Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Win 7 - Firefox langsam und Skript-Warnmeldungen - Folge von GVU-Trojaner ? (https://www.trojaner-board.de/147789-win-7-firefox-langsam-skript-warnmeldungen-folge-gvu-trojaner.html)

L_U_C_K_Y 11.01.2014 18:02
Win 7 - Firefox langsam und Skript-Warnmeldungen - Folge von GVU-Trojaner ?
 
Guten Tag,

ich hatte mir vor einigen Wochen auf meinem Netbook (Samsun NF310, Win7 SP1 32bit) einen GVU-Trojaner eingefangen. Ich hab leider (da kannte ich Eure 1. goldenen Regel noch nicht) versucht, mir selbst zu behelfen und bin nach einer im Netz gefundenen Anleitung wie folgt vorgegangen:

- Rechner ausgeschaltet -> im abgesicherten Modus gestartet -> CCleaner ausgeführt
- auf c: nach ungewöhnlicher *.exe gesucht -> nichts gefunden
- Systemkonfiguration/Systemstart auf fremde Systemstartelemente geprüft -> nichts gefunden
- Registry auf bestimmte Einträge geprüft -> nichts gefunden
- mit Avast Internet Security einen Quickscan durchgeführt -> nichts gefunden
- Rechner runter gefahren und neu (normal) gestartet:
von dem GVU-Trojaner ist nun (oberflächlich) nichts mehr zu sehen.

Allerdings habe ich jetzt folg. Probleme mit Firefox:
FF ist stellenweise sehr langsam und schon einige mal komplett abgestürzt; außerdem erhalte ich öfters in der Titelleistung die Meldung "(keine Rückmeldung)" und Warnmeldungen, dass ein Skript nicht antwortet oder beschädigt ist, wie z.B.:
"Skript: chrome://wrc/content/common/scripts/bal.js:1172" oder
"Skript: https://www.google.de/xjs/_/js/k=xjs.s.en_US.EeLgqkzqnSg.O/m=c,sb,cr,epb,jp,elog,r,hsm,j,p,pcc,csi/am=AAMAow/rt=j/d=1/sv=1/rs=AItRSTMyeKoBhGV6IKll27m-n0a5hClIzQ:740"

SORRY für den Roman und vorab Vielen Dank für Eure Mühe und Hilfe!

hier meine aktuellen Logfiles:

FRST.txt:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 01
Ran by CHEFFE (administrator) on LUCKY-PC on 11-01-2014 15:54:58
Running from C:\Users\CHEFFE\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files\Mobile Partner\Mobile Partner.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9734760 2010-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2286888 2011-08-25] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-18] (AVAST Software)
MountPoints2: E - E:\AutoRun.exe
MountPoints2: {987ba8e2-6b4b-11e3-a0eb-001e101f1838} - E:\AutoRun.exe
MountPoints2: {e54de2d2-33b5-11e2-b124-4cedde7dcc4c} - E:\AutoRun.exe
MountPoints2: {e54de2df-33b5-11e2-b124-4cedde7dcc4c} - E:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{7E21F067-B96A-4D61-8212-262EE61318AD}: [NameServer]193.189.244.206 193.189.244.225

FireFox:
========
FF ProfilePath: C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: NoSquint - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\nosquint@urandom.ca.xpi
FF Extension: NoScript - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-18] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2013-12-18] (AVAST Software)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [264704 2010-11-16] ()
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [218624 2012-11-21] ()
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26136 2013-10-24] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2013-12-18] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [265072 2014-01-11] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-24] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2013-12-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410528 2013-12-18] (AVAST Software)
R3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2013-12-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2013-12-18] ()
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [508184 2013-11-09] (Broadcom Corporation.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35088 2013-04-30] (The OpenVPN Project)
U3 fgloapoc; \??\C:\Users\CHEFFE\AppData\Local\Temp\fgloapoc.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-11 15:54 - 2014-01-11 15:55 - 00010817 _____ C:\Users\CHEFFE\Desktop\FRST.txt
2014-01-11 11:57 - 2014-01-11 11:40 - 01220096 _____ (Farbar) C:\Users\CHEFFE\Desktop\FRST.exe
2013-12-31 08:27 - 2014-01-11 15:12 - 00000448 _____ C:\windows\setupact.log
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-19 23:21 - 2014-01-11 11:58 - 00000000 ____D C:\FRST
2013-12-19 14:40 - 2014-01-11 12:05 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 14:13 - 2013-12-19 14:22 - 00000000 ____D C:\AdwCleaner
2013-12-19 11:07 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 11:07 - 2013-10-25 05:45 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 11:07 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 11:07 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 11:07 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 11:07 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00001027 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:58 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-18 13:05 - 2014-01-11 15:13 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:06 - 2013-12-21 16:32 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2013-12-13 12:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-13 12:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-13 12:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-13 12:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-13 12:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-13 12:41 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-13 12:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-13 12:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-13 12:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-13 12:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-13 12:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-13 12:41 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-13 12:41 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-11 15:55 - 2014-01-11 15:54 - 00010817 _____ C:\Users\CHEFFE\Desktop\FRST.txt
2014-01-11 15:54 - 2013-06-16 00:17 - 01299320 _____ C:\windows\WindowsUpdate.log
2014-01-11 15:43 - 2013-10-24 11:32 - 00001098 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-11 15:21 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-11 15:21 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-11 15:13 - 2013-12-18 13:05 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2014-01-11 15:13 - 2013-11-27 12:43 - 00000433 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-11 15:13 - 2013-10-24 11:32 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-11 15:12 - 2013-12-31 08:27 - 00000448 _____ C:\windows\setupact.log
2014-01-11 15:12 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-11 14:34 - 2013-02-17 03:35 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-11 12:07 - 2013-03-09 11:51 - 00265072 _____ (AVAST Software) C:\windows\system32\Drivers\aswndisflt.sys
2014-01-11 12:05 - 2013-12-19 14:40 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2014-01-11 11:58 - 2013-12-19 23:21 - 00000000 ____D C:\FRST
2014-01-11 11:40 - 2014-01-11 11:57 - 01220096 _____ (Farbar) C:\Users\CHEFFE\Desktop\FRST.exe
2014-01-05 10:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2014-01-04 17:35 - 2012-11-21 13:49 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\CrashDumps
2013-12-31 15:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-30 19:44 - 2013-08-15 21:22 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\PokerStars.EU
2013-12-26 00:31 - 2012-11-21 09:38 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\SoftGrid Client
2013-12-23 10:17 - 2009-07-26 21:06 - 01650384 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-22 02:22 - 2013-07-17 07:16 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\vlc
2013-12-21 16:32 - 2013-12-18 12:06 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2013-12-19 23:19 - 2012-11-23 10:07 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-19 23:19 - 2012-11-23 10:07 - 00000000 ____D C:\Program Files\CCleaner
2013-12-19 16:00 - 2009-07-26 21:57 - 00000000 ____D C:\windows\Panther
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 14:22 - 2013-12-19 14:13 - 00000000 ____D C:\AdwCleaner
2013-12-19 13:22 - 2012-12-08 21:35 - 00000000 ____D C:\Program Files\Recuva
2013-12-19 13:17 - 2012-11-20 10:37 - 00000000 ____D C:\Users\CHEFFE
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00001027 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:07 - 2013-02-15 22:44 - 00002013 _____ C:\Users\Public\Desktop\avast! Internet Security.lnk
2013-12-18 12:06 - 2013-03-09 11:51 - 00180248 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00775952 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00410528 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00067824 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-18 12:06 - 2013-01-20 14:40 - 00270240 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-18 12:06 - 2013-01-20 14:40 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-17 19:56 - 2013-11-15 18:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-17 13:00 - 2012-12-08 22:31 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Windows Live
2013-12-15 10:45 - 2012-11-20 10:54 - 00058016 _____ C:\Users\CHEFFE\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-13 12:55 - 2009-07-14 05:33 - 00347936 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-13 12:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2013-12-13 12:50 - 2013-07-21 08:46 - 00000000 ____D C:\windows\system32\MRT
2013-12-13 12:44 - 2012-11-24 01:21 - 88123800 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-13 10:57 - 2010-10-29 03:59 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-12-13 10:10 - 2012-11-21 22:36 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-12-13 10:10 - 2012-11-21 22:36 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-13 09:27 - 2013-10-16 06:24 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-31 15:46

