Trojaner-Board - http://www

hallo an alle,

ich bin seit heute neuer nutzer und wollte euch gleich mal mit nem rieeeesen problem belästigen ;)
leider bin ich, aufgrund der tatsache das ich eben noch nie probleme hatte, ziemlicher neuling wenn es um diverse sicherheitsprogramme geht. mein bruder hat mir ein bisschen geholfen, erklärt und vorgearbeitet wie ihr an den logs sicherlich sehen könnt. er hat schon mit mir geschimpft weil ich ziemlich update-faul bin.... :kaffee: bitte bitte helft mir!

nun zu meinem problem:
seit gestern habe ich eine malware auf meinem laptop die einfach nicht verschwinden will. das problem ist das sich ständig der internet explorer öffnet und die seite hxxp://www_getwindowinfo/ öffnet. wenn ich den explorer schließe, wird er sofort wieder geöffnet. spybot lief drüber und avira, hat allerdings nichts gebracht. danach lief (durch meinen bruder :kloppen: ) der ADW-Cleaner drüber mit folgendem Log:

Code:

# AdwCleaner v2.306 - Datei am 31/07/2013 um 13:26:17 erstellt

# Aktualisiert am 19/07/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium  (64 bits)

# Benutzer : Tina - LOONIESVAIO

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Tina\Downloads\adwcleaner06.exe

# Option [Suche]
 
 

**** [Dienste] ****
 

Gefunden : APNMCP

Gefunden : SProtection
 

***** [Dateien / Ordner] *****
 

Datei Gefunden : C:\user.js

Datei Gefunden : C:\Users\Public\Desktop\Babylon.lnk

Ordner Gefunden : C:\Program Files (x86)\AskPartnerNetwork

Ordner Gefunden : C:\Program Files (x86)\Common Files\Freemium

Ordner Gefunden : C:\Program Files (x86)\Common Files\Umbrella

Ordner Gefunden : C:\Program Files (x86)\Covus Freemium

Ordner Gefunden : C:\Program Files (x86)\FoxyDeal

Ordner Gefunden : C:\Program Files (x86)\Freemium

Ordner Gefunden : C:\Program Files (x86)\Iminent

Ordner Gefunden : C:\ProgramData\APN

Ordner Gefunden : C:\ProgramData\AskPartnerNetwork

Ordner Gefunden : C:\ProgramData\Freemium

Ordner Gefunden : C:\ProgramData\Iminent

Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemium

Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent

Ordner Gefunden : C:\ProgramData\Partner

Ordner Gefunden : C:\Users\Tina\AppData\Local\AskPartnerNetwork

Ordner Gefunden : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan

Ordner Gefunden : C:\Users\Tina\AppData\Local\Temp\APN

Ordner Gefunden : C:\Users\Tina\AppData\Local\Temp\Iminent

Ordner Gefunden : C:\Users\Tina\AppData\Roaming\Iminent

Ordner Gefunden : C:\Users\Tina\AppData\Roaming\OpenCandy
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gefunden : HKCU\Software\AskPartnerNetwork

Schlüssel Gefunden : HKCU\Software\FoxyDeal

Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl

Schlüssel Gefunden : HKCU\Software\Iminent

Schlüssel Gefunden : HKCU\Software\InstallCore

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com

Schlüssel Gefunden : HKCU\Software\SmartBar

Schlüssel Gefunden : HKCU\Software\SmartbarLog

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gefunden : HKLM\Software\AskPartnerNetwork

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandle.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandler

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gefunden : HKLM\Software\DeviceVM

Schlüssel Gefunden : HKLM\Software\Iminent

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gefunden : HKLM\Software\Umbrella

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FoxyDeal

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gefunden : HKU\S-1-5-21-260020902-558958140-274888911-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v8.0.7600.17267
 

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=hp&fr=linkury-tb

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?AF=100478&babsrc=NT_ss&mntrId=04b412f2000000000000001e101fa6db

[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

[HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb
 

-\\ Google Chrome v28.0.1500.72
 

Datei : C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Gefunden [l.62] : search_url = "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb",

Gefunden [l.2325] : homepage = "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=hp&fr=linkury-tb",

Gefunden [l.2689] : urls_to_restore_on_startup = [ "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=hp&fr=linkury-tb" ]
 

*************************
 

AdwCleaner[R1].txt - [26907 octets] - [31/07/2013 13:26:17]
 

########## EOF - C:\AdwCleaner[R1].txt - [26968 octets] ##########

mein bruder hat nur die hände über den kopf zusammen geschlagen und sich gewundert das mein rechner überhaupt noch läuft :crazy::glaskugel:

danach lies er malwarebytes und combofix übern laptop laufen: malwarebytes ohne ergebnis, combofix wie folgt:

Code:

ComboFix 13-07-31.02 - Tina 31.07.2013  16:11:49.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.3950.1970 [GMT 2:00]

ausgeführt von:: c:\users\Tina\Downloads\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Windows Live\Messenger\msacm32.dll

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Service_DCService.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-06-28 bis 2013-07-31  ))))))))))))))))))))))))))))))

.

.

