Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   VeberGreat Virus (https://www.trojaner-board.de/149472-vebergreat-virus.html)

blanik1042 08.02.2014 19:17
VeberGreat Virus
 
habe bzw. hatte den VeberGreat Virus auf meinem Rechner. Habe ihn mit der Anleitung vom 10.12.13 enfernt.

schrauber 08.02.2014 20:07
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


blanik1042 08.02.2014 20:59

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by Martin (administrator) on PC-GIGABYTE on 08-02-2014 20:53:24
Running from C:\Users\Martin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
() C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Dropbox, Inc.) C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Vimicro Corporation) C:\Program Files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe
(SAMSUNG ELECTRONICS) C:\Program Files (x86)\Samsung\EmoDio\SMSTray.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7834656 2009-06-02] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-06-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [123400 2009-01-21] (Logitech Inc.)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [362488 2010-06-07] (Acronis)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [2991856 2013-02-21] (Logitech, Inc.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [VMonitorVMUVC] - C:\Program Files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe [135168 2008-03-26] (Vimicro Corporation)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [47392 2010-03-16] (Apple Inc.)
HKLM-x32\...\Run: [SMSTray] - C:\Program Files (x86)\Samsung\EmoDio\SMSTray.exe [479232 2009-04-16] (SAMSUNG ELECTRONICS)
HKLM-x32\...\Run: [ATICustomerCare] - C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2605424 2010-06-07] (Acronis)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2010-11-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-4200788517-4185943826-4247421852-1000\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKU\S-1-5-21-4200788517-4185943826-4247421852-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKU\S-1-5-21-4200788517-4185943826-4247421852-1000\...\Run: [KiesHelper] - C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
HKU\S-1-5-21-4200788517-4185943826-4247421852-1000\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1100120 2013-03-20] (Garmin Ltd or its subsidiaries)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x343A04CB1B7DCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {6B565918-AFF6-4bae-AC3F-63F626BDE74D} URL = hxxp://www.google.com/custom?q={searchTerms}&sa.x=0&sa.y=0&safe=active&client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&hl=de&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6B565918-AFF6-4bae-AC3F-63F626BDE74D} URL = hxxp://www.google.com/custom?q={searchTerms}&sa.x=0&sa.y=0&safe=active&client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&hl=de&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2710DD63-A308-4538-849F-F6A703ED099F}: [NameServer]192.168.212.1
Tcpip\..\Interfaces\{B497B378-FC93-4F39-BD89-6328E8F9CD09}: [NameServer]192.168.132.1

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default
FF NewTab: hxxp://www.google.com/firefox
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Garmin Communicator - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-21]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-06-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-19]
FF HKCU\...\Firefox\Extensions: [inlinetranslate@inlinetranslate.com] - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\extensions\inlinetranslate@inlinetranslate.com

==================== Services (Whitelisted) =================

R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3516408 2013-07-05] (devolo AG)
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-03-02] ()
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [186200 2013-03-20] (Garmin Ltd or its subsidiaries)
S4 MeDM; C:\Windows\SysWOW64\MeDM.exe [675840 2008-09-01] ()
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S3 WiselinkPro; C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe [X]