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition.txt:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-01-2014 01
Ran by CHEFFE at 2014-01-11 15:56:17
Running from C:\Users\CHEFFE\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Internet Security (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Internet Security (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

„Messenger“ pagalbinė priemonė (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Essentials“ (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Adobe AIR (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (Version: 12.0.4.144 - Adobe Systems, Inc.)
Atheros Client Installation Program (Version: 1.0.5.0621 - Atheros)
avast! Internet Security (Version: 9.0.2011 - Avast Software)
BatteryLifeExtender (Version: 1.0.6 - Samsung)
Broadcom 802.11 Network Adapter (Version: 5.60.48.44 - Broadcom Corporation)
CCleaner (Version: 4.09 - Piriform)
Complément Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Complemento Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ConvertHelper 2.2 (Version:  - DownloadHelper)
CyberLink YouCam (Version: 2.0.3911 - CyberLink Corp.)
CyberLink YouCam (Version: 2.0.3911 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Doplnok programu Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Easy Content Share (Version: 1.0 - Samsung Electronics Co., LTD)
Easy Display Manager (Version: 3.2 - Samsung Electronics Co., Ltd.)
Easy Network Manager (Version: 4.4.1 - Samsung)
Easy SpeedUp Manager (Version: 2.1.0.15 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (Version: 4.0.0.4 - Samsung)
EasyFileShare (Version: 1.0.3 - Samsung)
Fast Start (Version: 2.2.0.0 - SAMSUNG)
Fotogalerija Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2117 - Intel Corporation)
Intel® Matrix Storage Manager (Version:  - Intel Corporation)
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Marvell Miniport Driver (Version: 11.24.27.3 - Marvell)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Assistent (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger kísérő (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger Pratilac (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger Suradnik (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger 사이트 공유 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger 分享元件 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger 浏览器插件 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger-kumppani (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Mobile Partner (Version: 21.005.11.01.858 - Huawei Technologies Co.,Ltd)
Movie Color Enhancer (Version: 1.0 - Samsung Electronics Co., Ltd.)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (Version: 24.2.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Poczta usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PokerStars.eu (Version:  - PokerStars.eu)
Pomocnik Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (Version: 6.0.1.6210 - Realtek Semiconductor Corp.)
Recuva (Version: 1.44 - Piriform)
Samsung AnyWeb Print (Version: 1.0 - Samsung Electronics Co., Ltd.) Hidden
Samsung AnyWeb Print (Version: 1.1.19.0 - Samsung Electronics Co., Ltd.)
Samsung Recovery Solution 5 (Version: 5.0.0.7 - Samsung)
Samsung Support Center 1.0 (Version: 1.1.38 - Samsung)
Samsung Universal Print Driver (Version: 2.01.06.00:16 - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (Version: 1.2.1.0 - Samsung Electronics Co., Ltd.)
Samsung Update Plus (Version: 3.0.0.17 - Samsung Electronics Co., Ltd.)
Skype™ 5.10 (Version: 5.10.116 - Skype Technologies S.A.)
Spremljevalec Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
SRS Premium Sound Control Panel (Version: 1.09.0800 - SRS Labs, Inc.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.3.22.0 - Synaptics Incorporated)
User Guide (Version: 1.0 - )
VLC media player 2.0.7 (Version: 2.0.7 - VideoLAN)
WIDCOMM Bluetooth Software (Version: 6.5.1.4100 - Broadcom Corporation)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live fotoattēlu galerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Foto-galerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Pošta (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 메일 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 사진 갤러리 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 필수 패키지 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 照片库 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 软件包 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 5.00 (32-Bit) (Version: 5.00.0 - win.rar GmbH)
Συλλογή φωτογραφιών του Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Компаньон Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Помощник на Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
מסייע Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