2013-07-31 13:11 . 2013-07-31 13:11        --------        d-----w-        c:\users\Tina\AppData\Roaming\Malwarebytes

2013-07-31 13:11 . 2013-07-31 13:11        --------        d-----w-        c:\programdata\Malwarebytes

2013-07-31 13:10 . 2013-07-31 13:11        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2013-07-31 13:10 . 2013-04-04 12:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-07-30 06:25 . 2013-07-02 08:34        9460976        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{190CA830-6ED2-49F9-BA09-156EC83CA4F5}\mpengine.dll

2013-07-29 11:04 . 2013-07-29 11:04        --------        d-----w-        c:\program files (x86)\Common Files\soft Xpansion

2013-07-29 11:04 . 2013-07-29 11:04        263016        ----a-w-        c:\windows\system32\Spool\prtprocs\x64\sx_p8_pro7_p.dll

2013-07-29 11:00 . 2013-07-29 11:00        --------        d-----w-        C:\SoftwareUpdater

2013-07-29 11:00 . 2013-07-29 11:00        --------        d-----w-        c:\programdata\Package Cache

2013-07-29 10:59 . 2013-07-31 06:52        --------        d-----w-        c:\users\Tina\AppData\Roaming\Windows Net Data

2013-07-29 10:59 . 2013-07-29 10:59        --------        d-----w-        c:\users\Tina\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl

2013-07-29 09:04 . 2013-07-29 09:04        --------        d-----w-        c:\users\Tina\AppData\Roaming\Avira

2013-07-29 09:00 . 2013-07-29 09:00        83672        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-07-29 08:59 . 2013-07-28 06:48        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-07-29 08:58 . 2013-07-28 06:48        130016        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-07-29 08:58 . 2013-07-28 06:48        100712        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-07-29 08:58 . 2013-07-29 08:59        --------        d-----w-        c:\programdata\Avira

2013-07-29 08:58 . 2013-07-29 08:58        --------        d-----w-        c:\program files (x86)\Avira

2013-07-14 19:30 . 2013-07-14 19:30        --------        d-----w-        c:\program files\Microsoft Silverlight

2013-07-14 19:30 . 2013-07-14 19:30        --------        d-----w-        c:\program files (x86)\Microsoft Silverlight

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Application Restart 74B525C993BF1331AD859D73B9E85F0FC9D61B2A3FC9ECE353611046B3BE601673437AA0D16D0002DF1F495F454FFC7DF3E3D07EB07640588EB62CB5DB03D69B"="c:\program files\Windows Media Player\wmpnscfg.exe" [2009-07-14 70656]

"Application Restart c:\progra~1\WI54FB~1\wmpnscfg.exe"="c:\program files\Windows Media Player\wmpnscfg.exe" [2009-07-14 70656]

"Application Restart 9"="c:\program files\Windows Media Player\wmpnscfg.exe" [2009-07-14 70656]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2010-05-31 673136]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-08 98304]

"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-06-01 600928]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]

"SHTtray.exe"="c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe" [2010-06-20 99696]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-07-28 345144]

.

c:\users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

net.lnk - c:\users\Tina\AppData\Roaming\Windows Net Data\net.exe [2013-7-29 709120]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-6-8 1128224]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]

R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

R3 SXDS10;soft Xpansion Dispatch Service;c:\program files (x86)\Common Files\soft Xpansion\sxds10.exe \Service;c:\program files (x86)\Common Files\soft Xpansion\sxds10.exe \Service [x]

R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x]

R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x]

S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x]

S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x]

S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [x]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]

S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x]

S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]

S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]

S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x]

S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x]

S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]

S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]

S3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys;c:\windows\SYSNATIVE\DRIVERS\SFEP.sys [x]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]

S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]

S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-07-14 17:58        1173456        ----a-w-        c:\program files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 20:04]

.

2013-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 20:04]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-31 10775584]

"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-05-31 2040352]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>

uSearchAssistant = hxxp://www.google.com

LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll

TCP: DhcpNameServer = 192.168.178.1

TCP: Interfaces\{84E90DCE-4226-462A-B382-020867B3AC21}: NameServer = 193.189.244.225 193.189.244.206

TCP: Interfaces\{9C41EFE5-85F5-4056-96FF-9D634C277CE8}: NameServer = 193.189.244.206 193.189.244.225

TCP: Interfaces\{F1280C0C-DC5B-49BB-8E62-0DA869D78107}: NameServer = 193.189.244.225 193.189.244.206

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{41564952-412D-5637-00A7-7A786E7484D7} - c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll

Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll

Toolbar-{EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - c:\program files (x86)\Freemium\Free PDF Perfect\ieagent32.dll

Toolbar-{EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - c:\program files (x86)\Freemium\Free PDF Perfect\ieagent64.dll

WebBrowser-{41564952-412D-5637-00A7-7A786E7484D7} - (no file)

HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe

AddRemove-{88265079-D6F4-4292-86BE-D2053E80BFE4} - c:\program files (x86)\Common Files\Freemium\Uninstall\{88265079-D6F4-4292-86BE-D2053E80BFE4}.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]

"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe

c:\windows\SysWOW64\DllHost.exe

c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

c:\program files (x86)\Internet Explorer\iexplore.exe

c:\windows\SysWOW64\RunDll32.exe

c:\program files (x86)\Internet Explorer\iexplore.exe

c:\program files\Sony\VAIO Care\listener.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-07-31  16:23:09 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-07-31 14:23

.

Vor Suchlauf: 14 Verzeichnis(se), 254.959.022.080 Bytes frei

Nach Suchlauf: 19 Verzeichnis(se), 254.710.792.192 Bytes frei

.