==================== Drivers (Whitelisted) ====================

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [31744 2009-09-04] (Google Inc)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
R3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (www.winchiphead.com)
S3 ENTECH64; C:\Windows\system32\DRIVERS\ENTECH64.sys [12744 2007-08-20] (EnTech Taiwan)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-03-10] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-07-05] (CACE Technologies)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [126440 2009-12-19] (QUALCOMM Incorporated)
R0 speedfan; C:\Windows\SysWow64\speedfan.sys [14104 2007-02-07] (Windows (R) Server 2003 DDK provider)
S3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [198400 2009-03-11] (Vimicro Corporation)
S3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation)
S3 ALSysIO; \??\C:\Users\Martin\AppData\Local\Temp\ALSysIO64.sys [X]
S3 cpuz130; \??\C:\Users\Martin\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 RTCore64; \??\C:\Program Files (x86)\RMClock\RTCore64.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-08 20:53 - 2014-02-08 20:53 - 00018680 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-02-08 20:53 - 2014-02-08 20:53 - 00000000 ____D () C:\FRST
2014-02-08 20:51 - 2014-02-08 20:52 - 02079744 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-02-08 19:05 - 2014-02-08 19:05 - 00001802 _____ () C:\sc-cleaner.txt
2014-02-08 18:48 - 2014-02-08 18:49 - 00000000 ____D () C:\AdwCleaner
2014-02-08 18:36 - 2014-02-08 18:36 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Malwarebytes
2014-02-08 18:35 - 2014-02-08 18:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-08 18:35 - 2014-02-08 18:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-08 18:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-08 18:34 - 2014-02-08 18:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-07 15:18 - 2014-02-07 15:18 - 00126860 _____ () C:\Users\Martin\Downloads\agmp3plugin.exe
2014-02-07 15:09 - 2014-02-07 15:09 - 00000034 _____ () C:\Windows\cdplayer.ini
2014-02-07 15:08 - 2014-02-07 15:19 - 00000000 ____D () C:\Program Files (x86)\Audiograbber
2014-02-07 15:08 - 2014-02-07 15:08 - 00001137 _____ () C:\Users\Public\Desktop\Audiograbber.lnk
2014-02-07 15:04 - 2014-02-07 15:04 - 00504616 _____ () C:\Users\Martin\Downloads\ag_setup183se.exe
2014-02-06 11:46 - 2014-02-06 11:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 16:09 - 2014-02-06 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-05 12:21 - 2014-02-05 12:21 - 00000841 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 12:20 - 2014-02-05 12:20 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-05 12:18 - 2014-02-05 12:19 - 25035644 _____ () C:\Users\Martin\Downloads\vlc-2.1.3-win64.exe
2014-02-01 14:20 - 2014-02-01 14:20 - 01021432 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\NDP451-KB2859818-Web.exe
2014-02-01 11:03 - 2014-02-01 11:07 - 58709735 _____ () C:\Users\Martin\Downloads\BDS473_V170.zip
2014-01-16 18:47 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 18:47 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 18:47 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 18:47 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-08 20:53 - 2014-02-08 20:53 - 00018680 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-02-08 20:53 - 2014-02-08 20:53 - 00000000 ____D () C:\FRST
2014-02-08 20:52 - 2014-02-08 20:51 - 02079744 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-02-08 20:52 - 2009-12-05 17:45 - 01858542 _____ () C:\Windows\WindowsUpdate.log
2014-02-08 20:50 - 2013-08-28 19:19 - 00000000 ___RD () C:\Users\Martin\Dropbox
2014-02-08 20:50 - 2013-08-28 19:17 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Dropbox
2014-02-08 20:49 - 2013-01-14 19:39 - 00039774 _____ () C:\Windows\setupact.log
2014-02-08 20:49 - 2010-05-23 10:47 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-08 20:49 - 2010-01-02 16:17 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-02-08 20:49 - 2009-12-05 18:53 - 00000144 _____ () C:\service.log
2014-02-08 20:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-08 20:47 - 2012-04-06 18:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-08 20:47 - 2010-05-23 10:47 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-08 19:52 - 2000-01-20 01:08 - 00007632 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-02-08 19:13 - 2009-07-14 18:58 - 00696832 _____ () C:\Windows\system32\perfh007.dat
2014-02-08 19:13 - 2009-07-14 18:58 - 00148128 _____ () C:\Windows\system32\perfc007.dat