13-12-2013 11:42:03 Windows Update
18-12-2013 11:02:21 avast! antivirus system restore point
18-12-2013 11:07:09 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
19-12-2013 10:06:08 Windows Update
31-12-2013 07:32:09 Windows Update
05-01-2014 10:48:14 Windows Update
11-01-2014 08:19:49 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2013-02-15 23:54 - 00000824 ____R C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0BDA32AA-D551-457A-B128-D79768CEB0E3} - System32\Tasks\MovieColorEnhancer => C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-08-19] (Samsung Electronics Co., Ltd.)
Task: {139D9316-9D69-40C3-AC6C-4738914AC53F} - System32\Tasks\IdlePowerSave => C:\Windows\Idle\DetectIdleTask.exe [2010-07-31] (TODO: <회사 이름>)
Task: {1E30110C-2D91-473E-AE27-B954F9CB17C3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-18] (AVAST Software)
Task: {24B8DDF9-2E43-4184-BEAA-51871B5AE460} - System32\Tasks\SRS Premium Sound => C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe [2010-10-20] (SRS Labs, Inc.)
Task: {24EA586F-CCD2-45C2-A2EE-B3184989F764} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-09-04] (SAMSUNG Electronics)
Task: {263980DF-68A4-46B9-A147-50885D07407A} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-08-12] (Samsung Electronics. Co. Ltd.)
Task: {26FF392B-E802-4A29-A356-EED4E4843B12} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2010-08-20] (Samsung Electronics Co., Ltd.)
Task: {437A9202-B7C4-455D-85B1-6755EFCE0AF1} - System32\Tasks\FixIt_69D5DA04-2F8C-4c60-899D-7280C6BB422A => C:\ProgramData\FixIt_69D5DA04-2F8C-4c60-899D-7280C6BB422A\Reset.bat [2010-08-16] ()
Task: {53A523DB-2FBE-4485-AB5E-6AB568D35A0D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {6C7002AA-5908-44F0-8CF4-B52C3A24DF4F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-13] (Adobe Systems Incorporated)
Task: {A44C89CF-9D68-42FD-94FF-714EE4626A1C} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)
Task: {B3AA582F-CBD6-494F-90A1-C110DA701314} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-24] (Google Inc.)
Task: {CDFAFA25-6162-4957-AADC-445A87D43086} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-08-05] (Samsung Electronics)
Task: {D4C731A1-E3FB-4760-B413-74DFB15F1754} - System32\Tasks\advSRS5 => C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-08-11] (SEC)
Task: {DD7BA69E-9487-454E-A5AC-5526111E9925} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-24] (Google Inc.)
Task: {DF8BAC86-1517-4A73-8E0F-0A56D8A507B4} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)
Task: {E67D1287-5F85-4173-9A73-180D01F3E8EE} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-27] (Samsung Electronics)
Task: {F2C55F80-9918-401F-AE9A-72B7C0C414D4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\FixIt_69D5DA04-2F8C-4c60-899D-7280C6BB422A.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-10-29 03:54 - 2010-07-05 11:42 - 00203776 _____ () C:\Program Files\Samsung\Movie Color Enhancer\WinCRT.dll
2010-10-29 03:39 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2013-10-24 07:43 - 2013-10-24 07:43 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-10-29 03:32 - 2010-05-07 15:22 - 01636864 _____ () C:\Program Files\Samsung\Samsung Recovery Solution 5\Resdll.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00428032 _____ () C:\Program Files\Mobile Partner\core.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00261632 _____ () C:\Program Files\Mobile Partner\sdk.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00011362 _____ () C:\Program Files\Mobile Partner\mingwm10.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00043008 _____ () C:\Program Files\Mobile Partner\libgcc_s_dw2-1.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 02415104 _____ () C:\Program Files\Mobile Partner\QtCore4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 09515520 _____ () C:\Program Files\Mobile Partner\QtGui4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00381952 _____ () C:\Program Files\Mobile Partner\Proxy.DLL
2012-11-21 10:24 - 2012-11-21 10:24 - 00218112 _____ () C:\Program Files\Mobile Partner\Common.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00135168 _____ () C:\Program Files\Mobile Partner\Trace.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00545280 _____ () C:\Program Files\Mobile Partner\PluginContainer.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00238080 _____ () C:\Program Files\Mobile Partner\AtCodec.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00301056 _____ () C:\Program Files\Mobile Partner\DeviceSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00235008 _____ () C:\Program Files\Mobile Partner\NetSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00133120 _____ () C:\Program Files\Mobile Partner\OSDialup.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00159232 _____ () C:\Program Files\Mobile Partner\XCodec.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00157184 _____ () C:\Program Files\Mobile Partner\DataServicePlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00176128 _____ () C:\Program Files\Mobile Partner\CallSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00264704 _____ () C:\Program Files\Mobile Partner\AddrBookSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00217600 _____ () C:\Program Files\Mobile Partner\SmsSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00142336 _____ () C:\Program Files\Mobile Partner\USSDSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00156672 _____ () C:\Program Files\Mobile Partner\STKSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00338432 _____ () C:\Program Files\Mobile Partner\DeviceAppPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00065536 _____ () C:\Program Files\Mobile Partner\OSPowerMgr.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00106496 _____ () C:\Program Files\Mobile Partner\Win7Support.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 01077248 _____ () C:\Program Files\Mobile Partner\AddrBookPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00670720 _____ () C:\Program Files\Mobile Partner\SmsAppPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00550400 _____ () C:\Program Files\Mobile Partner\CallAppPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00547840 _____ () C:\Program Files\Mobile Partner\CallLogSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00158720 _____ () C:\Program Files\Mobile Partner\NetConnectSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00211968 _____ () C:\Program Files\Mobile Partner\DialUpPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00101376 _____ () C:\Program Files\Mobile Partner\OSAdapt.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00180224 _____ () C:\Program Files\Mobile Partner\NDISPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00131072 _____ () C:\Program Files\Mobile Partner\OSNDIS.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 01101824 _____ () C:\Program Files\Mobile Partner\NDISAPI.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00278528 _____ () C:\Program Files\Mobile Partner\NetInfoSrvPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00062976 _____ () C:\Program Files\Mobile Partner\OSCall.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00495104 _____ () C:\Program Files\Mobile Partner\DeviceMgrUIPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00123392 _____ () C:\Program Files\Mobile Partner\ATR2SMgr.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00184832 _____ () C:\Program Files\Mobile Partner\XFramePlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00308224 _____ () C:\Program Files\Mobile Partner\StatusBarMgrPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00117760 _____ () C:\Program Files\Mobile Partner\LayoutPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00428032 _____ () C:\Program Files\Mobile Partner\DialupUIPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00093184 _____ () C:\Program Files\Mobile Partner\NotifyServicePlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00333312 _____ () C:\Program Files\Mobile Partner\NetConnectPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00249344 _____ () C:\Program Files\Mobile Partner\MenuMgrPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00483328 _____ () C:\Program Files\Mobile Partner\NetInfoUIExPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00808960 _____ () C:\Program Files\Mobile Partner\SMSUIPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00739328 _____ () C:\Program Files\Mobile Partner\AddrBookUIPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00239104 _____ () C:\Program Files\Mobile Partner\LiveUpdateInterface.DLL
2012-11-21 10:24 - 2012-11-21 10:24 - 01148416 _____ () C:\Program Files\Mobile Partner\QtNetwork4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00229888 _____ () C:\Program Files\Mobile Partner\ToolBarMgrPlugin.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00082944 _____ () C:\Program Files\Mobile Partner\plugins\imageformats\qgif4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00081920 _____ () C:\Program Files\Mobile Partner\plugins\imageformats\qico4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00192000 _____ () C:\Program Files\Mobile Partner\plugins\imageformats\qjpeg4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00350720 _____ () C:\Program Files\Mobile Partner\plugins\imageformats\qmng4.dll
2012-11-21 10:24 - 2012-11-21 10:24 - 00370176 _____ () C:\Program Files\Mobile Partner\plugins\imageformats\qtiff4.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: WebCam SCB-0385N
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Samsung Universal Scan Driver
Description: Samsung Universal Scan Driver
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Samsung
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/11/2014 03:23:23 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/11/2014 03:03:46 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/11/2014 11:58:44 AM) (Source: Application Hang) (User: )
Description: Programm FRST.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 478

Startzeit: 01cf0ebc0a8403bf

Endzeit: 16

Anwendungspfad: C:\Users\CHEFFE\Desktop\FRST.exe

Berichts-ID: 53b114d3-7aaf-11e3-9d46-001e101fa1f5

Error: (01/10/2014 06:18:12 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/05/2014 10:53:17 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/04/2014 05:35:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 26.0.0.5087, Zeitstempel: 0x52a0d273
Name des fehlerhaften Moduls: xul.dll, Version: 26.0.0.5087, Zeitstempel: 0x52a0d20a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0014e1a8
ID des fehlerhaften Prozesses: 0x2e4
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (12/31/2013 03:50:04 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/31/2013 03:47:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/31/2013 03:47:15 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/31/2013 03:46:40 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (01/11/2014 03:13:23 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (01/11/2014 03:12:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (01/11/2014 03:12:54 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.

Error: (01/11/2014 03:12:39 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎11.‎01.‎2014 um 15:04:07 unerwartet heruntergefahren.

