted : user_pref("CT2431245.RadioStationName", "Team%20Radio%20Deutschland");

Deleted : user_pref("CT2431245.RadioStationURL", "hxxp://trd.stream.w-u-s.org:6666/dsl.m3u");

Deleted : user_pref("CT2431245.SHRINK_TOOLBAR", 1);

Deleted : user_pref("CT2431245.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]

Deleted : user_pref("CT2431245.SearchFromAddressBarIsInit", true);

Deleted : user_pref("CT2431245.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]

Deleted : user_pref("CT2431245.SearchInNewTabEnabled", true);

Deleted : user_pref("CT2431245.SearchInNewTabIntervalMM", 1440);

Deleted : user_pref("CT2431245.SearchInNewTabLastCheckTime", "Fri Jun 11 2010 16:24:16 GMT+0200");

Deleted : user_pref("CT2431245.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Deleted : user_pref("CT2431245.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]

Deleted : user_pref("CT2431245.SettingsCheckIntervalMin", 120);

Deleted : user_pref("CT2431245.SettingsLastCheckTime", "Sat Jun 12 2010 14:36:15 GMT+0200");

Deleted : user_pref("CT2431245.SettingsLastUpdate", "1275408427");

Deleted : user_pref("CT2431245.ThirdPartyComponentsInterval", 504);

Deleted : user_pref("CT2431245.ThirdPartyComponentsLastCheck", "Fri Jun 11 2010 16:24:07 GMT+0200");

Deleted : user_pref("CT2431245.ThirdPartyComponentsLastUpdate", "1275408427");

Deleted : user_pref("CT2431245.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]

Deleted : user_pref("CT2431245.Uninstall", true);

Deleted : user_pref("CT2431245.UserID", "UN71655730060330544");

Deleted : user_pref("CT2431245.WeatherNetwork", "");

Deleted : user_pref("CT2431245.WeatherPollDate", "Fri Jun 11 2010 16:24:08 GMT+0200");

Deleted : user_pref("CT2431245.WeatherUnit", "C");

Deleted : user_pref("CT2431245.alertChannelId", "825452");

Deleted : user_pref("CT2431245.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");

Deleted : user_pref("CT2431245.clientLogIsEnabled", true);

Deleted : user_pref("CT2431245.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]

Deleted : user_pref("CT2431245.myStuffEnabled", true);

Deleted : user_pref("CT2431245.myStuffPublihserMinWidth", 400);

Deleted : user_pref("CT2431245.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Deleted : user_pref("CT2431245.myStuffServiceIntervalMM", 1440);

Deleted : user_pref("CT2431245.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Deleted : user_pref("CT2431245.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]

Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.bing.com/search?FORM=IEFM1&q=[...]

Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2431245");

Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2431245");
 

*************************
 

AdwCleaner[S1].txt - [18288 octets] - [29/06/2013 15:49:26]
 

########## EOF - C:\AdwCleaner[S1].txt - [18349 octets] ##########

--- --- ---

JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Microsoft Windows XP x86
Ran by Intel on 29.06.2013 at 15:58:56,81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ FireFox

Emptied folder: C:\Documents and Settings\Intel\Application Data\mozilla\firefox\profiles\3028qzgi.default\minidumps [11 files]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.06.2013 at 16:02:01,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST.txt:
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-06-2013 01

Ran by Intel (administrator) on 29-06-2013 16:19:35

Running from C:\Documents and Settings\Intel\Desktop

Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe

() C:\WINDOWS\system32\PSIService.exe

(Skype Technologies S.A.) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

() C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-14] (Adobe Systems Incorporated)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon [689488 2008-03-10] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [1848648 2008-03-17] (CANON INC.)

HKLM\...\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1230704 2011-03-21] ()

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)

HKLM\...\Run: [vspdfprsrv.exe] C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe --background [4229632 2011-01-20] ()

HKLM\...\Run: [FreePDF Assistant] "C:\Program Files\FreePDF_XP\fpassist.exe" [371200 2011-02-23] (shbox.de)

HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" [74752 2012-06-20] (Nullsoft, Inc.)

HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)

HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKCU\...\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [1694208 2007-03-21] (Microsoft Corporation)

HKCU\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {82edc5d0-1778-11e0-a2f3-000e2edf9b77} - F:\AutoRun.exe

MountPoints2: {82edc5d4-1778-11e0-a2f3-b34fdad64ed6} - F:\AutoRun.exe

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk

ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED7.ico ()

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\WINDOWS\system32\CbFsMntNtf3.dll (EldoS Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

SearchScopes: HKCU - {9973DE62-B643-4114-A1CF-91AD71C4FDB1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms}

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)

BHO: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: msdaipp - No CLSID Value - 

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194
 

FireFox:

========

FF ProfilePath: C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default

FF SearchEngine: Google

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: BitComet ????? - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

FF Extension: toolbar - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\toolbar@gmx.net.xpi

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa

FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
 

========================== Services (Whitelisted) =================
 

R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-09-27] (Cisco Systems, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

R2 ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [177704 2007-06-05] ()

R2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3290304 2012-11-22] (Skype Technologies S.A.)

R2 SoundMAX Agent Service (default); C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-21] (Analog Devices, Inc.)

S4 HidServ; %SystemRoot%\System32\hidserv.dll [x]

R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [20747 2009-07-27] (Meetinghouse Data Communications)

S3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [176640 2008-07-25] (Broadcom Corporation)

R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)

R2 CbmDev1; C:\Windows\System32\Drivers\CbmDev1.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev2; C:\Windows\System32\Drivers\CbmDev2.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev3; C:\Windows\System32\Drivers\CbmDev3.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2004-08-04] (Microsoft Corporation)

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)

R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2010-09-27] (Cisco Systems, Inc.)

R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)

R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [457216 2010-03-29] (Aladdin Knowledge Systems)

S3 NABTSFEC; C:\Windows\System32\DRIVERS\NABTSFEC.sys [85376 2004-08-04] (Microsoft Corporation)

S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2004-08-04] (Microsoft Corporation)

R3 RT61; C:\Windows\System32\DRIVERS\RT61.sys [356096 2005-10-28] (Ralink Technology Inc.)

S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2004-08-04] (Microsoft Corporation)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-05] ()

S3 streamip; C:\Windows\System32\DRIVERS\StreamIP.sys [15360 2004-08-04] (Microsoft Corporation)

S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)

S3 WSTCODEC; C:\Windows\System32\DRIVERS\WSTCODEC.SYS [19328 2004-08-04] (Microsoft Corporation)

U3 axakfdps; C:\Windows\System32\Drivers\axakfdps.sys [0 ] (Microsoft Corporation)

S4 Abiosdsk; No ImagePath

S4 abp480n5; No ImagePath

S4 adpu160m; No ImagePath

S4 Aha154x; No ImagePath

S4 aic78u2; No ImagePath

S4 aic78xx; No ImagePath

S4 AliIde; No ImagePath

S4 amsint; No ImagePath

S4 asc; No ImagePath

S4 asc3350p; No ImagePath

S4 asc3550; No ImagePath

S4 Atdisk; No ImagePath

S4 cd20xrnt; No ImagePath

S1 Changer; No ImagePath

S4 CmdIde; No ImagePath

S4 Cpqarray; No ImagePath

U4 dac2w2k; No ImagePath

S4 dac960nt; No ImagePath

S4 dpti2o; No ImagePath

S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]

S4 hpn; No ImagePath

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S1 i2omgmt; No ImagePath

S4 i2omp; No ImagePath

S4 ini910u; No ImagePath

S1 lbrtfdc; No ImagePath

S4 mraid35x; No ImagePath

S1 PCIDump; No ImagePath

S3 PDCOMP; No ImagePath

S3 PDFRAME; No ImagePath

S3 PDRELI; No ImagePath

S3 PDRFRAME; No ImagePath

S4 perc2; No ImagePath

S4 perc2hib; No ImagePath

S4 ql1080; No ImagePath

S4 Ql10wnt; No ImagePath

S4 ql12160; No ImagePath

S4 ql1240; No ImagePath

S4 ql1280; No ImagePath

S4 Simbad; No ImagePath

S4 Sparrow; No ImagePath

S4 symc810; No ImagePath

S4 symc8xx; No ImagePath

S4 sym_hi; No ImagePath

S4 sym_u3; No ImagePath

S4 TosIde; No ImagePath

S4 ultra; No ImagePath

S4 ViaIde; No ImagePath

S3 VirtualFD; \??\C:\Documents and Settings\Intel\Desktop\2\vfd.sys [x]

