Trojaner-Board - searchnu.com/410 entfernen

Hallo Leo,

vielen Dank für deine Hilfe. Hier also die Logs:

Der von AwdCleaner:

Code:

# AdwCleaner v2.104 - Datei am 05/01/2013 um 18:52:53 erstellt

# Aktualisiert am 29/12/2012 von Xplode

# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)

# Benutzer : Elisabeth - ELISABETH-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Elisabeth\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml

Datei Gelöscht : C:\Users\ELISAB~1\AppData\Local\Temp\Searchqu.ini

Datei Gelöscht : C:\Users\ELISAB~1\AppData\Local\Temp\searchqutoolbar-manifest.xml

Datei Gelöscht : C:\Users\ELISAB~1\AppData\Local\Temp\SetupDataMngr_Searchqu.exe

Gelöscht mit Neustart : C:\ProgramData\boost_interprocess

Gelöscht mit Neustart : C:\Users\Elisabeth\AppData\Local\TempDir
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

Schlüssel Gelöscht : HKLM\SOFTWARE\DataMngr

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}

Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]

Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16457
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchnu.com/410 --> hxxp://www.google.com
 

-\\ Mozilla Firefox v17.0.1 (de)
 

Datei : C:\Users\Elisabeth\AppData\Roaming\Mozilla\Firefox\Profiles\g6axas5h.default\prefs.js
 

Gelöscht : user_pref("browser.search.defaultenginename", "Search Results");

Gelöscht : user_pref("browser.search.order.1", "Search Results");
 

*************************
 

AdwCleaner[S1].txt - [2503 octets] - [05/01/2013 18:52:53]
 

########## EOF - C:\AdwCleaner[S1].txt - [2563 octets] ##########

Und hier die Logs von DDS:
dds.txt:
DDS Logfile:
DDS Logfile:

Code:

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 9.0.8112.16457  BrowserJavaVersion: 10.9.2

Run by Elisabeth at 19:01:59 on 2013-01-05

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4090.2586 [GMT 1:00]

.

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\system32\WLANExt.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Windows\SysWOW64\nalserv.exe

C:\Windows\SysWOW64\nlssrv32.exe

C:\Windows\system32\DRIVERS\o2flash.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Intel\WiFi\bin\EvtEng.exe

C:\Windows\SysWOW64\conime.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Windows\RAVCpl64.exe

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files (x86)\Ralink\Common\RaUI.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

\\?\C:\Windows\system32\wbem\WMIADAP.EXE

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com

mWinlogon: Userinit = userinit.exe

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

uRun: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe

mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\RALINK~1.LNK - C:\Program Files (x86)\Ralink\Common\RaUI.exe

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: An OneNote s&enden - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

TCP: NameServer = 192.168.1.1 193.189.244.194 193.189.244.202

TCP: Interfaces\{5C8B2B05-3C7A-4DA4-82C7-BB191342502F} : DHCPNameServer = 192.168.1.1 193.189.244.194 193.189.244.202

TCP: Interfaces\{B54DD503-96F9-4BCA-9A0B-2927C0505765} : DHCPNameServer = 192.168.1.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

AppInit_DLLs=    

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg

x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe -hide

x64-Run: [RtHDVCpl] RAVCpl64.exe

x64-Run: [Skytel] Skytel.exe

x64-mPolicies-Explorer: NoActiveDesktop = dword:1

x64-mPolicies-Explorer: NoActiveDesktopChanges = dword:1

x64-mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0

x64-mPolicies-System: EnableUIADesktopToggle = dword:0

x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Elisabeth\AppData\Roaming\Mozilla\Firefox\Profiles\g6axas5h.default\

FF - prefs.js: browser.search.selectedEngine - YouTube-Videosuche

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: keyword.URL - hxxp://www.google.de

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll

FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

FF - ExtSQL: 2012-11-28 15:14; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; C:\Users\Elisabeth\AppData\Roaming\Mozilla\Firefox\Profiles\g6axas5h.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF - ExtSQL: 2012-11-28 15:42; wrc@avast.com; C:\Program Files\AVAST Software\Avast\WebRep\FF

FF - ExtSQL: 2012-11-28 22:31; {20a82645-c095-46ed-80e3-08825760534b}; C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF - ExtSQL: 2013-01-04 18:17; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2012-11-28 984144]