Error: (01/11/2014 02:53:46 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (01/11/2014 02:53:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (01/11/2014 02:53:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.

Error: (01/11/2014 02:35:56 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/11/2014 02:35:54 PM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/11/2014 02:35:52 PM) (Source: ipnathlp) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (01/11/2014 03:23:23 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/11/2014 03:03:46 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/11/2014 11:58:44 AM) (Source: Application Hang)(User: )
Description: FRST.exe3.3.8.147801cf0ebc0a8403bf16C:\Users\CHEFFE\Desktop\FRST.exe53b114d3-7aaf-11e3-9d46-001e101fa1f5

Error: (01/10/2014 06:18:12 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/05/2014 10:53:17 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (01/04/2014 05:35:22 PM) (Source: Application Error)(User: )
Description: firefox.exe26.0.0.508752a0d273xul.dll26.0.0.508752a0d20ac00000050014e1a82e401cf095a1b6506eeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Mozilla Firefox\xul.dll347eb01d-755e-11e3-8ecc-001e101fb4df

Error: (12/31/2013 03:50:04 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Samsung\easy display manager\RunGfxUI64.exe

Error: (12/31/2013 03:47:48 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\BatteryLifeExtender\Drv\SABI2x64\KStartMem.exe.Manifest

Error: (12/31/2013 03:47:15 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\EasyFileShare\Drv\SABI2x64\KStartMem.exe.Manifest

Error: (12/31/2013 03:46:40 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Samsung\Samsung Support Center\Drv\drv2x64\KStartMem.exe.Manifest


==================== Memory info ===========================

Percentage of memory in use: 49%
Total physical RAM: 2037.3 MB
Available physical RAM: 1035.78 MB
Total Pagefile: 4074.59 MB
Available Pagefile: 2860.47 MB
Total Virtual: 2047.88 MB
Available Virtual: 1908.06 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:81 GB) (Free:50.9 GB) NTFS
Drive d: () (Fixed) (Total:134.82 GB) (Free:73.4 GB) NTFS
Drive e: (Mobile Partner) (CDROM) (Total:0.03 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 9F89D315)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=81 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=135 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=17 GB) - (Type=27)

==================== End Of Log ============================

Gmer.txt:
Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-11 15:46:19
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 Hitachi_ rev.ESBO 232,89GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\CHEFFE\AppData\Local\Temp\fgloapoc.sys


---- System - GMER 2.1 ----

SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwAddBootEntry [0x8E753AD0]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwAssignProcessToJobObject [0x8E7545AE]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateEvent [0x8E7605E0]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateEventPair [0x8E76062C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateIoCompletion [0x8E7607C6]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateMutant [0x8E76054E]
SSDT            \??\C:\windows\system32\drivers\aswSP.sys                                                        ZwCreateSection [0x88FA3386]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateSemaphore [0x8E760596]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateThread [0x8E754AE4]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateThreadEx [0x8E754D00]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwCreateTimer [0x8E760780]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwDebugActiveProcess [0x8E75539C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwDeleteBootEntry [0x8E753B36]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwDuplicateObject [0x8E758B32]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwLoadDriver [0x8E75371E]
SSDT            \??\C:\windows\system32\drivers\aswSP.sys                                                        ZwMapViewOfSection [0x88FA3466]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwModifyBootEntry [0x8E753B9C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwNotifyChangeKey [0x8E758F28]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwNotifyChangeMultipleKeys [0x8E755E2C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenEvent [0x8E76060A]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenEventPair [0x8E76064E]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenIoCompletion [0x8E7607EA]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenMutant [0x8E760574]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenProcess [0x8E75842C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenSection [0x8E7606FE]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenSemaphore [0x8E7605BE]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenThread [0x8E758814]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwOpenTimer [0x8E7607A4]
SSDT            \??\C:\windows\system32\drivers\aswSP.sys                                                        ZwProtectVirtualMemory [0x88FA320A]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwQueryObject [0x8E755CF8]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwQueueApcThreadEx [0x8E755A06]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSetBootEntryOrder [0x8E753C02]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSetBootOptions [0x8E753C68]
SSDT            \??\C:\windows\system32\drivers\aswSP.sys                                                        ZwSetContextThread [0x88FA3562]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSetSystemInformation [0x8E7537B8]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSetSystemPowerState [0x8E75398E]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwShutdownSystem [0x8E75391C]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSuspendProcess [0x8E755566]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSuspendThread [0x8E7556C8]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwSystemDebugControl [0x8E753A16]
SSDT            \??\C:\windows\system32\drivers\aswSP.sys                                                        ZwTerminateProcess [0x88FA32D8]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwTerminateThread [0x8E7551F6]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwVdmControl [0x8E753CCE]
SSDT            \??\C:\windows\system32\drivers\aswSnx.sys                                                      ZwWriteVirtualMemory [0x8E75460A]

---- Kernel code sections - GMER 2.1 ----

.text          ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                        82E82A15 1 Byte  [06]
.text          ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                          82EBC212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                              82EC3460 4 Bytes  [D0, 3A, 75, 8E] {SAR BYTE [EDX], 0x1; JNZ 0xffffff92}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                              82EC34E8 4 Bytes  [AE, 45, 75, 8E] {SCASB ; INC EBP; JNZ 0xffffff92}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                              82EC353C 5 Bytes  [E0, 05, 76, 8E, 2C]
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11AD                                                              82EC3542 2 Bytes  [76, 8E] {JBE 0xffffff90}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                              82EC3548 4 Bytes  [C6, 07, 76, 8E]
.text          ...                                                                                             

---- User code sections - GMER 2.1 ----

.text          C:\windows\System32\svchost.exe[124] kernel32.dll!GetBinaryTypeW + 70                            776A69E4 1 Byte  [62]
.text          C:\windows\system32\sppsvc.exe[244] kernel32.dll!GetBinaryTypeW + 70                            776A69E4 1 Byte  [62]
.text          C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe[448] kernel32.dll!GetBinaryTypeW + 70        776A69E4 1 Byte  [62]
.text          C:\windows\system32\igfxsrvc.exe[460] kernel32.dll!GetBinaryTypeW + 70                          776A69E4 1 Byte  [62]
.text          C:\windows\system32\csrss.exe[484] kernel32.dll!GetBinaryTypeW + 70                              776A69E4 1 Byte  [62]
.text          ...                                                                                             

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                          Wdf01000.sys

---- Registry - GMER 2.1 ----

Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bb115fe28                     
Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4cedde7dcc4c                     
Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4cedde7dcc4c@8c71f8a0e16f        0x5C 0x36 0x68 0xE4 ...
Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4cedde7dcc4c@ccf9e8f63745        0x1A 0xA8 0x9B 0x3F ...
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bb115fe28 (not active ControlSet) 
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4cedde7dcc4c (not active ControlSet) 
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4cedde7dcc4c@8c71f8a0e16f            0x5C 0x36 0x68 0xE4 ...
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4cedde7dcc4c@ccf9e8f63745            0x1A 0xA8 0x9B 0x3F ...