- - End Of File - - F3A60B3FE4A0284FADB22CB3615638C0

D41D8CD98F00B204E9800998ECF8427E

aktuell läuft der ESET Scanner, seeeehr langsam und stockend. das wird noch einige zeit dauern :kaffee::kaffee:
kann mir bitte bitte irgendjemand helfen?

viele liebe grüße
tina

deinstallieren hat mit dem remover geklappt, trotz fehlermeldungen sind die toolbars nicht mehr da.

hier der log vom FRST

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-07-2013 03

Ran by Tina at 2013-07-31 20:31:39

Running from C:\Users\Tina\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)

Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)

Alps Pointing-device for VAIO

Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)

ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.115)

ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.368)

Catalyst Control Center Core Implementation (x32 Version: 2010.0209.16.306)

Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0209.16.306)

Catalyst Control Center Graphics Full New (x32 Version: 2010.0209.16.306)

Catalyst Control Center Graphics Light (x32 Version: 2010.0209.16.306)

Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0209.16.306)

Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0209.16.306)

Catalyst Control Center InstallProxy (x32 Version: 2010.0209.16.306)

Catalyst Control Center Localization All (x32 Version: 2010.0209.16.306)

CCC Help Chinese Standard (x32 Version: 2010.0209.0015.306)

CCC Help Chinese Traditional (x32 Version: 2010.0209.0015.306)

CCC Help Czech (x32 Version: 2010.0209.0015.306)

CCC Help Danish (x32 Version: 2010.0209.0015.306)

CCC Help Dutch (x32 Version: 2010.0209.0015.306)

CCC Help English (x32 Version: 2010.0209.0015.306)

CCC Help Finnish (x32 Version: 2010.0209.0015.306)

CCC Help French (x32 Version: 2010.0209.0015.306)

CCC Help German (x32 Version: 2010.0209.0015.306)

CCC Help Greek (x32 Version: 2010.0209.0015.306)

CCC Help Hungarian (x32 Version: 2010.0209.0015.306)

CCC Help Italian (x32 Version: 2010.0209.0015.306)

CCC Help Japanese (x32 Version: 2010.0209.0015.306)

CCC Help Korean (x32 Version: 2010.0209.0015.306)

CCC Help Norwegian (x32 Version: 2010.0209.0015.306)

CCC Help Polish (x32 Version: 2010.0209.0015.306)

CCC Help Portuguese (x32 Version: 2010.0209.0015.306)

CCC Help Russian (x32 Version: 2010.0209.0015.306)

CCC Help Spanish (x32 Version: 2010.0209.0015.306)

CCC Help Swedish (x32 Version: 2010.0209.0015.306)

CCC Help Thai (x32 Version: 2010.0209.0015.306)

CCC Help Turkish (x32 Version: 2010.0209.0015.306)

ccc-core-static (x32 Version: 2010.0209.16.306)

ccc-utility64 (Version: 2010.0209.16.306)

eaner (Version: 4.01)

ESET Online Scanner v3 (x32)

Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)

Google Chrome (x32 Version: 28.0.1500.72)

Google Update Helper (x32 Version: 1.3.21.153)

HitmanPro 3.7 (Version: 3.7.6.201)

Iminent (x32 Version: 6.27.21.0)

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)

Java 7 Update 25 (64-bit) (Version: 7.0.250)

Junk Mail filter update (x32 Version: 14.0.8117.416)

LyricXeeker (x32)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Media Gallery (Version: 1.3.0)

Media Gallery (x32 Version: 1.3.0.06230)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Choice Guard (x32 Version: 2.0.48.0)

Microsoft Office 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Mobile Partner (x32 Version: 16.002.03.03.511)

MSVCRT (x32 Version: 14.0.1468.721)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

Open It! (x32 Version: 1.1.1)

PMB (x32 Version: 5.3.00.06040)

PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00)

PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00)

PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00)

PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00)

Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6034)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098)

Revo Uninstaller 1.95 (x32 Version: 1.95)

Skype™ 6.6 (x32 Version: 6.6.106)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Zip Opener (HKCU)

VAIO - Media Gallery (x32 Version: 1.3.0.06230)

VAIO - PMB VAIO Edition Guide (x32 Version: 1.3.00.06040)

VAIO - PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180)

VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110)

VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180)

VAIO Care (x32 Version: 6.4.2.11150)

VAIO Control Center (x32 Version: 4.3.0.05310)

VAIO Data Restore Tool (x32 Version: 1.4.0.05240)

VAIO DVD Menu Data (x32 Version: 2.2.00.05120)

VAIO Gate (x32 Version: 2.2.0.06080)

VAIO Gate Default (x32 Version: 2.2.0.07020)

VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230)

VAIO Media plus (Version: 2.1.0)

VAIO Media plus (x32 Version: 2.1.0.18210)

VAIO Media plus Opening Movie (x32 Version: 2.1.0.13220)

VAIO Movie Story Template Data (x32 Version: 2.3.00.06040)

VAIO Quick Web Access (x32 Version: 1.3.4.2)

VAIO Sample Contents (x32 Version: 1.3.0.06041)

VAIO screensaver (x32 Version: 1.0.0.0)

VAIO Smart Network (x32 Version: 3.3.0.06080)

VAIO Update (x32 Version: 6.1.1.10250)

VAIO-Handbuch (x32 Version: 1.1.0.05280)

VAIO-Support für Übertragungen (x32 Version: 1.2.0.06230)

VU5x64 (Version: 1.1.0)

VU5x86 (x32 Version: 1.0.0)

VU5x86 (x32 Version: 1.1.0)

WIDCOMM Bluetooth Software (Version: 6.3.0.5600)

Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5)

Windows Live Call (x32 Version: 14.0.8117.0416)

Windows Live Communications Platform (x32 Version: 14.0.8117.416)

Windows Live Essentials (x32 Version: 14.0.8117.0416)

Windows Live Essentials (x32 Version: 14.0.8117.416)

Windows Live Fotogalerie (x32 Version: 14.0.8117.416)

Windows Live Mail (x32 Version: 14.0.8117.0416)

Windows Live Messenger (x32 Version: 14.0.8117.0416)

Windows Live Sync (x32 Version: 14.0.8117.416)

Windows Live Writer (x32 Version: 14.0.8117.0416)

Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)

Windows Utils (x32)
 

==================== Restore Points  =========================
 

07-07-2013 18:29:09 Windows Update

14-07-2013 17:32:08 Windows Update

14-07-2013 19:29:58 Windows Update

22-07-2013 18:08:11 Windows Update

24-07-2013 19:32:44 Windows Update

29-07-2013 10:59:57 Free Pdf Perfect Prereq

30-07-2013 06:24:47 Windows Update

31-07-2013 06:43:54 Windows Update

31-07-2013 17:20:00 Removed Adobe Reader 9.3 - Deutsch.