R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2012-11-28 370288]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-7-4 238080]

R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2012-11-28 25232]

R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2012-11-28 71600]

R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-11-28 44808]

R2 FontCache;Windows-Dienst für Schriftartencache;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 27648]

R2 NalServ;Nalpeiron Control Service;C:\Windows\SysWOW64\nalserv.exe [2012-8-17 135168]

R2 nlsX86cc;Nalpeiron Licensing Service;C:\Windows\SysWOW64\nlssrv32.exe [2012-8-17 66560]

R2 RalinkRegistryWriter64;RalinkRegistryWriter64;C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe [2012-11-28 447488]

R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-2 3064000]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdLH6.sys [2012-2-23 92176]

R3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\Windows\System32\drivers\netr28x.sys [2012-11-28 1860672]

R3 O2MDRDR;O2MDRDR;C:\Windows\System32\drivers\o2mdx64.sys [2012-11-28 62424]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-7-8 123856]

S2 RaMediaServer;Ralink UPnP Media Server;C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [2012-11-28 1863680]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944]

S3 PerfHost;Leistungsindikator-DLL-Host;C:\Windows\SysWOW64\perfhost.exe [2008-1-21 19968]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2012-7-8 1012184]

S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2012-11-29 89920]

.

=============== File Associations ===============

.

FileExt: .js: JSFile=C:\Windows\SysWOW64\WScript.exe "%1" %*

FileExt: .jse: JSEFile=C:\Windows\SysWOW64\WScript.exe "%1" %*

.

=============== Created Last 30 ================

.

.

==================== Find3M  ====================

.

2012-12-16 13:31:20        48128        ----a-w-        C:\Windows\System32\atmlib.dll

2012-12-16 13:12:54        34304        ----a-w-        C:\Windows\SysWow64\atmlib.dll

2012-12-16 11:08:21        368128        ----a-w-        C:\Windows\System32\atmfd.dll

2012-12-16 10:50:29        293376        ----a-w-        C:\Windows\SysWow64\atmfd.dll

2012-12-14 15:49:28        24176        ----a-w-        C:\Windows\System32\drivers\mbam.sys

2012-12-12 17:32:46        67413224        ----a-w-        C:\Windows\System32\mrt.exe

2012-12-12 17:25:27        73656        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-12-12 17:25:27        697272        ----a-w-        C:\Windows\SysWow64\FlashPlayerApp.exe

2012-11-30 16:49:59        76800        ----a-w-        C:\Windows\System32\tdc.ocx

2012-11-30 16:46:38        979456        ----a-w-        C:\Windows\SysWow64\MFH264Dec.dll

2012-11-30 16:43:15        519680        ----a-w-        C:\Windows\SysWow64\d3d11.dll

2012-11-28 15:29:15        95208        ----a-w-        C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2012-11-28 15:29:09        246760        ----a-w-        C:\Windows\SysWow64\javaws.exe

2012-11-28 15:29:08        174056        ----a-w-        C:\Windows\SysWow64\javaw.exe

2012-11-28 15:29:08        174056        ----a-w-        C:\Windows\SysWow64\java.exe

2012-11-28 15:29:06        821736        ----a-w-        C:\Windows\SysWow64\npDeployJava1.dll

2012-11-28 15:29:06        746984        ----a-w-        C:\Windows\SysWow64\deployJava1.dll

2012-11-28 15:10:26        108008        ----a-w-        C:\Windows\System32\WindowsAccessBridge-64.dll

2012-11-28 15:10:17        289768        ----a-w-        C:\Windows\System32\javaws.exe

2012-11-28 15:10:17        189416        ----a-w-        C:\Windows\System32\javaw.exe

2012-11-28 15:10:16        188904        ----a-w-        C:\Windows\System32\java.exe

2012-11-28 15:10:15        916456        ----a-w-        C:\Windows\System32\deployJava1.dll

2012-11-28 15:10:15        1034216        ----a-w-        C:\Windows\System32\npDeployJava1.dll

2012-11-28 14:26:45        0        ----a-w-        C:\Windows\ativpsrm.bin

2012-11-14 07:06:18        17811968        ----a-w-        C:\Windows\System32\mshtml.dll