---- Disk sectors - GMER 2.1 ----

Disk            \Device\Harddisk0\DR0                                                                            unknown MBR code

---- EOF - GMER 2.1 ----

schrauber 11.01.2014 18:33
hi,
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

L_U_C_K_Y 11.01.2014 22:44
combofix.txt:
Code:
ComboFix 14-01-08.03 - CHEFFE 11.01.2014  21:55:56.1.4 - x86
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.2037.1122 [GMT 1:00]
ausgeführt von:: d:\tools\combofix\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Internet Security *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Internet Security *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\hosts.ics
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-12-11 bis 2014-01-11  ))))))))))))))))))))))))))))))
.
.
2014-01-11 08:21 . 2013-12-04 02:57        7760024        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{AEACB52D-DB8D-4DF9-B4BA-B95186AFD894}\mpengine.dll
2013-12-19 22:21 . 2014-01-11 10:58        --------        d-----w-        C:\FRST
2013-12-19 13:36 . 2013-12-19 13:36        --------        d-----w-        c:\windows\ERUNT
2013-12-19 13:13 . 2013-12-19 13:22        --------        d-----w-        C:\AdwCleaner
2013-12-18 14:58 . 2013-12-18 14:58        --------        d-----w-        c:\users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 14:58 . 2013-12-18 14:58        --------        d-----w-        c:\programdata\Malwarebytes
2013-12-18 14:58 . 2013-12-18 14:58        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware
2013-12-18 14:58 . 2013-04-04 13:50        22856        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-12-18 11:14 . 2013-12-18 11:14        --------        d-----w-        c:\users\CHEFFE\AppData\Local\Google
2013-12-18 11:06 . 2013-12-21 15:32        64168        ----a-w-        c:\windows\system32\drivers\aswstm.sys
2013-12-13 11:43 . 2013-05-10 04:56        12625408        ----a-w-        c:\windows\system32\wmploc.DLL
2013-12-13 11:43 . 2013-05-10 03:48        164864        ----a-w-        c:\program files\Windows Media Player\wmplayer.exe
2013-12-13 11:41 . 2013-10-19 01:36        159232        ----a-w-        c:\windows\system32\imagehlp.dll
2013-12-13 11:41 . 2013-11-23 18:26        417792        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-12-13 11:41 . 2013-10-30 02:19        301568        ----a-w-        c:\windows\system32\msieftp.dll
2013-12-13 11:41 . 2013-10-12 02:04        121856        ----a-w-        c:\windows\system32\wshom.ocx
2013-12-13 11:41 . 2013-10-12 02:03        163840        ----a-w-        c:\windows\system32\scrrun.dll
2013-12-13 11:41 . 2013-10-12 01:15        141824        ----a-w-        c:\windows\system32\wscript.exe
2013-12-13 11:41 . 2013-10-12 01:15        126976        ----a-w-        c:\windows\system32\cscript.exe
2013-12-13 11:41 . 2013-10-30 01:27        2349056        ----a-w-        c:\windows\system32\win32k.sys
2013-12-13 11:41 . 2013-11-12 02:07        2048        ----a-w-        c:\windows\system32\tzres.dll
2013-12-13 11:41 . 2013-10-04 01:49        81408        ----a-w-        c:\windows\system32\drivers\drmk.sys
2013-12-13 11:41 . 2013-10-04 01:17        177152        ----a-w-        c:\windows\system32\drivers\portcls.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-11 11:07 . 2013-03-09 10:51        265072        ----a-w-        c:\windows\system32\drivers\aswndisflt.sys
2013-12-18 11:06 . 2013-03-09 10:51        180248        ----a-w-        c:\windows\system32\drivers\aswVmm.sys
2013-12-18 11:06 . 2013-01-20 13:41        410528        ----a-w-        c:\windows\system32\drivers\aswsp.sys
2013-12-18 11:06 . 2013-01-20 13:41        775952        ----a-w-        c:\windows\system32\drivers\aswSnx.sys
2013-12-18 11:06 . 2013-01-20 13:41        67824        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys
2013-12-18 11:06 . 2013-01-20 13:40        43152        ----a-w-        c:\windows\avastSS.scr
2013-12-18 11:06 . 2013-01-20 13:40        270240        ----a-w-        c:\windows\system32\aswBoot.exe
2013-12-13 09:10 . 2012-11-21 21:36        692616        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-12-13 09:10 . 2012-11-21 21:36        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-19 02:33 . 2013-01-19 09:59        230048        ------w-        c:\windows\system32\MpSigStub.exe
2013-11-09 22:26 . 2013-11-09 22:29        33832        ----a-w-        c:\windows\system32\drivers\btwl2cap.sys
2013-11-09 22:26 . 2013-11-09 22:29        175144        ----a-w-        c:\windows\system32\drivers\btwavdt.sys
2013-11-09 22:26 . 2013-11-09 22:29        152400        ----a-w-        c:\windows\system32\drivers\btwaudio.sys
2013-11-09 22:26 . 2012-11-20 09:51        508184        ----a-w-        c:\windows\system32\drivers\btwampfl.sys
2013-11-09 22:26 . 2013-11-09 22:29        18728        ----a-w-        c:\windows\system32\drivers\btwrchid.sys
2013-10-24 06:43 . 2013-03-09 10:51        49944        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys
2013-10-24 06:43 . 2013-01-20 13:41        79720        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys
2013-10-24 06:43 . 2013-01-20 15:52        26136        ----a-w-        c:\windows\system32\drivers\aswKbd.sys
2013-10-18 07:05 . 2013-10-18 07:06        94632        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2013-10-14 17:41 . 2013-02-15 21:46        104752        ----a-w-        c:\windows\system32\drivers\aswFW.sys
2013-10-14 17:41 . 2013-02-15 21:45        204784        ----a-w-        c:\windows\system32\drivers\aswNdis2.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-18 11:06        259464        ----a-w-        c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-09-28 9734760]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-08-25 2286888]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-18 3764024]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2013-2-27 1116376]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages        REG_MULTI_SZ          scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 Mobile Partner. RunOuc;Mobile Partner. OUC;c:\program files\Mobile Partner\UpdateDog\ouc.exe [2012-11-21 218624]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2013-12-21 64168]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2012-11-21 102784]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [2012-11-21 208896]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe [2010-08-09 131888]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R4 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R4 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2013-10-24 26136]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-01-11 265072]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-12-18 775952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-12-18 410528]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [2009-05-28 10752]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-12-18 67824]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2013-12-18 113704]
S2 HWDeviceService.exe;HWDeviceService.exe;c:\programdata\DatacardService\HWDeviceService.exe [2010-11-16 264704]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2013-11-09 508184]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2013-11-09 33832]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2012-11-21 72576]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2010-07-08 322336]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-21 09:10]
.
2013-08-25 c:\windows\Tasks\FixIt_69D5DA04-2F8C-4c60-899D-7280C6BB422A.job
- c:\programdata\FixIt_69D5DA04-2F8C-4c60-899D-7280C6BB422A\Reset.bat [2010-08-16 14:29]
.
2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-24 10:32]
.
2014-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-24 10:32]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
TCP: Interfaces\{7E21F067-B96A-4D61-8212-262EE61318AD}: NameServer = 193.189.244.225 193.189.244.206
FF - ProfilePath - c:\users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(4360)
c:\program files\Samsung\Movie Color Enhancer\WinCRT.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\WLANExt.exe
c:\windows\system32\conhost.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\programdata\Mobile Partner\OnlineUpdate\ouc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\taskhost.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\SRS Labs\SRS Premium Sound Control Panel\srspremiumpanel.exe
c:\program files\Samsung\Easy Display Manager\dmhkcore.exe
c:\windows\system32\conhost.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
c:\program files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
c:\windows\system32\igfxext.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Samsung\SamsungFastStart\SmartRestarter.exe
c:\windows\system32\sppsvc.exe
c:\program files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
c:\program files\Samsung\Samsung Support Center\SSCKbdHk.exe
c:\windows\system32\hkcmd.exe
c:\windows\system32\igfxtray.exe
c:\windows\system32\igfxpers.exe
c:\program files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
c:\program files\Samsung\Samsung Update Plus\SUPBackground.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-01-11  22:22:46 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-01-11 21:22
.
Vor Suchlauf: 8 Verzeichnis(se), 54.563.586.048 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 54.110.281.728 Bytes frei
.
- - End Of File - - ACEABE8FD19F42DA1381455A2355807B
2E5DEBB2116B3417023E0D6562D7ED07