31-07-2013 17:20:48 Removed Adobe Reader 9.3 - Deutsch.

31-07-2013 17:21:06 Removed Adobe Reader 9.3 - Deutsch.

31-07-2013 17:24:55 Free Pdf Perfect Prereq

31-07-2013 17:25:56 Removed Java(TM) 6 Update 20 (64-bit)

31-07-2013 17:27:10 Removed Java(TM) 6 Update 25

31-07-2013 17:28:17 Entfernt Remote Play mit PlayStation®3

31-07-2013 17:28:57 Entfernt Remote Keyboard with PlayStation 3

31-07-2013 17:40:57 Installed Java 7 Update 25 (64-bit)

31-07-2013 18:12:54 Revo Uninstaller's restore point - Avira SearchFree Toolbar plus Web Protection

31-07-2013 18:15:47 Revo Uninstaller's restore point - Yahoo Community Smartbar
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-07-31 16:15 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {041BC165-87CB-4CCB-BA7D-1528EEE215FE} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe No File

Task: {04F7E5BA-4CA9-43AC-A10D-57E045E563A4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)

Task: {078413D2-6681-4B0F-A70B-75FCF905D393} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10] (Google Inc.)

Task: {08FC477F-9C2C-4FB4-A551-55021AFACF81} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)

Task: {0CDFE7FF-4167-4B05-A84E-35559AA8205D} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)

Task: {1A1185B4-2626-4E29-8AC5-58569CA53C56} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)

Task: {1C6FFD98-6C28-4647-A8FC-554D679AE3D8} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {1D7AC307-E094-4988-B399-931A20CC31AF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-31] (Adobe Systems Incorporated)

Task: {1F99A3AE-E9DE-43FC-9192-8C6C8D11C448} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)

Task: {286B74AF-B114-47CA-B890-493206493691} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)

Task: {4CED186A-F3D5-4AC9-8B19-6D1BC43AAEA2} - System32\Tasks\User_Feed_Synchronization-{EA9F004A-9EA1-46AA-A967-1010B49F1C58} => C:\Windows\system32\msfeedssync.exe [2013-03-02] (Microsoft Corporation)

Task: {6361626B-D12A-4CB1-AB4F-2D9FEEDA340A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10] (Google Inc.)

Task: {6417B0DB-A9BB-4747-A99E-AF6199B63AC6} - System32\Tasks\DigitalSite => C:\Users\Tina\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE [2013-04-12] ()

Task: {83576E78-AB2F-49E4-99E7-6DAFF08C6571} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)

Task: {8D28C577-97FA-483D-89A5-F6B49E07F118} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-06-08] (Sony Corporation)

Task: {8DE1D3D8-B033-44A3-987D-2F4EBEDA944B} - System32\Tasks\User_Feed_Synchronization-{0E626F3C-8A24-4FFB-84FD-07195C3D7244} => C:\Windows\system32\msfeedssync.exe [2013-03-02] (Microsoft Corporation)

Task: {B652F053-B3E9-4B81-876E-CCD1CA9583F0} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-06-08] (Sony Corporation)

Task: {D524EE56-F6DF-4C88-BE76-502E2D43C1AC} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)

Task: {E566D6A6-BCAD-44CF-8AC8-C6D9FDBA3076} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)

Task: {E9759AD4-9B5B-4062-8528-0AEAF5935A7F} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-07-27] (LyriXeeker Tech)

Task: {F97F63EC-23CC-44FA-83E4-40894CF04B7C} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DigitalSite.job => ?

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/31/2013 08:13:39 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:33 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:28 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:22 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:22 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:21 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:21 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:20 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:20 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 

Error: (07/31/2013 08:13:19 PM) (Source: MsiInstaller) (User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer
 
 

System errors:

=============

Error: (07/31/2013 08:26:21 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "ADMIN-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{F3593B11-7940-4EF9-BF6F-C86A919D5698}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (07/31/2013 07:46:08 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (07/31/2013 07:46:08 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
 

Error: (07/31/2013 04:16:11 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (07/31/2013 04:15:54 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (07/31/2013 04:15:21 PM) (Source: Application Popup) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (07/31/2013 04:13:34 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (07/31/2013 04:08:38 PM) (Source: Service Control Manager) (User: )

Description: Dienst "DCService.exe" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (07/31/2013 03:01:54 PM) (Source: bowser) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "ADMIN-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{F3593B11-7940-4EF9-BF6F-C86A919D5698}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (07/31/2013 01:00:51 PM) (Source: DCOM) (User: LooniesVaio)

Description: ComputerstandardLokalAktivierung{45469D86-2270-421A-AF57-C0F568D136F1}{F03672B2-06ED-4DD9-BD11-9BA26BACE6BC}LooniesVaioTinaS-1-5-21-260020902-558958140-274888911-1001LocalHost (unter Verwendung von LRPC)
 
 

Microsoft Office Sessions:

=========================

Error: (07/31/2013 08:13:39 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:33 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:28 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:22 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:22 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:21 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:21 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:20 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:20 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (07/31/2013 08:13:19 PM) (Source: MsiInstaller)(User: LooniesVaio)

Description: Produkt: Avira SearchFree Toolbar plus Web Protection -- Fehler 25001. Die folgenden Anwendungen sollten geschlossen werden, bevor Sie mit der Deinstallation fortfahren: 
 

Google Chrome

Internet Explorer(NULL)(NULL)(NULL)(NULL)(NULL)
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-07-31 16:15:21.782

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-07-31 16:15:21.702

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 48%

Total physical RAM: 3950.1 MB

Available physical RAM: 2049.58 MB

Total Pagefile: 7898.33 MB

Available Pagefile: 5608.43 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:287.26 GB) (Free:238.05 GB) NTFS (Disk=0 Partition=3)
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 19AF7232)

Partition 1: (Not Active) - (Size=11 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=287 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

sorry, den ersten vergessen:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03

Ran by Tina (administrator) on 31-07-2013 20:30:50

Running from C:\Users\Tina\Downloads

Windows 7 Home Premium (X64) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Windows Net) C:\Users\Tina\AppData\Roaming\Windows Net Data\net.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe

(ALPS) C:\Program Files\Apoint\Apvfb.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)

HKLM\...\InprocServer32: [Default-cscui]  <==== ATTENTION!

HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)

HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-09] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)

HKLM-x32\...\Run: [SHTtray.exe] - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [99696 2010-06-20] (Sony Corporation)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk

ShortcutTarget: net.lnk -> C:\Users\Tina\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {15F9C59E-A01C-43C3-8A53-F88F31CF740A} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices

SearchScopes: HKCU - {15F9C59E-A01C-43C3-8A53-F88F31CF740A} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: LyricXeeker - {17E58097-6CA5-448B-830F-2A19678248FB} - C:\Program Files (x86)\LyriXeeker\125.dll (LyriXeeker Tech)

BHO-x32: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File

Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File

Toolbar: HKLM-x32 - Free PDF Perfect - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files (x86)\Freemium\Free PDF Perfect\ieagent32.dll No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{84E90DCE-4226-462A-B382-020867B3AC21}: [NameServer]193.189.244.225 193.189.244.206

Tcpip\..\Interfaces\{9C41EFE5-85F5-4056-96FF-9D634C277CE8}: [NameServer]193.189.244.206 193.189.244.225

Tcpip\..\Interfaces\{F1280C0C-DC5B-49BB-8E62-0DA869D78107}: [NameServer]193.189.244.225 193.189.244.206
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @soft-xpansion/npsxpdf - C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Tina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb

FF HKLM-x32\...\Thunderbird\Extensions: [{B45418F9-6406-4828-9D1A-35313FB1E2D6}] C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb

FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\125.xpi

FF Extension: No Name - C:\Program Files (x86)\LyriXeeker\125.xpi
 

Chrome: 

=======

CHR DefaultSearchURL: (Web) - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=397e10ce-ac89-4746-87f7-23fb71657fae&searchtype=ds&p={searchTerms}&fr=linkury-tb

CHR DefaultSuggestURL: (Web) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Java Deployment Toolkit 6.0.250.6) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U25) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

CHR Extension: (LyricXeeker) - C:\Users\Tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\odnofacmifkjndflfmmplhckcbfjckhj\1.125_0

CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx

CHR HKLM-x32\...\Chrome\Extension: [odnofacmifkjndflfmmplhckcbfjckhj] - C:\Program Files (x86)\LyriXeeker\125.crx

CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-07-31] (SurfRight B.V.)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)

S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2013-07-29] (soft Xpansion)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)

R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-31 20:29 - 2013-07-31 20:29 - 01781589 _____ (Farbar) C:\Users\Tina\Downloads\FRST64.exe

2013-07-31 20:22 - 2013-07-31 20:28 - 00032000 _____ C:\Windows\system32\Drivers\hitmanpro37.sys

2013-07-31 20:19 - 2013-07-31 20:20 - 00001558 _____ C:\AdwCleaner[S6].txt

2013-07-31 20:17 - 2013-07-31 20:17 - 00045696 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2017.log

2013-07-31 20:11 - 2013-07-31 20:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tina\Downloads\revosetup95.exe

2013-07-31 20:11 - 2013-07-31 20:11 - 00000736 _____ C:\Users\Tina\Desktop\Revo Uninstaller.lnk

2013-07-31 20:05 - 2013-07-31 20:05 - 00003422 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2005.xml

2013-07-31 20:03 - 2013-07-31 20:03 - 00003422 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2002.xml

2013-07-31 19:58 - 2013-07-31 20:19 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-31 19:58 - 2013-07-31 19:58 - 00001901 _____ C:\Users\Public\Desktop\HitmanPro.lnk

2013-07-31 19:58 - 2013-07-31 19:58 - 00000000 ____D C:\Program Files\HitmanPro

2013-07-31 19:57 - 2013-07-31 19:58 - 09833328 _____ (SurfRight B.V.) C:\Users\Tina\Downloads\HitmanPro_x64.exe

2013-07-31 19:51 - 2013-07-31 20:21 - 00000386 _____ C:\Windows\Tasks\LyricXeeker Update.job

2013-07-31 19:51 - 2013-07-31 20:20 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job

2013-07-31 19:51 - 2013-07-31 19:51 - 00003232 _____ C:\Windows\System32\Tasks\DigitalSite

2013-07-31 19:51 - 2013-07-31 19:51 - 00003032 _____ C:\Windows\System32\Tasks\LyricXeeker Update

2013-07-31 19:51 - 2013-07-31 19:51 - 00001106 _____ C:\Users\Public\Desktop\Open It!.lnk

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Users\Tina\AppData\Roaming\DigitalSite

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Program Files (x86)\OpenIt

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Program Files (x86)\LyriXeeker

2013-07-31 19:50 - 2013-07-31 19:51 - 00717160 _____ C:\Users\Tina\Downloads\ZipOpenerSetup.exe