S3 WDICA; No ImagePath

U1 WS2IFSL; 

U2 wuaserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-29 16:02 - 2013-06-29 16:02 - 00001049 ____A C:\Documents and Settings\Intel\Desktop\JRT.txt

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\Windows\ERUNT

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\JRT

2013-06-29 15:56 - 2013-06-29 15:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Documents and Settings\Intel\Desktop\JRT.exe

2013-06-29 15:54 - 2013-06-29 15:54 - 00018419 ____A C:\Documents and Settings\Intel\Desktop\AdwCleaner[S1].txt

2013-06-29 15:51 - 2013-06-29 15:51 - 00000420 ____A C:\Windows\regopt.log

2013-06-29 15:49 - 2013-06-29 15:50 - 00018419 ____A C:\AdwCleaner[S1].txt

2013-06-29 15:48 - 2013-06-29 15:48 - 00648201 ____A C:\Documents and Settings\Intel\Desktop\adwcleaner.exe

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-27 02:21 - 2011-07-13 04:55 - 02237440 ___RA (OldTimer Tools) C:\OTLPE.exe

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 21:33 - 2013-06-29 15:56 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-26 17:35 - 2013-06-26 18:28 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-23 00:40 - 2013-06-23 13:38 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:19 - 2013-06-13 19:34 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-11 13:37 - 2013-06-11 16:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:24 - 2013-06-07 18:32 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 17:13 - 2013-06-07 18:10 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy
 

==================== One Month Modified Files and Folders ========
 

2013-06-29 16:18 - 2012-07-19 13:06 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-29 16:15 - 2009-07-05 01:58 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Skype

2013-06-29 16:02 - 2013-06-29 16:02 - 00001049 ____A C:\Documents and Settings\Intel\Desktop\JRT.txt

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\Windows\ERUNT

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\JRT

2013-06-29 15:56 - 2013-06-29 15:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Documents and Settings\Intel\Desktop\JRT.exe

2013-06-29 15:56 - 2013-06-26 21:33 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-29 15:54 - 2013-06-29 15:54 - 00018419 ____A C:\Documents and Settings\Intel\Desktop\AdwCleaner[S1].txt

2013-06-29 15:52 - 2009-07-04 04:51 - 00000159 ____A C:\Windows\wiadebug.log

2013-06-29 15:52 - 2009-07-04 04:51 - 00000052 ____A C:\Windows\wiaservc.log

2013-06-29 15:51 - 2013-06-29 15:51 - 00000420 ____A C:\Windows\regopt.log

2013-06-29 15:51 - 2009-07-04 12:24 - 00000062 __ASH C:\Documents and Settings\Intel\Local Settings\desktop.ini

2013-06-29 15:51 - 2009-07-04 12:24 - 00000042 ___SH C:\Documents and Settings\Intel\ntuser.ini

2013-06-29 15:51 - 2009-07-04 12:23 - 00032472 ____A C:\Windows\SchedLgU.Txt

2013-06-29 15:51 - 2009-07-04 12:23 - 00000062 __ASH C:\Documents and Settings\LocalService\Local Settings\desktop.ini

2013-06-29 15:51 - 2009-07-04 12:23 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-29 15:51 - 2009-07-04 12:09 - 00000062 __ASH C:\Documents and Settings\NetworkService\Local Settings\desktop.ini

2013-06-29 15:51 - 2009-07-04 12:04 - 01777958 ____A C:\Windows\WindowsUpdate.log

2013-06-29 15:51 - 2009-07-04 04:45 - 00001024 ___AH C:\Windows\System32\config\userdiff.LOG

2013-06-29 15:50 - 2013-06-29 15:49 - 00018419 ____A C:\AdwCleaner[S1].txt

2013-06-29 15:48 - 2013-06-29 15:48 - 00648201 ____A C:\Documents and Settings\Intel\Desktop\adwcleaner.exe

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-29 14:55 - 2001-08-23 14:00 - 00002206 ____A C:\Windows\System32\wpa.dbl

2013-06-27 03:23 - 2009-10-26 09:48 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\FreePDF_XP

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 18:28 - 2013-06-26 17:35 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0

2013-06-26 13:38 - 2011-02-27 14:23 - 00000178 __ASH C:\Documents and Settings\Administrator\ntuser.ini