schrauber 12.01.2014 09:09
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

L_U_C_K_Y 12.01.2014 12:51
hab ich in meinem Ausgangsbeitrag vergessen:
beim ersten Ausführen ist GMER bei "\Device\BthModem0" hängen geblieben und der Rechner hat sich augfehängt (der Rechner erkennt/findet keine BT-Geräte; das Problem besteht aber schon länger)

zu den nachfolgenden Logs:
- den Adw-Cleaner hab ich mehrfach laufen lassen (Löschung des unter "firefox" gefundenen Eintrages hat nicht funktioniert...???)
- kurz nach dem Start von JRT erhielt ich in dem DOS-Fenster nachfolgende Meldung bei der ich "y" ausgewählt habe:

Code:
[          A Windows Explorer window may also open.          ]
 [            These actions are normal. Don't panic.            ]
 [                                                              ]
 [                      ** DISCLAIMER **                      ]
 [                                                              ]
 [          This software is provided "as is" without          ]
 [        warranty of any kind. You may use this software      ]
 [                      at your own risk.                      ]
 [                                                              ]
 [    Click the [X] in the top-right corner of this window    ]
 [                if you wish to exit. Otherwise,              ]
 ================================================================

Drücken Sie eine beliebige Taste . . .

 Creating a registry backup
 Checking Startup
 Checking Modules

A bad module has been detected!
A reboot is required to remove modules.

Press 'y' to reboot now
Press 'n' to reboot later
Reboot now? [y,n]
Mbam_log:
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.12.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16750
CHEFFE :: LUCKY-PC [Administrator]

12.01.2014 10:39:13
mbam-log-2014-01-12 (10-39-13).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 210067
Laufzeit: 16 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
AdwCleaner_log:
Code:
# AdwCleaner v3.016 - Bericht erstellt am 12/01/2014 um 11:15:07
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : CHEFFE - LUCKY-PC
# Gestartet von : D:\Tools\Adw Cleaner\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16750


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1696 octets] - [19/12/2013 14:14:31]
AdwCleaner[R1].txt - [1756 octets] - [19/12/2013 14:18:10]
AdwCleaner[R2].txt - [983 octets] - [12/01/2014 11:02:12]
AdwCleaner[R3].txt - [1103 octets] - [12/01/2014 11:12:38]
AdwCleaner[S0].txt - [1821 octets] - [19/12/2013 14:22:00]
AdwCleaner[S1].txt - [1043 octets] - [12/01/2014 11:08:34]
AdwCleaner[S2].txt - [1025 octets] - [12/01/2014 11:15:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1085 octets] ##########
JRT_log:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x86
Ran by CHEFFE on 12.01.2014 at 11:44:57,74
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\CHEFFE\AppData\Roaming\mozilla\firefox\profiles\yzhu60zs.default\minidumps [17 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.01.2014 at 11:52:50,92
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST_log:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 01
Ran by CHEFFE (administrator) on LUCKY-PC on 12-01-2014 12:26:14
Running from D:\Tools\Farbar Recovery Scan Tool
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9734760 2010-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2286888 2011-08-25] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-18] (AVAST Software)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{7E21F067-B96A-4D61-8212-262EE61318AD}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: NoSquint - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\nosquint@urandom.ca.xpi
FF Extension: NoScript - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-18] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2013-12-18] (AVAST Software)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [264704 2010-11-16] ()
S4 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S4 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [218624 2012-11-21] ()
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26136 2013-10-24] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2013-12-18] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [265072 2014-01-11] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-24] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2013-12-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410528 2013-12-18] (AVAST Software)
R3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2013-12-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2013-12-18] ()
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [508184 2013-11-09] (Broadcom Corporation.)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35088 2013-04-30] (The OpenVPN Project)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\CHEFFE\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-12 10:25 - 2014-01-12 10:25 - 00000626 _____ C:\Users\CHEFFE\Desktop\Tools.lnk
2014-01-11 22:29 - 2014-01-12 12:16 - 00000434 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-11 22:22 - 2014-01-11 22:22 - 00015588 _____ C:\ComboFix.txt
2014-01-11 22:13 - 2014-01-11 22:13 - 00000552 _____ C:\windows\PFRO.log
2014-01-11 21:52 - 2014-01-11 22:22 - 00000000 ____D C:\Qoobox
2014-01-11 21:52 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2014-01-11 21:52 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2014-01-11 21:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2014-01-11 21:51 - 2014-01-11 22:18 - 00000000 ____D C:\windows\erdnt
2013-12-31 08:27 - 2014-01-12 12:15 - 00001120 _____ C:\windows\setupact.log
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-19 23:21 - 2014-01-11 11:58 - 00000000 ____D C:\FRST
2013-12-19 14:40 - 2014-01-11 12:05 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 14:13 - 2014-01-12 11:22 - 00000000 ____D C:\AdwCleaner
2013-12-19 11:07 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 11:07 - 2013-10-25 05:45 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 11:07 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 11:07 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 11:07 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 11:07 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:58 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-18 13:05 - 2014-01-12 12:24 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:06 - 2013-12-21 16:32 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2013-12-13 12:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-13 12:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-13 12:41 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-13 12:41 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-13 12:41 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-13 12:41 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-13 12:41 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-13 12:41 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-13 12:41 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-13 12:41 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-13 12:41 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-13 12:41 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-13 12:41 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-12 12:24 - 2013-12-18 13:05 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2014-01-12 12:24 - 2013-10-24 11:32 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-12 12:23 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-12 12:23 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-12 12:16 - 2014-01-11 22:29 - 00000434 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-12 12:15 - 2013-12-31 08:27 - 00001120 _____ C:\windows\setupact.log
2014-01-12 12:15 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-12 12:14 - 2013-06-16 00:17 - 01386446 _____ C:\windows\WindowsUpdate.log
2014-01-12 12:14 - 2012-11-21 13:49 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\CrashDumps
2014-01-12 12:09 - 2013-02-17 03:35 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-12 11:55 - 2012-11-20 10:37 - 00000000 ____D C:\Users\CHEFFE
2014-01-12 11:43 - 2013-10-24 11:32 - 00001098 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-12 11:22 - 2013-12-19 14:13 - 00000000 ____D C:\AdwCleaner
2014-01-12 10:25 - 2014-01-12 10:25 - 00000626 _____ C:\Users\CHEFFE\Desktop\Tools.lnk
2014-01-11 22:22 - 2014-01-11 22:22 - 00015588 _____ C:\ComboFix.txt
2014-01-11 22:22 - 2014-01-11 21:52 - 00000000 ____D C:\Qoobox
2014-01-11 22:22 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-11 22:22 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-11 22:18 - 2014-01-11 21:51 - 00000000 ____D C:\windows\erdnt
2014-01-11 22:15 - 2009-07-14 03:04 - 00000215 _____ C:\windows\system.ini
2014-01-11 22:13 - 2014-01-11 22:13 - 00000552 _____ C:\windows\PFRO.log
2014-01-11 18:41 - 2012-11-21 09:38 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\SoftGrid Client
2014-01-11 16:28 - 2012-12-08 22:31 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Windows Live
2014-01-11 12:07 - 2013-03-09 11:51 - 00265072 _____ (AVAST Software) C:\windows\system32\Drivers\aswndisflt.sys
2014-01-11 12:05 - 2013-12-19 14:40 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2014-01-11 11:58 - 2013-12-19 23:21 - 00000000 ____D C:\FRST
2014-01-05 10:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2013-12-31 15:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-30 19:44 - 2013-08-15 21:22 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\PokerStars.EU
2013-12-23 10:17 - 2009-07-26 21:06 - 01650384 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-22 02:22 - 2013-07-17 07:16 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\vlc
2013-12-21 16:32 - 2013-12-18 12:06 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2013-12-19 23:19 - 2012-11-23 10:07 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-19 23:19 - 2012-11-23 10:07 - 00000000 ____D C:\Program Files\CCleaner
2013-12-19 16:00 - 2009-07-26 21:57 - 00000000 ____D C:\windows\Panther
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 13:22 - 2012-12-08 21:35 - 00000000 ____D C:\Program Files\Recuva
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:07 - 2013-02-15 22:44 - 00002013 _____ C:\Users\Public\Desktop\avast! Internet Security.lnk
2013-12-18 12:06 - 2013-03-09 11:51 - 00180248 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00775952 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00410528 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00067824 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-18 12:06 - 2013-01-20 14:40 - 00270240 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-18 12:06 - 2013-01-20 14:40 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-17 19:56 - 2013-11-15 18:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-15 10:45 - 2012-11-20 10:54 - 00058016 _____ C:\Users\CHEFFE\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-13 12:55 - 2009-07-14 05:33 - 00347936 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-13 12:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2013-12-13 12:50 - 2013-07-21 08:46 - 00000000 ____D C:\windows\system32\MRT
2013-12-13 12:44 - 2012-11-24 01:21 - 88123800 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-13 10:57 - 2010-10-29 03:59 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-12-13 10:10 - 2012-11-21 22:36 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-12-13 10:10 - 2012-11-21 22:36 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-13 09:27 - 2013-10-16 06:24 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