2013-07-31 19:48 - 2013-07-31 19:48 - 00001457 _____ C:\AdwCleaner[R4].txt

2013-07-31 19:48 - 2013-07-31 19:48 - 00001450 _____ C:\AdwCleaner[S5].txt

2013-07-31 19:45 - 2013-07-31 20:20 - 00000168 _____ C:\Windows\setupact.log

2013-07-31 19:45 - 2013-07-31 19:45 - 00001318 _____ C:\Windows\PFRO.log

2013-07-31 19:45 - 2013-07-31 19:45 - 00000000 _____ C:\Windows\setuperr.log

2013-07-31 19:41 - 2013-07-31 19:41 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-07-31 19:41 - 2013-07-31 19:41 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2013-07-31 19:41 - 2013-07-31 19:41 - 00000000 ____D C:\Program Files\Java

2013-07-31 19:39 - 2013-07-31 19:40 - 33150376 _____ (Oracle Corporation) C:\Users\Tina\Downloads\jre-7u25-windows-x64.exe

2013-07-31 19:37 - 2013-07-31 19:37 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-07-31 19:37 - 2013-07-31 19:37 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-07-31 19:35 - 2013-07-31 19:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-31 19:35 - 2013-07-31 19:35 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-07-31 19:35 - 2013-07-31 19:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-07-31 19:35 - 2013-07-31 19:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-07-31 19:03 - 2013-07-31 19:11 - 00012890 _____ C:\Users\Tina\Desktop\Liste_CC.txt

2013-07-31 16:38 - 2013-07-31 16:38 - 02347384 _____ (ESET) C:\Users\Tina\Downloads\esetsmartinstaller_enu.exe

2013-07-31 16:38 - 2013-07-31 16:38 - 00000000 ____D C:\Program Files (x86)\ESET

2013-07-31 16:30 - 2013-07-31 16:31 - 00001318 _____ C:\AdwCleaner[S4].txt

2013-07-31 16:25 - 2013-07-31 16:25 - 00001258 _____ C:\AdwCleaner[S3].txt

2013-07-31 16:24 - 2013-07-31 16:25 - 00001195 _____ C:\AdwCleaner[R3].txt

2013-07-31 16:23 - 2013-07-31 16:23 - 00021610 _____ C:\ComboFix.txt

2013-07-31 16:10 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-07-31 16:10 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-07-31 16:10 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-07-31 16:10 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-07-31 16:10 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-07-31 16:10 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-07-31 16:10 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-07-31 16:10 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-07-31 16:08 - 2013-07-31 16:23 - 00000000 ____D C:\Qoobox

2013-07-31 16:08 - 2013-07-31 16:21 - 00000000 ____D C:\Windows\erdnt

2013-07-31 16:07 - 2013-07-31 16:07 - 05096636 ____R (Swearware) C:\Users\Tina\Downloads\ComboFix.exe

2013-07-31 15:11 - 2013-07-31 15:11 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-07-31 15:11 - 2013-07-31 15:11 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Malwarebytes

2013-07-31 15:11 - 2013-07-31 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-07-31 15:10 - 2013-07-31 15:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-31 15:10 - 2013-07-31 15:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tina\Downloads\mbam-setup-1.75.0.1300.exe

2013-07-31 15:10 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-07-31 14:43 - 2013-07-31 14:43 - 00001013 _____ C:\AdwCleaner[S2].txt

2013-07-31 14:42 - 2013-07-31 14:42 - 00000952 _____ C:\AdwCleaner[R2].txt

2013-07-31 13:26 - 2013-07-31 13:27 - 00026969 _____ C:\AdwCleaner[S1].txt

2013-07-31 13:26 - 2013-07-31 13:26 - 00026944 _____ C:\AdwCleaner[R1].txt

2013-07-31 13:25 - 2013-07-31 13:25 - 00666633 _____ C:\Users\Tina\Downloads\adwcleaner06.exe

2013-07-31 13:25 - 2013-07-31 13:25 - 00666633 _____ C:\Users\Tina\Downloads\adwcleaner06 (1).exe

2013-07-29 13:04 - 2013-07-29 13:04 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb

2013-07-29 13:00 - 2013-07-29 13:00 - 00000000 ____D C:\Users\Tina\Downloads\freepdf

2013-07-29 13:00 - 2013-07-29 13:00 - 00000000 ____D C:\SoftwareUpdater

2013-07-29 12:59 - 2013-07-31 08:52 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Windows Net Data

2013-07-29 12:59 - 2013-07-29 12:59 - 00000635 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog

2013-07-29 12:57 - 2013-07-29 12:57 - 00444400 _____ C:\Users\Tina\Downloads\DLG_free-pdf-perfect_chip_de-DE10 (1).exe

2013-07-29 12:57 - 2013-07-29 12:57 - 00000207 _____ C:\Users\Tina\Desktop\Amazon.url

2013-07-29 12:56 - 2013-07-29 12:56 - 00444400 _____ C:\Users\Tina\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe

2013-07-29 11:00 - 2013-07-29 11:00 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Mozilla

2013-07-29 10:58 - 2013-07-31 19:22 - 00000000 ____D C:\ProgramData\Avira

2013-07-15 09:44 - 2013-07-15 09:44 - 00294240 _____ C:\Users\Tina\Downloads\Love Word Wallpaper Wallpaper.exe

2013-07-14 21:30 - 2013-07-14 21:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-14 21:30 - 2013-07-14 21:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

107
 

==================== One Month Modified Files and Folders =======
 

2013-07-31 20:30 - 2013-07-31 20:30 - 00000000 ____D C:\FRST

2013-07-31 20:29 - 2013-07-31 20:29 - 01781589 _____ (Farbar) C:\Users\Tina\Downloads\FRST64.exe

2013-07-31 20:28 - 2013-07-31 20:22 - 00032000 _____ C:\Windows\system32\Drivers\hitmanpro37.sys