2013-06-26 13:38 - 2011-02-27 14:23 - 00000062 __ASH C:\Documents and Settings\Administrator\Local Settings\desktop.ini

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-25 16:08 - 2010-03-12 00:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Formulare

2013-06-23 21:26 - 2013-01-28 22:37 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Winamp

2013-06-23 13:40 - 2009-11-13 11:44 - 00000900 __ASH C:\Windows\System32\KGyGaAvL.sys

2013-06-23 13:40 - 2009-08-02 01:53 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\Corel

2013-06-23 13:40 - 2009-08-01 23:27 - 00000000 ____D C:\Documents and Settings\Intel\My Documents\My PSP Files

2013-06-23 13:38 - 2013-06-23 00:40 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:34 - 2013-06-13 19:19 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-12 17:18 - 2012-07-19 13:06 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2013-06-12 17:18 - 2011-07-16 13:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2013-06-11 16:49 - 2013-06-11 13:37 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:32 - 2013-06-07 18:24 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 18:26 - 2009-07-05 09:01 - 00105472 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-06-07 18:20 - 2009-07-11 10:32 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\vlc

2013-06-07 18:10 - 2013-06-07 17:13 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ___RD C:\Program Files\Skype

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype

2013-06-06 19:08 - 2012-05-03 14:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-06-01 21:29 - 2013-04-09 09:16 - 00046890 ____A C:\Windows\setupapi.log

2013-05-30 19:40 - 2013-05-07 19:07 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\krispak

2013-05-30 19:24 - 2010-02-10 14:11 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\kleeland

2013-05-30 17:37 - 2013-05-23 15:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe

[2007-03-21 12:08] - [2007-03-21 12:08] - 1033216 ____A (Microsoft Corporation) 42d32722b805d7df42d30487a0bcbd78 
 

C:\Windows\System32\winlogon.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0502272 ____A (Microsoft Corporation) 01c3346c241652f43aed8e2149881bfe 
 

C:\Windows\System32\svchost.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0014336 ____A (Microsoft Corporation) 8f078ae4ed187aaabc0a305146de6716 
 

C:\Windows\System32\services.exe

[2004-08-04 01:56] - [2009-02-06 12:22] - 0110592 ____A (Microsoft Corporation) 4712531ab7a01b7ee059853ca17d39bd 
 

C:\Windows\System32\User32.dll

[2007-03-21 12:10] - [2007-03-21 12:10] - 0577024 ____A (Microsoft Corporation) 1800f293bccc8ede8a70e12b88d80036 
 

C:\Windows\System32\userinit.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0024576 ____A (Microsoft Corporation) 39b1ffb03c2296323832acbae50d2aff 
 

C:\Windows\System32\Drivers\volsnap.sys

[2004-08-04 00:00] - [2004-08-04 00:00] - 0052352 ____A (Microsoft Corporation) ee4660083deba849ff6c485d944b379b 
 
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Das ist leider etwas unsauber kopiert worden, weis auch nicht wieso. Ich hoffe das ist so verständlich. Danke noch einmal für die tolle Unterstützung. Freue mich schon auf weitere Instruktionen.

Gruß
Juji

Supi :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST Log. Noch Probleme? :)

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=30a4702c8974ee4f835059077779db7f
# engine=14206
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-29 07:35:41
# local_time=2013-06-29 09:35:41 (+0100, W. Europe Daylight Time)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# scanned=125082
# found=0
# cleaned=0
# scan_time=4472

Checkup:

Results of screen317's Security Check version 0.99.68
Windows XP Service Pack 2 x86
Out of date service pack!!
Internet Explorer 8 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
CCleaner
Java 7 Update 25
Adobe Flash Player 11.7.700.224
Adobe Reader XI
Mozilla Firefox 21.0 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 13% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

FRST:
FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-06-2013 01

Ran by Intel (administrator) on 29-06-2013 21:41:26

Running from C:\Documents and Settings\Intel\Desktop

Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

() C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe

(shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe

() C:\WINDOWS\system32\PSIService.exe

(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe

(Skype Technologies S.A.) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

(Analog Devices, Inc.) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin [611712 2008-08-14] (Adobe Systems Incorporated)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon [689488 2008-03-10] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [1848648 2008-03-17] (CANON INC.)