Some content of TEMP:
====================
C:\Users\CHEFFE\AppData\Local\temp\ConResGr.dll
C:\Users\CHEFFE\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-31 15:46

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

schrauber 13.01.2014 10:10

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

L_U_C_K_Y 14.01.2014 17:44
beim Ausführen von SecurityCheck erschien kurz die Meldung "Datei HKLMRUN.TXT" nicht gefunden" (falls von Bedeutung)

eset_log:
Code:
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=15c1a7e296d4f242bb55a97b2b7ba7e6
# engine=16637
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-13 11:49:42
# local_time=2014-01-14 12:49:42 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=772 16777214 83 82 1990941 7884521 0 0
# compatibility_mode=5893 16776574 100 94 228490 141288173 0 0
# scanned=156818
# found=0
# cleaned=0
# scan_time=9631
checkup_log:
Code:
Results of screen317's Security Check version 0.99.78 
 Windows 7 Service Pack 1 x86 (UAC is enabled) 
 Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
avast! Internet Security 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 CCleaner   
 Java 7 Update 45 
 Adobe Flash Player        11.9.900.170 
 Adobe Reader XI 
 Mozilla Firefox (26.0)
 Mozilla Thunderbird (24.2.0)
````````Process Check: objlist.exe by Laurent```````` 
 Mobile Partner OnlineUpdate ouc.exe 
 AVAST Software Avast AvastUI.exe 
 AVAST Software Avast AvastSvc.exe 
 AVAST Software Avast afwServ.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
frst_log:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2014 01
Ran by CHEFFE (administrator) on LUCKY-PC on 14-01-2014 17:37:59
Running from D:\Tools\Farbar Recovery Scan Tool
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9734760 2010-09-28] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2286888 2011-08-25] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-18] (AVAST Software)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{7E21F067-B96A-4D61-8212-262EE61318AD}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: NoSquint - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\nosquint@urandom.ca.xpi
FF Extension: NoScript - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: Adblock Plus - C:\Users\CHEFFE\AppData\Roaming\Mozilla\Firefox\Profiles\yzhu60zs.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-18] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2013-12-18] (AVAST Software)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [264704 2010-11-16] ()
S4 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S4 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [218624 2012-11-21] ()
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26136 2013-10-24] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2013-12-18] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [265072 2014-01-11] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-10-24] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2013-12-18] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410528 2013-12-18] (AVAST Software)
R3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2013-12-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2013-12-18] ()
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [508184 2013-11-09] (Broadcom Corporation.)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35088 2013-04-30] (The OpenVPN Project)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\CHEFFE\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-14 09:31 - 2014-01-14 09:31 - 00000967 _____ C:\Users\CHEFFE\Desktop\checkup.txt
2014-01-12 10:25 - 2014-01-12 10:25 - 00000626 _____ C:\Users\CHEFFE\Desktop\Tools.lnk
2014-01-11 22:29 - 2014-01-14 17:36 - 00000436 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-11 22:22 - 2014-01-11 22:22 - 00015588 _____ C:\ComboFix.txt
2014-01-11 22:13 - 2014-01-11 22:13 - 00000552 _____ C:\windows\PFRO.log
2014-01-11 21:52 - 2014-01-11 22:22 - 00000000 ____D C:\Qoobox
2014-01-11 21:52 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2014-01-11 21:52 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2014-01-11 21:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2014-01-11 21:52 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2014-01-11 21:51 - 2014-01-11 22:18 - 00000000 ____D C:\windows\erdnt
2013-12-31 08:27 - 2014-01-14 17:36 - 00001344 _____ C:\windows\setupact.log
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-19 23:21 - 2014-01-11 11:58 - 00000000 ____D C:\FRST
2013-12-19 14:40 - 2014-01-11 12:05 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 14:13 - 2014-01-12 11:22 - 00000000 ____D C:\AdwCleaner
2013-12-19 11:07 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 11:07 - 2013-10-25 05:45 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 11:07 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 11:07 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 11:07 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 11:07 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 11:07 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:58 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-18 13:05 - 2014-01-14 17:37 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:06 - 2013-12-21 16:32 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-01-14 17:37 - 2013-12-18 13:05 - 00002014 _____ C:\Users\CHEFFE\Desktop\SafeZone-Browser.lnk
2014-01-14 17:36 - 2014-01-11 22:29 - 00000436 _____ C:\windows\system32\Drivers\etc\hosts.ics
2014-01-14 17:36 - 2013-12-31 08:27 - 00001344 _____ C:\windows\setupact.log
2014-01-14 17:36 - 2013-10-24 11:32 - 00001094 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-14 17:36 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-14 17:34 - 2013-06-16 00:17 - 01409742 _____ C:\windows\WindowsUpdate.log