2014-02-08 19:13 - 2009-07-14 06:13 - 01613340 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-08 19:13 - 2009-07-14 05:45 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-08 19:13 - 2009-07-14 05:45 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-08 19:05 - 2014-02-08 19:05 - 00001802 _____ () C:\sc-cleaner.txt
2014-02-08 18:58 - 2013-08-18 14:46 - 00000000 ____D () C:\Windows\ERUNT
2014-02-08 18:49 - 2014-02-08 18:48 - 00000000 ____D () C:\AdwCleaner
2014-02-08 18:44 - 2013-01-14 19:39 - 00040418 _____ () C:\Windows\PFRO.log
2014-02-08 18:44 - 2012-04-27 19:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-08 18:36 - 2014-02-08 18:36 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Malwarebytes
2014-02-08 18:36 - 2010-10-11 06:40 - 00000000 ____D () C:\Users\Martin\Desktop\Tools
2014-02-08 18:35 - 2014-02-08 18:35 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-08 18:35 - 2014-02-08 18:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-08 18:34 - 2014-02-08 18:34 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-08 17:22 - 2013-01-02 19:19 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\vlc
2014-02-08 17:17 - 2013-12-23 17:54 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\XBMC
2014-02-08 17:17 - 2013-12-16 20:02 - 00000107 _____ () C:\Users\Martin\Desktop\wlo.bat
2014-02-08 11:02 - 2013-08-19 18:44 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-07 16:21 - 2014-01-05 11:47 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\MediaMonkey
2014-02-07 15:19 - 2014-02-07 15:08 - 00000000 ____D () C:\Program Files (x86)\Audiograbber
2014-02-07 15:18 - 2014-02-07 15:18 - 00126860 _____ () C:\Users\Martin\Downloads\agmp3plugin.exe
2014-02-07 15:10 - 2009-12-05 17:51 - 00000000 ____D () C:\Users\Martin\AppData\Local\VirtualStore
2014-02-07 15:09 - 2014-02-07 15:09 - 00000034 _____ () C:\Windows\cdplayer.ini
2014-02-07 15:08 - 2014-02-07 15:08 - 00001137 _____ () C:\Users\Public\Desktop\Audiograbber.lnk
2014-02-07 15:04 - 2014-02-07 15:04 - 00504616 _____ () C:\Users\Martin\Downloads\ag_setup183se.exe
2014-02-06 12:21 - 2014-02-05 16:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-06 11:47 - 2012-04-06 18:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 11:47 - 2012-04-06 18:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 11:47 - 2011-05-25 20:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 11:46 - 2014-02-06 11:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-05 12:21 - 2014-02-05 12:21 - 00000841 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-05 12:20 - 2014-02-05 12:20 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-05 12:19 - 2014-02-05 12:18 - 25035644 _____ () C:\Users\Martin\Downloads\vlc-2.1.3-win64.exe
2014-02-05 12:16 - 2011-12-21 18:42 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-05 12:14 - 2013-12-15 11:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 18:43 - 2013-12-20 12:01 - 00000600 _____ () C:\Users\Martin\AppData\Roaming\winscp.rnd
2014-02-03 18:12 - 2013-12-20 19:54 - 00000600 _____ () C:\Users\Martin\AppData\Local\PUTTY.RND
2014-02-01 14:20 - 2014-02-01 14:20 - 01021432 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\NDP451-KB2859818-Web.exe
2014-02-01 11:07 - 2014-02-01 11:03 - 58709735 _____ () C:\Users\Martin\Downloads\BDS473_V170.zip
2014-01-29 14:16 - 2011-12-18 14:56 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\MyPhoneExplorer
2014-01-29 13:58 - 2009-12-16 21:29 - 00000000 ____D () C:\Windows\Minidump
2014-01-29 13:58 - 2009-12-05 17:43 - 00288681 ____N () C:\Windows\Minidump\012914-19437-01.dmp
2014-01-23 19:07 - 2009-12-10 21:11 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe
2014-01-20 19:59 - 2013-07-04 17:25 - 00000000 ____D () C:\Program Files (x86)\Ember_1.3.0.13
2014-01-16 22:04 - 2013-08-28 19:19 - 00001035 _____ () C:\Users\Martin\Desktop\Dropbox.lnk
2014-01-16 22:04 - 2013-08-28 19:17 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 22:04 - 2009-12-05 17:51 - 00000000 ___RD () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 22:00 - 2009-07-14 05:45 - 00304896 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 20:30 - 2009-12-05 20:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-16 20:29 - 2013-08-15 18:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 20:28 - 2009-12-05 21:17 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Christine\AppData\Local\Temp\AskSLib.dll
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Martin\AppData\Local\Temp\vlc-2.1.1-win64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 20:43