HKLM\...\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1230704 2011-03-21] ()

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)

HKLM\...\Run: [vspdfprsrv.exe] C:\Program Files\Avanquest\Expert PDF 7 Professional\vspdfprsrv.exe --background [4229632 2011-01-20] ()

HKLM\...\Run: [FreePDF Assistant] "C:\Program Files\FreePDF_XP\fpassist.exe" [371200 2011-02-23] (shbox.de)

HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" [74752 2012-06-20] (Nullsoft, Inc.)

HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)

HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

HKCU\...\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [1694208 2007-03-21] (Microsoft Corporation)

HKCU\...\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [18678376 2013-04-19] (Skype Technologies S.A.)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

MountPoints2: {82edc5d0-1778-11e0-a2f3-000e2edf9b77} - F:\AutoRun.exe

MountPoints2: {82edc5d4-1778-11e0-a2f3-b34fdad64ed6} - F:\AutoRun.exe

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VPN Client.lnk

ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{1CE60928-8325-49A8-8B06-633E48DD2B67}\Icon3E5562ED7.ico ()

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\WINDOWS\system32\CbFsMntNtf3.dll (EldoS Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

SearchScopes: HKCU - {9973DE62-B643-4114-A1CF-91AD71C4FDB1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms}

BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)

BHO: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: msdaipp - No CLSID Value - 

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194
 

FireFox:

========

FF ProfilePath: C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default

FF SearchEngine: Google

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF Extension: BitComet ????? - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}

FF Extension: toolbar - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\toolbar@gmx.net.xpi

FF Extension: No Name - C:\Documents and Settings\Intel\Application Data\Mozilla\Firefox\Profiles\3028qzgi.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video

FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa

FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
 

========================== Services (Whitelisted) =================
 

R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-09-27] (Cisco Systems, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

R2 ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [177704 2007-06-05] ()

R2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3290304 2012-11-22] (Skype Technologies S.A.)

R2 SoundMAX Agent Service (default); C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056 2002-09-21] (Analog Devices, Inc.)

S4 HidServ; %SystemRoot%\System32\hidserv.dll [x]

R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [20747 2009-07-27] (Meetinghouse Data Communications)

S3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [176640 2008-07-25] (Broadcom Corporation)

R3 cbfs3; C:\Windows\System32\DRIVERS\cbfs3.sys [299024 2012-04-09] (EldoS Corporation)

R2 CbmDev1; C:\Windows\System32\Drivers\CbmDev1.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev2; C:\Windows\System32\Drivers\CbmDev2.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

R2 CbmDev3; C:\Windows\System32\Drivers\CbmDev3.sys [12704 1998-01-16] (MARX Datentechnik GmbH)

S3 CCDECODE; C:\Windows\System32\DRIVERS\CCDECODE.sys [17024 2004-08-04] (Microsoft Corporation)

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)

R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2010-09-27] (Cisco Systems, Inc.)

R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)

R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [457216 2010-03-29] (Aladdin Knowledge Systems)

S3 NABTSFEC; C:\Windows\System32\DRIVERS\NABTSFEC.sys [85376 2004-08-04] (Microsoft Corporation)

S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2004-08-04] (Microsoft Corporation)

R3 RT61; C:\Windows\System32\DRIVERS\RT61.sys [356096 2005-10-28] (Ralink Technology Inc.)

S3 SLIP; C:\Windows\System32\DRIVERS\SLIP.sys [11136 2004-08-04] (Microsoft Corporation)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2009-07-05] ()

S3 streamip; C:\Windows\System32\DRIVERS\StreamIP.sys [15360 2004-08-04] (Microsoft Corporation)

S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)

S3 WSTCODEC; C:\Windows\System32\DRIVERS\WSTCODEC.SYS [19328 2004-08-04] (Microsoft Corporation)

U3 ac43ypkv; C:\Windows\System32\Drivers\ac43ypkv.sys [0 ] (Microsoft Corporation)

S4 Abiosdsk; No ImagePath

S4 abp480n5; No ImagePath

S4 adpu160m; No ImagePath

S4 Aha154x; No ImagePath

S4 aic78u2; No ImagePath

S4 aic78xx; No ImagePath

S4 AliIde; No ImagePath

S4 amsint; No ImagePath

S4 asc; No ImagePath

S4 asc3350p; No ImagePath

S4 asc3550; No ImagePath

S4 Atdisk; No ImagePath

S4 cd20xrnt; No ImagePath

S1 Changer; No ImagePath

S4 CmdIde; No ImagePath

S4 Cpqarray; No ImagePath

U4 dac2w2k; No ImagePath

S4 dac960nt; No ImagePath

S4 dpti2o; No ImagePath

S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]