2014-01-14 17:27 - 2013-10-24 11:32 - 00001098 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-14 17:27 - 2013-02-17 03:35 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-14 09:31 - 2014-01-14 09:31 - 00000967 _____ C:\Users\CHEFFE\Desktop\checkup.txt
2014-01-13 21:52 - 2009-07-26 21:06 - 01650384 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-13 21:47 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-13 21:47 - 2009-07-14 05:34 - 00015424 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-12 12:14 - 2012-11-21 13:49 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\CrashDumps
2014-01-12 11:55 - 2012-11-20 10:37 - 00000000 ____D C:\Users\CHEFFE
2014-01-12 11:22 - 2013-12-19 14:13 - 00000000 ____D C:\AdwCleaner
2014-01-12 10:25 - 2014-01-12 10:25 - 00000626 _____ C:\Users\CHEFFE\Desktop\Tools.lnk
2014-01-11 22:22 - 2014-01-11 22:22 - 00015588 _____ C:\ComboFix.txt
2014-01-11 22:22 - 2014-01-11 21:52 - 00000000 ____D C:\Qoobox
2014-01-11 22:22 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-11 22:22 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-11 22:18 - 2014-01-11 21:51 - 00000000 ____D C:\windows\erdnt
2014-01-11 22:15 - 2009-07-14 03:04 - 00000215 _____ C:\windows\system.ini
2014-01-11 22:13 - 2014-01-11 22:13 - 00000552 _____ C:\windows\PFRO.log
2014-01-11 18:41 - 2012-11-21 09:38 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\SoftGrid Client
2014-01-11 16:28 - 2012-12-08 22:31 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Windows Live
2014-01-11 12:07 - 2013-03-09 11:51 - 00265072 _____ (AVAST Software) C:\windows\system32\Drivers\aswndisflt.sys
2014-01-11 12:05 - 2013-12-19 14:40 - 00000000 ____D C:\Users\CHEFFE\Desktop\Seuche
2014-01-11 11:58 - 2013-12-19 23:21 - 00000000 ____D C:\FRST
2014-01-05 10:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2013-12-31 15:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-12-31 08:27 - 2013-12-31 08:27 - 00000000 _____ C:\windows\setuperr.log
2013-12-30 19:44 - 2013-08-15 21:22 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\PokerStars.EU
2013-12-22 02:22 - 2013-07-17 07:16 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\vlc
2013-12-21 16:32 - 2013-12-18 12:06 - 00064168 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2013-12-19 23:19 - 2012-11-23 10:07 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-19 23:19 - 2012-11-23 10:07 - 00000000 ____D C:\Program Files\CCleaner
2013-12-19 16:00 - 2009-07-26 21:57 - 00000000 ____D C:\windows\Panther
2013-12-19 14:36 - 2013-12-19 14:36 - 00000000 ____D C:\windows\ERUNT
2013-12-19 13:22 - 2012-12-08 21:35 - 00000000 ____D C:\Program Files\Recuva
2013-12-18 17:12 - 2013-12-18 17:12 - 00000000 ____D C:\Users\CHEFFE\Documents\Bluetooth-Exchange-Ordner
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Users\CHEFFE\AppData\Roaming\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:58 - 2013-12-18 15:58 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 12:14 - 2013-12-18 12:14 - 00000000 ____D C:\Users\CHEFFE\AppData\Local\Google
2013-12-18 12:07 - 2013-02-15 22:44 - 00002013 _____ C:\Users\Public\Desktop\avast! Internet Security.lnk
2013-12-18 12:06 - 2013-03-09 11:51 - 00180248 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00775952 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00410528 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2013-12-18 12:06 - 2013-01-20 14:41 - 00067824 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-18 12:06 - 2013-01-20 14:40 - 00270240 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-18 12:06 - 2013-01-20 14:40 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-17 19:56 - 2013-11-15 18:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-15 10:45 - 2012-11-20 10:54 - 00058016 _____ C:\Users\CHEFFE\AppData\Local\GDIPFONTCACHEV1.DAT

Some content of TEMP:
====================
C:\Users\CHEFFE\AppData\Local\temp\ConResGr.dll
C:\Users\CHEFFE\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-31 15:46

==================== End Of Log ============================
--- --- ---

--- --- ---



Firefox läuft wieder schnell und ohne Probleme. DANKE!!!

Für mein weiterhin bestehendes Bluetooth-Problem werde ich einen neuen Thread aufmachen (oder?)

schrauber 15.01.2014 10:05
Zitat:
Für mein weiterhin bestehendes Bluetooth-Problem werde ich einen neuen Thread aufmachen (oder?)
Not needed, erzähl mal genau was da los ist :)

L_U_C_K_Y 16.01.2014 22:08
merci :-)

das Netbook findet keine BT-Geräte, z.B. mein Handy (BT ist eingeschaltet und Handy "sichtbar"). Umgekehrt wird es aber vom Handy gefunden, wobei jedoch keine Verbindung zustande kommt.

Das Problem habe ich, seit ich Samsung Kies installieren wollte. Die Installation lief zwar durch, aber dazwischen gab's eine Fehlermeldungen bezügl. nicht gefundener Treiber (genaue Meldung weiß ich nicht mehr). Die Installation habe ich 2-mal wiederholt, mit dem selben "Erfolg". Danach habe ich Kies habe wieder deinstalliert.

Im Gerätemanager war nun "Bluetooth Peripheriegeräte" mit einem gelben Ausrufezeichen markiert. In den Eigenschaften wurde angezeigt, dass kein Treiber installalliert ist (Code 28). Bei erneuter Treibersuche (lokal u. Internet) wurde kein Treiber gefunden.

Das habe ich bisher probiert:
- Bluetooth-Funkgerät/Broadcom... im Gerätemanager deinstalliert
- beim Neustart/Treiberinstallation auch wieder ein Treiberfehler
- von www.broadcom.com nochmal die BT-Sofware runtergeladen und installiert -> Fehlermeldung "Es wurde kein Treiber gefunden" bei "Bluetooth-Peripheriegerät"
- mit "Samsung Update" nach akt. Software/Treiber gesucht: angeblich alles aktuell
- ein MS-Fixit zur Geräteüberprüfung runtergeladen und ausgeführt -> Warnmeldung: "Hardwareveränderung wurden möglicherweise nicht erkannt"

... das war's

schrauber 17.01.2014 17:04
Joah, ausser Hersteller kontaktieren hab ich da jetzt auch keine Idee mehr :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:53 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131