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-02-2014
Ran by Martin at 2014-02-08 20:53:46
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)
@BIOS Ver.2.06 (x32 Version: 2.06 - GIGABYTE)
3DMark06 (x32 Version: 1.1.1 - Futuremark Corporation)
Acronis True Image WD Edition (x32 Version: 13.0.14010 - Acronis)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
AMD Fuel (Version: 2010.1125.2148.39102 - Ihr Firmenname) Hidden
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.51125 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (Version: 3.0.804.0 - ATI Technologies, Inc.)
ATI Catalyst Registration (x32 Version: 3.00.0000 - ATI Technologies Inc.) Hidden
ATI Problem Report Wizard (Version: 3.0.804.0 - ATI Technologies) Hidden
Audiograbber 1.83 SE  (x32 Version: 1.83 SE  - Audiograbber)
Audiograbber MP3-Plugin (x32 Version: 1.0 - AG)
avast! Free Antivirus (x32 Version: 8.0.1497.0 - AVAST Software)
Avidemux 2.5 (32-bit) (x32 Version: 2.5.4.7200 - )
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Browser Configuration Utility (x32 Version: 1.1.7.0 - DeviceVM)
Canon MP Navigator EX 2.0 (x32 Version:  - )
Canon Utilities Digital Photo Professional 3.10 (x32 Version: 3.10.2.0 - Canon Inc.)
Canon Utilities Solution Menu (x32 Version:  - )
CanoScan LiDE 200 Scanner Driver (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.1125.2148.39102 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.1125.2148.39102 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.1125.2148.39102 - ATI) Hidden
Catalyst Control Center Profiles Desktop (x32 Version: 2010.1125.2148.39102 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help English (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help French (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help German (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.1125.2147.39102 - ATI) Hidden
ccc-core-static (x32 Version: 2010.1125.2148.39102 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.1125.2148.39102 - ATI) Hidden
CCleaner (Version: 3.26 - Piriform)
CloneMe (x32 Version: 1.01.0000 - Ihr Firmenname)
Content Manager 2 (x32 Version: 2.2.1.9986 - Harman Becker Automotive Systems)
ContentSAFER for Wizmax (x32 Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.22 (x32 Version:  - Western Digital Corporation)
devolo dLAN Cockpit (x32 Version: 4.1.2.0 - devolo AG)
devolo dLAN-Konfigurationsassistent (x32 Version: 20.0.0.0 - devolo AG)
devolo Informer (x32 Version: 28.0.0.0 - devolo AG)
Digital microscope (x32 Version: 2009.03.18 - Vimicro Corp.)
DriveImage XML (Private Edition) (x32 Version: 2.20 - Runtime Software)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Easy Tune 6 B12.0919.2 (x32 Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0919.2 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EasySaver B9.0610.1  (x32 Version: 1.00.0000 - Gigabyte)
Elevated Installer (x32 Version: 2.1.12 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular-Upgrade (x32 Version: 14.3.11574 - Landesfinanzdirektion Thüringen)
EmoDio (x32 Version: 1.0 - SAMSUNG)
EmoDio (x32 Version: 1.0 - SAMSUNG) Hidden
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
flirc (x32 Version:  - )
Garmin Express (x32 Version: 2.1.12 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.1.12 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.1.12 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.1.12 - Garmin Ltd or its subsidiaries) Hidden
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GPL Ghostscript 9.00 (x32 Version:  - )
ImgBurn (x32 Version: 2.5.2.0 - LIGHTNING UK!)
InlineTranslate für Firefox (x32 Version: 2.0 - InlineTranslate)
IrfanView (remove only) (x32 Version: 4.27 - Irfan Skiljan)
iTunes Sync 1.5.1 (x32 Version:  - Binary Fortress Software)
Japanese Fonts Support For Adobe Reader 9 (x32 Version: 9.0.0 - Adobe Systems Incorporated)
Java 7 Update 40 (x32 Version: 7.0.400 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Joe (x32 Version: 4.00.0050 - Wirth IT Design)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KODAK Create@Home Software (für dm) (x32 Version: 7.3.4392 - Digilabs)
LinuxLive USB Creator (x32 Version: 2.8 - Thibaut Lauziere)
Logitech Gaming Software 5.04 (Version: 5.04.110 - Logitech)
Logitech High Quality Video (x32 Version: 12.10.1113 - Logitech, Inc.) Hidden
Logitech SetPoint 6.52 (Version: 6.52.74 - Logitech)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110 - Logitech Inc.)