2013-07-31 20:28 - 2009-07-14 06:45 - 00013936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-31 20:28 - 2009-07-14 06:45 - 00013936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-31 20:27 - 2011-05-11 07:48 - 00654852 _____ C:\Windows\system32\perfh007.dat

2013-07-31 20:27 - 2011-05-11 07:48 - 00130434 _____ C:\Windows\system32\perfc007.dat

2013-07-31 20:27 - 2009-07-14 07:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-31 20:25 - 2011-05-10 21:54 - 01192867 _____ C:\Windows\WindowsUpdate.log

2013-07-31 20:24 - 2011-05-24 11:23 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{EA9F004A-9EA1-46AA-A967-1010B49F1C58}

2013-07-31 20:21 - 2013-07-31 19:51 - 00000386 _____ C:\Windows\Tasks\LyricXeeker Update.job

2013-07-31 20:20 - 2013-07-31 20:19 - 00001558 _____ C:\AdwCleaner[S6].txt

2013-07-31 20:20 - 2013-07-31 19:51 - 00000288 _____ C:\Windows\Tasks\DigitalSite.job

2013-07-31 20:20 - 2013-07-31 19:45 - 00000168 _____ C:\Windows\setupact.log

2013-07-31 20:20 - 2011-05-10 22:04 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-31 20:20 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-31 20:19 - 2013-07-31 19:58 - 00000000 ____D C:\ProgramData\HitmanPro

2013-07-31 20:17 - 2013-07-31 20:17 - 00045696 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2017.log

2013-07-31 20:11 - 2013-07-31 20:11 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tina\Downloads\revosetup95.exe

2013-07-31 20:11 - 2013-07-31 20:11 - 00000736 _____ C:\Users\Tina\Desktop\Revo Uninstaller.lnk

2013-07-31 20:05 - 2013-07-31 20:05 - 00003422 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2005.xml

2013-07-31 20:03 - 2013-07-31 20:03 - 00003422 _____ C:\Users\Tina\Desktop\HitmanPro_20130731_2002.xml

2013-07-31 19:58 - 2013-07-31 19:58 - 00001901 _____ C:\Users\Public\Desktop\HitmanPro.lnk

2013-07-31 19:58 - 2013-07-31 19:58 - 00000000 ____D C:\Program Files\HitmanPro

2013-07-31 19:58 - 2013-07-31 19:57 - 09833328 _____ (SurfRight B.V.) C:\Users\Tina\Downloads\HitmanPro_x64.exe

2013-07-31 19:54 - 2011-05-10 22:04 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-31 19:53 - 2013-07-31 19:35 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-31 19:51 - 2013-07-31 19:51 - 00003232 _____ C:\Windows\System32\Tasks\DigitalSite

2013-07-31 19:51 - 2013-07-31 19:51 - 00003032 _____ C:\Windows\System32\Tasks\LyricXeeker Update

2013-07-31 19:51 - 2013-07-31 19:51 - 00001106 _____ C:\Users\Public\Desktop\Open It!.lnk

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Users\Tina\AppData\Roaming\DigitalSite

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Program Files (x86)\OpenIt

2013-07-31 19:51 - 2013-07-31 19:51 - 00000000 ____D C:\Program Files (x86)\LyriXeeker

2013-07-31 19:51 - 2013-07-31 19:50 - 00717160 _____ C:\Users\Tina\Downloads\ZipOpenerSetup.exe

2013-07-31 19:49 - 2013-06-06 21:09 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Skype

2013-07-31 19:48 - 2013-07-31 19:48 - 00001457 _____ C:\AdwCleaner[R4].txt

2013-07-31 19:48 - 2013-07-31 19:48 - 00001450 _____ C:\AdwCleaner[S5].txt

2013-07-31 19:45 - 2013-07-31 19:45 - 00001318 _____ C:\Windows\PFRO.log

2013-07-31 19:45 - 2013-07-31 19:45 - 00000000 _____ C:\Windows\setuperr.log

2013-07-31 19:45 - 2011-05-25 20:48 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy

2013-07-31 19:41 - 2013-07-31 19:41 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-07-31 19:41 - 2013-07-31 19:41 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-07-31 19:41 - 2013-07-31 19:41 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2013-07-31 19:41 - 2013-07-31 19:41 - 00000000 ____D C:\Program Files\Java

2013-07-31 19:41 - 2011-05-10 22:20 - 00972712 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-07-31 19:40 - 2013-07-31 19:39 - 33150376 _____ (Oracle Corporation) C:\Users\Tina\Downloads\jre-7u25-windows-x64.exe

2013-07-31 19:39 - 2011-06-06 14:15 - 00000000 ____D C:\Users\Tina\AppData\Local\Adobe

2013-07-31 19:37 - 2013-07-31 19:37 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk

2013-07-31 19:37 - 2013-07-31 19:37 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-07-31 19:37 - 2011-05-10 22:01 - 00000000 ____D C:\ProgramData\Adobe

2013-07-31 19:35 - 2013-07-31 19:35 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-07-31 19:35 - 2013-07-31 19:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-07-31 19:35 - 2013-07-31 19:35 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-07-31 19:29 - 2011-05-25 20:48 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-07-31 19:29 - 2011-05-10 22:01 - 00000000 ____D C:\Program Files\Sony

2013-07-31 19:28 - 2011-05-10 22:01 - 00000000 ____D C:\Program Files (x86)\Sony

2013-07-31 19:28 - 2010-10-12 19:48 - 00000000 ____D C:\ProgramData\Sony Corporation

2013-07-31 19:28 - 2010-10-12 19:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-07-31 19:22 - 2013-07-29 10:58 - 00000000 ____D C:\ProgramData\Avira

2013-07-31 19:11 - 2013-07-31 19:03 - 00012890 _____ C:\Users\Tina\Desktop\Liste_CC.txt