2012-11-14 06:32:33        10925568        ----a-w-        C:\Windows\System32\ieframe.dll

2012-11-14 06:11:44        2312704        ----a-w-        C:\Windows\System32\jscript9.dll

2012-11-14 06:04:44        1346048        ----a-w-        C:\Windows\System32\urlmon.dll

2012-11-14 06:04:11        1392128        ----a-w-        C:\Windows\System32\wininet.dll

2012-11-14 06:02:49        1494528        ----a-w-        C:\Windows\System32\inetcpl.cpl

2012-11-14 06:02:04        237056        ----a-w-        C:\Windows\System32\url.dll

2012-11-14 05:59:52        85504        ----a-w-        C:\Windows\System32\jsproxy.dll

2012-11-14 05:58:36        816640        ----a-w-        C:\Windows\System32\jscript.dll

2012-11-14 05:57:46        599040        ----a-w-        C:\Windows\System32\vbscript.dll

2012-11-14 05:57:35        173056        ----a-w-        C:\Windows\System32\ieUnatt.exe

2012-11-14 05:55:45        2144768        ----a-w-        C:\Windows\System32\iertutil.dll

2012-11-14 05:55:26        729088        ----a-w-        C:\Windows\System32\msfeeds.dll

2012-11-14 05:53:22        96768        ----a-w-        C:\Windows\System32\mshtmled.dll

2012-11-14 05:52:40        2382848        ----a-w-        C:\Windows\System32\mshtml.tlb

2012-11-14 05:46:25        248320        ----a-w-        C:\Windows\System32\ieui.dll

2012-11-14 02:48:26        12320256        ----a-w-        C:\Windows\SysWow64\mshtml.dll

2012-11-14 02:14:59        9738240        ----a-w-        C:\Windows\SysWow64\ieframe.dll

2012-11-14 02:09:22        1800704        ----a-w-        C:\Windows\SysWow64\jscript9.dll

2012-11-14 01:58:15        1427968        ----a-w-        C:\Windows\SysWow64\inetcpl.cpl

2012-11-14 01:57:44        1103872        ----a-w-        C:\Windows\SysWow64\urlmon.dll

2012-11-14 01:57:37        1129472        ----a-w-        C:\Windows\SysWow64\wininet.dll

2012-11-14 01:55:46        231936        ----a-w-        C:\Windows\SysWow64\url.dll

2012-11-14 01:51:44        65024        ----a-w-        C:\Windows\SysWow64\jsproxy.dll

2012-11-14 01:49:25        142848        ----a-w-        C:\Windows\SysWow64\ieUnatt.exe

2012-11-14 01:49:19        717824        ----a-w-        C:\Windows\SysWow64\jscript.dll

2012-11-14 01:48:27        420864        ----a-w-        C:\Windows\SysWow64\vbscript.dll

2012-11-14 01:47:20        607744        ----a-w-        C:\Windows\SysWow64\msfeeds.dll

2012-11-14 01:46:38        1793024        ----a-w-        C:\Windows\SysWow64\iertutil.dll

2012-11-14 01:45:01        73216        ----a-w-        C:\Windows\SysWow64\mshtmled.dll

2012-11-14 01:44:42        2382848        ----a-w-        C:\Windows\SysWow64\mshtml.tlb

2012-11-14 01:41:30        176640        ----a-w-        C:\Windows\SysWow64\ieui.dll

2012-11-13 01:55:22        2770432        ----a-w-        C:\Windows\System32\win32k.sys

2012-11-13 01:45:48        2048        ----a-w-        C:\Windows\System32\tzres.dll

2012-11-13 01:29:51        2048        ----a-w-        C:\Windows\SysWow64\tzres.dll

2012-11-02 10:45:52        477696        ----a-w-        C:\Windows\System32\dpnet.dll

2012-11-02 10:45:51        68096        ----a-w-        C:\Windows\System32\dpnathlp.dll

2012-11-02 10:18:17        376320        ----a-w-        C:\Windows\SysWow64\dpnet.dll

2012-11-02 08:59:56        26112        ----a-w-        C:\Windows\System32\dpnsvr.exe

2012-11-02 08:26:06        23040        ----a-w-        C:\Windows\SysWow64\dpnsvr.exe