MakeMKV v1.8.3 (x32 Version: v1.8.3 - GuinpinSoft inc)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaMonkey 4.0 (x32 Version: 4.0 - Ventis Media Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Flight Simulator X (x32 Version: 10.0.61355.0 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X Service Pack 1 (x32 Version: 10.0.61355.0 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X Service Pack 2 (x32 Version: 10.0.61472.0 - Microsoft Game Studios)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MobileMe Control Panel (Version: 3.0.0.101 - Apple Inc.)
Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.3.0 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla)
Mp3tag v2.47b (x32 Version: v2.47b - Florian Heidenreich)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
MyPhoneExplorer (x32 Version: 1.8.4 - F.J. Wechselberger)
Naviextras Toolbox Prerequesities (x32 Version: 1.0.0 - Nav N Go Ltd.)
Paragon Migrate OS to SSD™ (x32 Version: 90.00.0003 - Paragon Software)
PDFCreator (x32 Version: 1.3.1 - Frank Heindörfer, Philip Chinery)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Ralink RT2870 Wireless LAN Card (x32 Version: 1.5.19.0 - Ralink)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5864 - Realtek Semiconductor Corp.)
SAMSUNG USB Driver for Mobile Phones (Version: 1.4.8.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (x32 Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
SpeedFan (remove only) (x32 Version:  - )
The Lord of the Rings FREE Trial  (x32 Version: 1.00.0000 - ATI Technologies Inc.) Hidden
TightVNC 2.0.2 (x32 Version: 2.0.2 - GlavSoft LLC.)
Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)
Update Manager B08.1027.1 (x32 Version: 1.00.0000 - GIGABYTE)
Update Manager B08.1027.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
veberGreat (Version: 2014.02.05.153917 - veberGreat)
VLC media player 2.1.3 (Version: 2.1.3 - VideoLAN)
VNC Viewer 5.0.6 (Version: 5.0.6 - RealVNC Ltd)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR (Version:  - )
WinSCP 5.5 (x32 Version: 5.5 - Martin Prikryl)
Wise Registry Cleaner 6.14 (x32 Version:  - WiseCleaner.com, Inc.)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
XBMC (HKCU Version:  - Team XBMC)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-08-17 12:32 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1      localhost
::1            localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1378E161-705E-4075-949E-6F9103032CAF} - System32\Tasks\PC Rambazamba => C:\Program Files (x86)\Langmeier Software\PC Rambazamba\pcrambazamba.exe
Task: {41405F3F-CE8C-45E3-B43E-87FDBDD8D6AC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {49287B7E-0AAD-466F-A2A0-D9605960A6C1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-23] (Google Inc.)
Task: {5B346A65-F25A-4D20-9D88-6889718196C2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5BFF4329-0F66-4351-9221-FD7F06364636} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software)
Task: {77E16552-F4E2-4141-AC3E-527EAE5F3F95} - System32\Tasks\Server wecken => C:\Users\Martin\Desktop\wlo.bat [2014-02-08] ()
Task: {8923653A-665E-4CBE-A26E-9F3CBF1936DA} - System32\Tasks\{99DA4BDC-02B1-440D-B0FB-5C1E85A9F493} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {8AB5B966-B207-464D-989B-6A9DF011DE67} - \Scheduled Update for Ask Toolbar No Task File
Task: {9D5C624A-9B15-4E0D-A209-04C2340AF224} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-23] (Google Inc.)
Task: {A49E5B96-7B72-4E32-8DB5-5164828A7C2E} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {A6C8C1CE-6960-4ADC-89AF-FFD063FC5B65} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {B55D6246-4996-4D8E-8FC9-E8A49C431B9F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {E296D535-9183-4489-BBA0-0194E10FB532} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2009-12-13 16:54 - 2009-08-16 17:06 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2010-11-25 21:46 - 2010-11-25 21:46 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-08 17:16 - 2014-02-08 10:55 - 02264064 _____ () C:\Program Files\AVAST Software\Avast\defs\14020800\algo.dll
2009-12-05 18:53 - 2009-03-13 11:30 - 00109096 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\YCC.DLL
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Martin\AppData\Roaming\Dropbox\bin\libcef.dll
2010-06-07 17:05 - 2010-06-07 17:05 - 00028512 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\rpc_client.dll
2014-02-06 11:46 - 2014-02-06 11:46 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD
AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0WHNGT9LSVEVF1VTVVTVXVVD