2013-07-31 16:38 - 2013-07-31 16:38 - 02347384 _____ (ESET) C:\Users\Tina\Downloads\esetsmartinstaller_enu.exe

2013-07-31 16:38 - 2013-07-31 16:38 - 00000000 ____D C:\Program Files (x86)\ESET

2013-07-31 16:31 - 2013-07-31 16:30 - 00001318 _____ C:\AdwCleaner[S4].txt

2013-07-31 16:25 - 2013-07-31 16:25 - 00001258 _____ C:\AdwCleaner[S3].txt

2013-07-31 16:25 - 2013-07-31 16:24 - 00001195 _____ C:\AdwCleaner[R3].txt

2013-07-31 16:23 - 2013-07-31 16:23 - 00021610 _____ C:\ComboFix.txt

2013-07-31 16:23 - 2013-07-31 16:08 - 00000000 ____D C:\Qoobox

2013-07-31 16:23 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-07-31 16:21 - 2013-07-31 16:08 - 00000000 ____D C:\Windows\erdnt

2013-07-31 16:18 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-07-31 16:16 - 2009-07-14 04:34 - 59768832 _____ C:\Windows\system32\config\SOFTWARE.bak

2013-07-31 16:16 - 2009-07-14 04:34 - 20971520 _____ C:\Windows\system32\config\SYSTEM.bak

2013-07-31 16:16 - 2009-07-14 04:34 - 00786432 _____ C:\Windows\system32\config\DEFAULT.bak

2013-07-31 16:16 - 2009-07-14 04:34 - 00061440 _____ C:\Windows\system32\config\SAM.bak

2013-07-31 16:16 - 2009-07-14 04:34 - 00024576 _____ C:\Windows\system32\config\SECURITY.bak

2013-07-31 16:07 - 2013-07-31 16:07 - 05096636 ____R (Swearware) C:\Users\Tina\Downloads\ComboFix.exe

2013-07-31 15:11 - 2013-07-31 15:11 - 00001105 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-07-31 15:11 - 2013-07-31 15:11 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Malwarebytes

2013-07-31 15:11 - 2013-07-31 15:11 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-07-31 15:11 - 2013-07-31 15:10 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-31 15:10 - 2013-07-31 15:10 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Tina\Downloads\mbam-setup-1.75.0.1300.exe

2013-07-31 14:43 - 2013-07-31 14:43 - 00001013 _____ C:\AdwCleaner[S2].txt

2013-07-31 14:42 - 2013-07-31 14:42 - 00000952 _____ C:\AdwCleaner[R2].txt

2013-07-31 13:27 - 2013-07-31 13:26 - 00026969 _____ C:\AdwCleaner[S1].txt

2013-07-31 13:26 - 2013-07-31 13:26 - 00026944 _____ C:\AdwCleaner[R1].txt

2013-07-31 13:25 - 2013-07-31 13:25 - 00666633 _____ C:\Users\Tina\Downloads\adwcleaner06.exe

2013-07-31 13:25 - 2013-07-31 13:25 - 00666633 _____ C:\Users\Tina\Downloads\adwcleaner06 (1).exe

2013-07-31 12:58 - 2011-05-10 22:04 - 00000000 ____D C:\Program Files\Google

2013-07-31 12:58 - 2011-05-10 22:04 - 00000000 ____D C:\Program Files (x86)\Google

2013-07-31 11:02 - 2011-05-27 08:24 - 00000000 ____D C:\Users\Tina\AppData\Roaming\SoftGrid Client

2013-07-31 10:17 - 2011-05-27 07:38 - 00000000 ____D C:\Users\Tina\Desktop\tina

2013-07-31 08:56 - 2011-05-24 11:30 - 00000000 ____D C:\Users\Tina\AppData\Local\Google

2013-07-31 08:52 - 2013-07-29 12:59 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Windows Net Data

2013-07-30 08:21 - 2011-05-24 11:20 - 00066104 _____ C:\Users\Tina\AppData\Local\GDIPFONTCACHEV1.DAT

2013-07-29 13:04 - 2013-07-29 13:04 - 00010464 _____ C:\Windows\SysWOW64\sx_p2d.tlb

2013-07-29 13:01 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-07-29 13:00 - 2013-07-29 13:00 - 00000000 ____D C:\Users\Tina\Downloads\freepdf

2013-07-29 13:00 - 2013-07-29 13:00 - 00000000 ____D C:\SoftwareUpdater

2013-07-29 12:59 - 2013-07-29 12:59 - 00000635 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog

2013-07-29 12:59 - 2011-05-24 11:22 - 00000000 ___RD C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-07-29 12:57 - 2013-07-29 12:57 - 00444400 _____ C:\Users\Tina\Downloads\DLG_free-pdf-perfect_chip_de-DE10 (1).exe

2013-07-29 12:57 - 2013-07-29 12:57 - 00000207 _____ C:\Users\Tina\Desktop\Amazon.url

2013-07-29 12:56 - 2013-07-29 12:56 - 00444400 _____ C:\Users\Tina\Downloads\DLG_free-pdf-perfect_chip_de-DE10.exe

2013-07-29 11:00 - 2013-07-29 11:00 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Mozilla

2013-07-16 11:49 - 2011-05-10 22:04 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-07-16 11:49 - 2011-05-10 22:04 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-07-15 09:44 - 2013-07-15 09:44 - 00294240 _____ C:\Users\Tina\Downloads\Love Word Wallpaper Wallpaper.exe

2013-07-14 21:30 - 2013-07-14 21:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-07-14 21:30 - 2013-07-14 21:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-07-14 19:33 - 2013-06-06 21:09 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-07-14 19:33 - 2011-05-10 22:19 - 00000000 ____D C:\ProgramData\Skype
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-28 13:38
 

==================== End Of Log ============================

--- --- ---