S4 hpn; No ImagePath

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]

S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]

S1 i2omgmt; No ImagePath

S4 i2omp; No ImagePath

S4 ini910u; No ImagePath

S1 lbrtfdc; No ImagePath

S4 mraid35x; No ImagePath

S1 PCIDump; No ImagePath

S3 PDCOMP; No ImagePath

S3 PDFRAME; No ImagePath

S3 PDRELI; No ImagePath

S3 PDRFRAME; No ImagePath

S4 perc2; No ImagePath

S4 perc2hib; No ImagePath

S4 ql1080; No ImagePath

S4 Ql10wnt; No ImagePath

S4 ql12160; No ImagePath

S4 ql1240; No ImagePath

S4 ql1280; No ImagePath

S4 Simbad; No ImagePath

S4 Sparrow; No ImagePath

S4 symc810; No ImagePath

S4 symc8xx; No ImagePath

S4 sym_hi; No ImagePath

S4 sym_u3; No ImagePath

S4 TosIde; No ImagePath

S4 ultra; No ImagePath

S4 ViaIde; No ImagePath

S3 VirtualFD; \??\C:\Documents and Settings\Intel\Desktop\2\vfd.sys [x]

S3 WDICA; No ImagePath

U1 WS2IFSL; 

U2 wuaserv; 
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-29 21:39 - 2013-06-29 21:39 - 00890988 ____A C:\Documents and Settings\Intel\Desktop\SecurityCheck.exe

2013-06-29 19:53 - 2013-06-29 20:09 - 331805736 ____A (Microsoft Corporation) C:\Documents and Settings\Intel\Desktop\WindowsXP-KB936929-SP3-x86-ENU.exe

2013-06-29 19:50 - 2013-06-29 20:16 - 00015479 ____A C:\Windows\svcpack.log

2013-06-29 19:47 - 2013-06-29 19:47 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00144896 ____A (Oracle Corporation) C:\Windows\System32\javacpl.cpl

2013-06-29 19:47 - 2013-06-29 19:47 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll

2013-06-29 19:47 - 2013-06-29 19:47 - 00000000 ____D C:\Program Files\Common Files\Java

2013-06-29 18:16 - 2012-09-02 17:03 - 247709880 ____A C:\Documents and Settings\Intel\Desktop\BitDefender Internet Security 2013_x86.exe

2013-06-29 16:02 - 2013-06-29 16:02 - 00001049 ____A C:\Documents and Settings\Intel\Desktop\JRT.txt

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\Windows\ERUNT

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\JRT

2013-06-29 15:56 - 2013-06-29 15:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Documents and Settings\Intel\Desktop\JRT.exe

2013-06-29 15:54 - 2013-06-29 15:54 - 00018419 ____A C:\Documents and Settings\Intel\Desktop\AdwCleaner[S1].txt

2013-06-29 15:51 - 2013-06-29 15:51 - 00000420 ____A C:\Windows\regopt.log

2013-06-29 15:49 - 2013-06-29 15:50 - 00018419 ____A C:\AdwCleaner[S1].txt

2013-06-29 15:48 - 2013-06-29 15:48 - 00648201 ____A C:\Documents and Settings\Intel\Desktop\adwcleaner.exe

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-27 02:21 - 2011-07-13 04:55 - 02237440 ___RA (OldTimer Tools) C:\OTLPE.exe

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 21:33 - 2013-06-29 17:44 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-23 00:40 - 2013-06-23 13:38 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:19 - 2013-06-13 19:34 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-11 13:37 - 2013-06-11 16:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:24 - 2013-06-07 18:32 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 17:13 - 2013-06-07 18:10 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy
 

==================== One Month Modified Files and Folders ========
 

2013-06-29 21:40 - 2009-07-05 01:58 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Skype

2013-06-29 21:39 - 2013-06-29 21:39 - 00890988 ____A C:\Documents and Settings\Intel\Desktop\SecurityCheck.exe

2013-06-29 21:38 - 2009-07-04 12:04 - 01780081 ____A C:\Windows\WindowsUpdate.log