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2014 07:08:59 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/08/2014 07:08:57 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/08/2014 07:08:56 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/08/2014 07:08:50 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/08/2014 07:08:47 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2010-08-04 21:52:59.032
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:59.023
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:58.710
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:58.704
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:28.653
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:28.633
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:28.371
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:52:28.362
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RMClock\RTCore64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:04:10.569
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2010-08-04 21:04:10.554
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 8188.16 MB
Available physical RAM: 6014.77 MB
Total Pagefile: 16374.49 MB
Available Pagefile: 13997.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (SystemWin7) (Fixed) (Total:111.79 GB) (Free:19.64 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Datenablage) (Fixed) (Total:1697 GB) (Free:1387.08 GB) NTFS
Drive e: (System_XP) (Fixed) (Total:78.12 GB) (Free:52.64 GB) NTFS
Drive f: (Volume_XP) (Fixed) (Total:87.89 GB) (Free:41.37 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: F2656A30)
Partition 1: (Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 11A1F1A1)
Partition 1: (Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=88 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=-376885477376) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber 09.02.2014 16:49
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

blanik1042 11.02.2014 18:11
hi,

Code:
ComboFix 14-02-11.01 - Martin 11.02.2014  17:58:22.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8188.6897 [GMT 1:00]
ausgeführt von:: c:\users\Martin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Martin\4.0
c:\windows\security\Database\tmp.edb
c:\windows\SysWow64\System32\MASetupCleaner.exe
c:\windows\SysWow64\System32\muzapp.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-01-11 bis 2014-02-11  ))))))))))))))))))))))))))))))
.
.
2014-02-11 17:02 . 2014-02-11 17:02        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-02-11 17:02 . 2014-02-11 17:02        --------        d-----w-        c:\users\Christine\AppData\Local\temp
2014-02-08 19:53 . 2014-02-08 19:53        --------        d-----w-        C:\FRST
2014-02-08 17:48 . 2014-02-08 17:49        --------        d-----w-        C:\AdwCleaner
2014-02-08 17:36 . 2014-02-08 17:36        --------        d-----w-        c:\users\Martin\AppData\Roaming\Malwarebytes
2014-02-08 17:35 . 2014-02-08 17:35        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2014-02-08 17:35 . 2014-02-08 17:35        --------        d-----w-        c:\programdata\Malwarebytes
2014-02-08 17:35 . 2013-04-04 13:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2014-02-07 14:08 . 2014-02-07 14:19        --------        d-----w-        c:\program files (x86)\Audiograbber
2014-02-05 15:09 . 2014-02-06 11:21        --------        d-----w-        c:\program files (x86)\Mozilla Thunderbird
2014-02-05 11:20 . 2014-02-05 11:20        --------        d-----w-        c:\program files\VideoLAN
2014-01-16 17:47 . 2013-11-27 01:41        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys
2014-01-16 17:47 . 2013-11-27 01:41        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys
2014-01-16 17:47 . 2013-11-27 01:41        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys
2014-01-16 17:47 . 2013-11-27 01:41        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys
2014-01-16 17:47 . 2013-11-27 01:41        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys
2014-01-16 17:47 . 2013-11-27 01:41        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys
2014-01-16 17:47 . 2013-11-27 01:41        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys
2014-01-16 17:47 . 2013-11-26 10:32        3156480        ----a-w-        c:\windows\system32\win32k.sys
2014-01-16 17:47 . 2013-11-26 11:40        376768        ----a-w-        c:\windows\system32\drivers\netio.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-08 19:49 . 2010-01-02 15:17        25640        ----a-w-        c:\windows\gdrv.sys
2014-02-06 10:47 . 2012-04-06 17:08        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-06 10:47 . 2011-05-25 19:16        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-16 19:28 . 2009-12-05 20:17        86054176        ----a-w-        c:\windows\system32\MRT.exe
2013-12-16 19:00 . 2013-12-16 19:00        5632        ----a-w-        c:\windows\system32\mc-wol.exe
2013-11-26 12:07 . 2013-11-26 12:07        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-26 12:07 . 2013-11-26 12:07        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2013-11-26 12:07 . 2013-11-26 12:07        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2013-11-26 12:07 . 2013-11-26 12:07        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-11-26 12:07 . 2013-11-26 12:07        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-11-26 12:07 . 2013-11-26 12:07        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-11-26 12:07 . 2013-11-26 12:07        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2013-11-26 12:07 . 2013-11-26 12:07        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-11-26 12:07 . 2013-11-26 12:07        81408        ----a-w-        c:\windows\system32\icardie.dll
2013-11-26 12:07 . 2013-11-26 12:07        774144        ----a-w-        c:\windows\system32\jscript.dll
2013-11-26 12:07 . 2013-11-26 12:07        77312        ----a-w-        c:\windows\system32\tdc.ocx
2013-11-26 12:07 . 2013-11-26 12:07        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-26 12:07 . 2013-11-26 12:07        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-26 12:07 . 2013-11-26 12:07        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2013-11-26 12:07 . 2013-11-26 12:07        626176        ----a-w-        c:\windows\system32\msfeeds.dll
2013-11-26 12:07 . 2013-11-26 12:07        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-11-26 12:07 . 2013-11-26 12:07        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2013-11-26 12:07 . 2013-11-26 12:07        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2013-11-26 12:07 . 2013-11-26 12:07        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-11-26 12:07 . 2013-11-26 12:07        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-11-26 12:07 . 2013-11-26 12:07        548352        ----a-w-        c:\windows\system32\vbscript.dll
2013-11-26 12:07 . 2013-11-26 12:07        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-11-26 12:07 . 2013-11-26 12:07        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll
2013-11-26 12:07 . 2013-11-26 12:07        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-11-26 12:07 . 2013-11-26 12:07        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-11-26 12:07 . 2013-11-26 12:07        48128        ----a-w-        c:\windows\system32\imgutil.dll
2013-11-26 12:07 . 2013-11-26 12:07        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll
2013-11-26 12:07 . 2013-11-26 12:07        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-11-26 12:07 . 2013-11-26 12:07        413696        ----a-w-        c:\windows\system32\html.iec
2013-11-26 12:07 . 2013-11-26 12:07        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 12:07 . 2013-11-26 12:07        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-11-26 12:07 . 2013-11-26 12:07        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-26 12:07 . 2013-11-26 12:07        337408        ----a-w-        c:\windows\SysWow64\html.iec
2013-11-26 12:07 . 2013-11-26 12:07        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2013-11-26 12:07 . 2013-11-26 12:07        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2013-11-26 12:07 . 2013-11-26 12:07        263376        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-11-26 12:07 . 2013-11-26 12:07        247808        ----a-w-        c:\windows\system32\msls31.dll
2013-11-26 12:07 . 2013-11-26 12:07        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-11-26 12:07 . 2013-11-26 12:07        243200        ----a-w-        c:\windows\system32\webcheck.dll
2013-11-26 12:07 . 2013-11-26 12:07        235520        ----a-w-        c:\windows\system32\url.dll