2012-10-30 22:51:56        59728        ----a-w-        C:\Windows\System32\drivers\aswTdi.sys

2012-10-30 22:51:55        984144        ----a-w-        C:\Windows\System32\drivers\aswSnx.sys

2012-10-30 22:51:55        71600        ----a-w-        C:\Windows\System32\drivers\aswMonFlt.sys

2012-10-30 22:51:55        44272        ----a-w-        C:\Windows\System32\drivers\aswRdr.sys

2012-10-30 22:51:55        370288        ----a-w-        C:\Windows\System32\drivers\aswSP.sys

2012-10-30 22:51:53        25232        ----a-w-        C:\Windows\System32\drivers\aswFsBlk.sys

2012-10-30 22:51:07        41224        ----a-w-        C:\Windows\avastSS.scr

2012-10-30 22:50:59        227648        ----a-w-        C:\Windows\SysWow64\aswBoot.exe

2012-10-30 22:50:30        285328        ----a-w-        C:\Windows\System32\aswBoot.exe

.

============= FINISH: 19:02:51,16 ===============

--- --- ---

--- --- ---

und attach.txt:

Code:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft® Windows Vista™ Home Premium 

Boot Device: \Device\HarddiskVolume2

Install Date: 28.11.2012 14:49:27

System Uptime: 05.01.2013 18:54:27 (1 hours ago)

.

Motherboard: Packard Bell BV |  | PB5M

Processor: Intel(R) Pentium(R) Dual  CPU  T3400  @ 2.16GHz | Micro-FCPGA | 1000/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 85 GiB total, 34,949 GiB free.

D: is FIXED (NTFS) - 200 GiB total, 179,484 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

.

==== Installed Programs ======================

.

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.4) - Deutsch

AMD APP SDK Runtime

AMD Catalyst Install Manager

avast! Free Antivirus

Catalyst Control Center

Catalyst Control Center - Branding

Catalyst Control Center Graphics Previews Common

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

Cisco EAP-FAST Module

Cisco LEAP Module

Cisco PEAP Module

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Intel PROSet Wireless

Intel(R) PROSet/Wireless WiFi-Software

Java 7 Update 9

Java 7 Update 9 (64-bit)

Java Auto Updater

Java(TM) 6 Update 24

Malwarebytes Anti-Malware Version 1.70.0.1100

Microsoft .NET Framework 3.5 Language Pack SP1 - deu

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile DEU Language Pack

Microsoft .NET Framework 4.5

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (German) 2007

Microsoft Office Excel MUI (German) 2007

Microsoft Office Groove MUI (German) 2007

Microsoft Office InfoPath MUI (German) 2007

Microsoft Office Live Add-in 1.5

Microsoft Office Office 64-bit Components 2007

Microsoft Office OneNote MUI (German) 2007

Microsoft Office Outlook MUI (German) 2007

Microsoft Office PowerPoint MUI (German) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proof (Italian) 2007

Microsoft Office Proofing (German) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (German) 2007

Microsoft Office Shared 64-bit MUI (German) 2007

Microsoft Office Shared MUI (German) 2007

Microsoft Office Ultimate 2007

Microsoft Office Word MUI (German) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319

Microsoft WSE 2.0 SP3 Runtime

Mozilla Firefox 17.0.1 (x86 de)

Mozilla Maintenance Service

Mozilla Thunderbird 17.0 (x86 de)

Open XML SDK 2.0 for Microsoft Office

Ralink RT2860 Wireless LAN Card

Realtek High Definition Audio Driver

SDL Passolo Essential 2011 SP6

SDL Trados 2011 SP2R - Remove suite of products

SDL Trados Compatibility module

SDL Trados Studio 2011 SP2R

SecureW2 EAP Suite 1.1.3 for Windows

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 4.5 (KB2729460)

Security Update for Microsoft .NET Framework 4.5 (KB2737083)

Skype Click to Call

Skype™ 6.0

System Requirements Lab for Intel

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Outlook 2007 Help (KB963677)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760573) 32-Bit Edition

VLC media player 2.0.4

.

==== End Of File ===========================

Wie schon gesagt: Vielen Dank.
Grüße
kleinelisi