2013-06-29 21:18 - 2012-07-19 13:06 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-29 20:16 - 2013-06-29 19:50 - 00015479 ____A C:\Windows\svcpack.log

2013-06-29 20:16 - 2009-12-04 21:57 - 00000000 ____D C:\Windows\System32\CatRoot_bak

2013-06-29 20:15 - 2013-04-09 09:16 - 00065741 ____A C:\Windows\setupapi.log

2013-06-29 20:09 - 2013-06-29 19:53 - 331805736 ____A (Microsoft Corporation) C:\Documents and Settings\Intel\Desktop\WindowsXP-KB936929-SP3-x86-ENU.exe

2013-06-29 20:05 - 2013-01-28 22:37 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\Winamp

2013-06-29 19:47 - 2013-06-29 19:47 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe

2013-06-29 19:47 - 2013-06-29 19:47 - 00144896 ____A (Oracle Corporation) C:\Windows\System32\javacpl.cpl

2013-06-29 19:47 - 2013-06-29 19:47 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll

2013-06-29 19:47 - 2013-06-29 19:47 - 00000000 ____D C:\Program Files\Common Files\Java

2013-06-29 19:47 - 2012-12-05 19:00 - 00867240 ____A (Oracle Corporation) C:\Windows\System32\npdeployJava1.dll

2013-06-29 19:47 - 2010-07-05 00:08 - 00789416 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll

2013-06-29 19:46 - 2009-07-13 09:45 - 00000000 ____D C:\Program Files\Java

2013-06-29 18:53 - 2009-10-26 09:48 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\FreePDF_XP

2013-06-29 17:59 - 2009-07-04 04:51 - 00000280 ____A C:\Windows\wiadebug.log

2013-06-29 17:44 - 2013-06-26 21:33 - 00006462 ____A C:\Windows\System32\PerfStringBackup.TMP

2013-06-29 17:40 - 2009-07-04 12:24 - 00000062 __ASH C:\Documents and Settings\Intel\Local Settings\desktop.ini

2013-06-29 17:40 - 2009-07-04 12:23 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-29 17:40 - 2009-07-04 04:51 - 00000052 ____A C:\Windows\wiaservc.log

2013-06-29 17:39 - 2009-07-04 12:24 - 00000178 ___SH C:\Documents and Settings\Intel\ntuser.ini

2013-06-29 17:39 - 2009-07-04 12:23 - 00032472 ____A C:\Windows\SchedLgU.Txt

2013-06-29 17:39 - 2009-07-04 12:23 - 00000062 __ASH C:\Documents and Settings\LocalService\Local Settings\desktop.ini

2013-06-29 17:39 - 2009-07-04 12:09 - 00000062 __ASH C:\Documents and Settings\NetworkService\Local Settings\desktop.ini

2013-06-29 16:02 - 2013-06-29 16:02 - 00001049 ____A C:\Documents and Settings\Intel\Desktop\JRT.txt

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\Windows\ERUNT

2013-06-29 15:58 - 2013-06-29 15:58 - 00000000 ____D C:\JRT

2013-06-29 15:56 - 2013-06-29 15:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Documents and Settings\Intel\Desktop\JRT.exe

2013-06-29 15:54 - 2013-06-29 15:54 - 00018419 ____A C:\Documents and Settings\Intel\Desktop\AdwCleaner[S1].txt

2013-06-29 15:51 - 2013-06-29 15:51 - 00000420 ____A C:\Windows\regopt.log

2013-06-29 15:51 - 2009-07-04 04:45 - 00001024 ___AH C:\Windows\System32\config\userdiff.LOG

2013-06-29 15:50 - 2013-06-29 15:49 - 00018419 ____A C:\AdwCleaner[S1].txt

2013-06-29 15:48 - 2013-06-29 15:48 - 00648201 ____A C:\Documents and Settings\Intel\Desktop\adwcleaner.exe

2013-06-29 15:03 - 2013-06-29 15:03 - 00000000 ____D C:\FRST

2013-06-29 15:02 - 2013-06-29 15:02 - 01372095 ____A (Farbar) C:\Documents and Settings\Intel\Desktop\FRST.exe