2013-11-26 12:07 . 2013-11-26 12:07        235008        ----a-w-        c:\windows\system32\elshyph.dll
2013-11-26 12:07 . 2013-11-26 12:07        195584        ----a-w-        c:\windows\system32\msrating.dll
2013-11-26 12:07 . 2013-11-26 12:07        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-11-26 12:07 . 2013-11-26 12:07        167424        ----a-w-        c:\windows\system32\iexpress.exe
2013-11-26 12:07 . 2013-11-26 12:07        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-11-26 12:07 . 2013-11-26 12:07        147968        ----a-w-        c:\windows\system32\occache.dll
2013-11-26 12:07 . 2013-11-26 12:07        143872        ----a-w-        c:\windows\system32\wextract.exe
2013-11-26 12:07 . 2013-11-26 12:07        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-11-26 12:07 . 2013-11-26 12:07        13824        ----a-w-        c:\windows\system32\mshta.exe
2013-11-26 12:07 . 2013-11-26 12:07        135680        ----a-w-        c:\windows\system32\iepeers.dll
2013-11-26 12:07 . 2013-11-26 12:07        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-11-26 12:07 . 2013-11-26 12:07        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-11-26 12:07 . 2013-11-26 12:07        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-11-26 12:07 . 2013-11-26 12:07        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-11-26 12:07 . 2013-11-26 12:07        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe
2013-11-26 12:07 . 2013-11-26 12:07        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-11-26 12:07 . 2013-11-26 12:07        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2013-11-26 12:07 . 2013-11-26 12:07        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2013-11-26 12:07 . 2013-11-26 12:07        101376        ----a-w-        c:\windows\system32\inseng.dll
2013-11-26 11:54 . 2013-12-13 02:00        23183360        ----a-w-        c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-13 02:01        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-13 02:00        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-13 02:00        66048        ----a-w-        c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-13 02:00        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-13 02:00        2764288        ----a-w-        c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-13 02:00        53760        ----a-w-        c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-13 02:00        33792        ----a-w-        c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-13 02:01        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-13 02:00        574976        ----a-w-        c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-13 02:00        139264        ----a-w-        c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-13 02:00        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-13 02:00        708608        ----a-w-        c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-13 02:00        218624        ----a-w-        c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-13 02:00        5769216        ----a-w-        c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-13 02:00        553472        ----a-w-        c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-13 02:00        4243968        ----a-w-        c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-13 02:00        1995264        ----a-w-        c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-13 02:00        12996608        ----a-w-        c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-13 02:00        1928192        ----a-w-        c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-13 02:00        2334208        ----a-w-        c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-13 02:00        1395200        ----a-w-        c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-13 02:00        817664        ----a-w-        c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-13 02:00        1820160        ----a-w-        c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-12 07:37        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 07:37        465920        ----a-w-        c:\windows\system32\WMPhoto.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        131248        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        131248        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        131248        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 221184]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2013-03-20 1100120]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-16 81920]
"VMonitorVMUVC"="c:\program files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe" [2008-03-26 135168]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-03-16 47392]
"SMSTray"="c:\program files (x86)\Samsung\EmoDio\SMSTray.exe" [2009-04-16 479232]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2010-06-07 2605424]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Martin\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ALSysIO;ALSysIO;c:\users\Martin\AppData\Local\Temp\ALSysIO64.sys;c:\users\Martin\AppData\Local\Temp\ALSysIO64.sys [x]
R3 androidusb;ADB Interface Driver;c:\windows\system32\Drivers\androidusb.sys;c:\windows\SYSNATIVE\Drivers\androidusb.sys [x]
R3 cpuz130;cpuz130;c:\users\Martin\AppData\Local\Temp\cpuz130\cpuz_x64.sys;c:\users\Martin\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 ENTECH64;ENTECH64;c:\windows\system32\DRIVERS\ENTECH64.sys;c:\windows\SYSNATIVE\DRIVERS\ENTECH64.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
R3 qcusbser;Garmin-Asus USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\qcusbser.sys;c:\windows\SYSNATIVE\DRIVERS\qcusbser.sys [x]
R3 RTCore64;RTCore64;c:\program files (x86)\RMClock\RTCore64.sys;c:\program files (x86)\RMClock\RTCore64.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\Drivers\VMUVC.sys;c:\windows\SYSNATIVE\Drivers\VMUVC.sys [x]
R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys;c:\windows\SYSNATIVE\drivers\vvftUVC.sys [x]
R3 WiselinkPro;SAMSUNG WiseLinkPro Service;c:\program files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe;c:\program files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe [x]
R4 MeDM;MeDM;c:\windows\SysWOW64\MeDM.exe;c:\windows\SysWOW64\MeDM.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DevoloNetworkService;devolo Network Service;c:\program files (x86)\devolo\dlan\devolonetsvc.exe;c:\program files (x86)\devolo\dlan\devolonetsvc.exe [x]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys;c:\windows\sysWOW64\drivers\npf_devolo.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 CH341SER_A64;CH341SER_A64;c:\windows\system32\Drivers\CH341S64.SYS;c:\windows\SYSNATIVE\Drivers\CH341S64.SYS [x]
S3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 10:47]
.
2014-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-23 09:47]
.
2014-02-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-23 09:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-08-30 07:47        133840        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        164016        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        164016        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        164016        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09        164016        ----a-w-        c:\users\Martin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-06-02 7834656]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-06-02 1833504]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2009-01-21 123400]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-03 767312]
"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2010-06-07 362488]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2013-02-21 2991856]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{2710DD63-A308-4538-849F-F6A703ED099F}: NameServer = 192.168.212.1
TCP: Interfaces\{B497B378-FC93-4F39-BD89-6328E8F9CD09}: NameServer = 192.168.132.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\qugw5k85.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-KiesHelper - c:\program files (x86)\Samsung\Kies\KiesHelper.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-{6c14a7ec-7ed6-47f1-bb64-afc001a60a24} - c:\programdata\Package Cache\{6c14a7ec-7ed6-47f1-bb64-afc001a60a24}\GarminExpressInstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,c3,25,fd,b6,33,5e,8a,4d,a1,1d,1b,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
  d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,c3,25,fd,b6,33,5e,8a,4d,a1,1d,1b,\
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* #*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* $*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* '*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* (*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* **]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* +*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* 1*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* 6*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* 9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* <*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0* /*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\0*¬ )*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* '*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* ,*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* .*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* =*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@*  *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* !*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* $*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* %*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* &*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* (*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* **]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* ,*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* -*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* .*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* /*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 0*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 7*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 8*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* 9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* :*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* <*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\@* =*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\P* 7*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\P* .*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\P*0 ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\`*  *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\`* **]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\`* 5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\`* =*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\* 3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\*"!/*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\**  "*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\°*! ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À*  *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À* %*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À* &*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À* +*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\à* .*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À* 5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\À* <*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\ð* *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\Ð*! '*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\Ð*! ,*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ *+*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ *)*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ %**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ %*'*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ B*9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ E*+*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ F* *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ f*<*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ l***]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ n*0*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ n*5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ y*8*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*!*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*#*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*)*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*.*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*/*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ _*6*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¥*"*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¥*&*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¥*'*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¥*1*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¥*5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*#*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*%*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*/*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*7*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*8*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¦*9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ¹*2*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ½*&*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ç*8*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ è*$*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ë*"*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ì*(*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ì***]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ð*7*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ó*(*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ó*3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ô* *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ô*$*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ô*%*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ô*,*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ õ***]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ õ*4*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ û**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ û**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ý**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ý**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Ý*9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Þ*%*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Þ*&*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ Þ*'*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ß*)*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ß*-*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ß*3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ß*4*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ a#*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ÿ**]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬ ÿ*6*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬   *]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  !*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  "*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  #*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  $*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  %*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  '*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  (*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  )*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  **]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  +*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  ,*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  -*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  .*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  /*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  0*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  1*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  2*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  3*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  4*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  5*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  6*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  7*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  8*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  9*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  :*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  ;*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  <*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  =*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  >*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-4200788517-4185943826-4247421852-1000\¬  :*]
@Allowed: (Read) (RestrictedCode)
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-11  18:04:49
ComboFix-quarantined-files.txt  2014-02-11 17:04
.
Vor Suchlauf: 13 Verzeichnis(se), 20.818.358.272 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 21.231.304.704 Bytes frei
.
- - End Of File - - 43A30A030A5D24CE3B3C30FBC1F9C89E
A36C5E4F47E84449FF07ED3517B43A31
gruß
blanik1042

schrauber 12.02.2014 17:44
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:06 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131