2013-06-29 14:55 - 2001-08-23 14:00 - 00002206 ____A C:\Windows\System32\wpa.dbl

2013-06-27 02:20 - 2013-06-27 02:20 - 00000000 ____D C:\_OTL

2013-06-26 13:38 - 2011-02-27 14:23 - 00000178 __ASH C:\Documents and Settings\Administrator\ntuser.ini

2013-06-26 13:38 - 2011-02-27 14:23 - 00000062 __ASH C:\Documents and Settings\Administrator\Local Settings\desktop.ini

2013-06-26 13:10 - 2013-06-26 13:10 - 00163066 ____A C:\Documents and Settings\Intel\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163039 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\2433f433

2013-06-26 13:10 - 2013-06-26 13:10 - 00163031 ____A C:\Documents and Settings\All Users\Application Data\2433f433

2013-06-25 16:08 - 2010-03-12 00:49 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Formulare

2013-06-23 13:40 - 2009-11-13 11:44 - 00000900 __ASH C:\Windows\System32\KGyGaAvL.sys

2013-06-23 13:40 - 2009-08-02 01:53 - 00000000 ____D C:\Documents and Settings\Intel\Local Settings\Application Data\Corel

2013-06-23 13:40 - 2009-08-01 23:27 - 00000000 ____D C:\Documents and Settings\Intel\My Documents\My PSP Files

2013-06-23 13:38 - 2013-06-23 00:40 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\i kotki

2013-06-22 17:13 - 2013-06-22 17:13 - 00318000 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_Klausuraufgaben_13_07_12.xlsx

2013-06-22 16:52 - 2013-06-22 16:52 - 00334544 ____A C:\Documents and Settings\Intel\Desktop\Stahl1_15_02_13_Aufgaben.xlsm

2013-06-13 19:34 - 2013-06-13 19:19 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\ice princess

2013-06-12 17:18 - 2013-06-12 17:18 - 17617288 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe

2013-06-12 17:18 - 2012-07-19 13:06 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe

2013-06-12 17:18 - 2011-07-16 13:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl

2013-06-11 16:49 - 2013-06-11 13:37 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\I-Wurf_Copy

2013-06-07 18:32 - 2013-06-07 18:24 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\New Folder (2)

2013-06-07 18:26 - 2009-07-05 09:01 - 00105472 ____A C:\Documents and Settings\Intel\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-06-07 18:20 - 2009-07-11 10:32 - 00000000 ____D C:\Documents and Settings\Intel\Application Data\vlc

2013-06-07 18:10 - 2013-06-07 17:13 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\Italy

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ___RD C:\Program Files\Skype

2013-06-06 19:11 - 2009-07-05 01:57 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype

2013-06-06 19:08 - 2012-05-03 14:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-05-30 19:40 - 2013-05-07 19:07 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\krispak

2013-05-30 19:24 - 2010-02-10 14:11 - 00000000 ____D C:\Documents and Settings\Intel\Desktop\kleeland

2013-05-30 17:37 - 2013-05-23 15:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe

[2007-03-21 12:08] - [2007-03-21 12:08] - 1033216 ____A (Microsoft Corporation) 42d32722b805d7df42d30487a0bcbd78 
 

C:\Windows\System32\winlogon.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0502272 ____A (Microsoft Corporation) 01c3346c241652f43aed8e2149881bfe 
 

C:\Windows\System32\svchost.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0014336 ____A (Microsoft Corporation) 8f078ae4ed187aaabc0a305146de6716 
 

C:\Windows\System32\services.exe

[2004-08-04 01:56] - [2009-02-06 12:22] - 0110592 ____A (Microsoft Corporation) 4712531ab7a01b7ee059853ca17d39bd 
 

C:\Windows\System32\User32.dll

[2007-03-21 12:10] - [2007-03-21 12:10] - 0577024 ____A (Microsoft Corporation) 1800f293bccc8ede8a70e12b88d80036 
 

C:\Windows\System32\userinit.exe

[2004-08-04 01:56] - [2004-08-04 01:56] - 0024576 ____A (Microsoft Corporation) 39b1ffb03c2296323832acbae50d2aff 
 

C:\Windows\System32\Drivers\volsnap.sys

[2004-08-04 00:00] - [2004-08-04 00:00] - 0052352 ____A (Microsoft Corporation) ee4660083deba849ff6c485d944b379b 
 
 

==================== End Of Log ============================

--- --- ---

Firefox bitte updaten.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Noch Probleme? :)