Trojaner-Board - Mini-Anwendung/Skype/Windows Updater funktioniert nicht

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Mini-Anwendung/Skype/Windows Updater funktioniert nicht (https://www.trojaner-board.de/138251-mini-anwendung-skype-windows-updater-funktioniert.html)

Mini-Anwendung/Skype/Windows Updater funktioniert nicht

Hallo liebes Trojaner-Team,
ich habe schon seit einiger Zeit Probleme mit meinem System, bin aber nie auf die Idee gekommen, dass es ein Virus sein könnte.
Probleme:
-Mini-Anwendungs-Menü lässt sich nicht öffnen
-Skype verbindet sich nicht
-"Windows Updater funktioniert nicht" erscheint jede halbe Stunde
Beim Start sieht man immer cmd.exe, schließt sich aber selber
Ein Antivir Update hat dazu geführt, dass ich in der Mitte des Bildschirm nichts mehr anklicken konnte, deshalb habe ich avast installiert und Antivir deinstalliert.
Ich habe OTL durchlaufen lassen, Gmer bricht ab (Screenshot)

Was kann ich tun?
Vielen Dank für eure Hilfe!
LaaLaa

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-07-2013

Ran by Larissa (administrator) on 15-07-2013 14:15:23

Running from C:\Users\Larissa\Downloads

Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe

(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Dropbox, Inc.) C:\Users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

() C:\Users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)

HKLM\...\Run: [GfxServiceInstall] - C:\Windows\system32\GfxServiceInstall.bat [51 2011-10-20] ()

HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)

HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)

HKLM\...\Run: [VirtualCloneDrive] - "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [10082920 2011-05-18] (Realtek Semiconductor)

HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

HKLM\...\Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1174016 2010-11-20] (Microsoft Corporation)

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)

HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)

Startup: C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=E4522016D8655E37

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=E4522016D8655E37

BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File

Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF Extension: hdvc - C:\Users\Larissa\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc@hdvc.com.xpi

FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt
 

Chrome: 

=======

CHR Extension: (From Dust) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj\0.0.0.23_0

CHR Extension: (Google Drive) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Cultures Online) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbdgmikfnklbopkafjgbcejoiipemkl\1.0.0.4_0

CHR Extension: (Dropbox) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.6_0

CHR Extension: (YouTube Unblocker) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0

CHR Extension: (Gmail) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR Extension: (Amazon\u2122 Extension) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmaebjjmgcnllolapfflmemacfaaanif\3.2013.5.31_0

CHR Extension: (RSS Feed Reader) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.0_0
 

========================== Services (Whitelisted) =================
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.)

R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)

R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)

R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-07-09] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-07-09] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-07-09] ()

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)

R3 imgkmd32; C:\Windows\System32\DRIVERS\imgkmd32.sys [415744 2011-10-20] (Imagination Technologies)

R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]

U3 awddraoc; \??\C:\Users\Larissa\AppData\Local\Temp\awddraoc.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-15 14:15 - 2013-07-15 14:15 - 00000000 ____D C:\FRST

2013-07-15 14:13 - 2013-07-15 14:14 - 01218214 _____ (Farbar) C:\Users\Larissa\Downloads\FRST.exe

2013-07-15 12:58 - 2013-07-15 12:58 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Amazon

2013-07-15 12:57 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\Documents\Amazon MP3

2013-07-15 12:56 - 2013-07-15 12:57 - 02328864 _____ C:\Users\Larissa\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe

2013-07-15 09:30 - 2013-07-15 09:30 - 00042972 _____ C:\Users\Larissa\Downloads\Extras.Txt

2013-07-15 09:20 - 2013-07-15 09:20 - 00076040 _____ C:\Users\Larissa\Downloads\OTL.Txt

2013-07-15 08:50 - 2013-07-15 08:50 - 00377856 _____ C:\Users\Larissa\Downloads\gmer_2.1.19163.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00050477 _____ C:\Users\Larissa\Downloads\Defogger.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00000450 _____ C:\Users\Larissa\Downloads\defogger_disable.log

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:49 - 2013-07-15 08:49 - 00602112 _____ (OldTimer Tools) C:\Users\Larissa\Downloads\OTL.exe

2013-07-15 08:01 - 2013-07-15 08:06 - 00000000 ____D C:\Windows\system32\MRT

2013-07-15 07:56 - 2013-07-15 07:56 - 00001413 _____ C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-07-14 12:41 - 2013-07-14 12:41 - 00002183 _____ C:\Users\Larissa\Desktop\Thesis.lnk

2013-07-11 01:12 - 2013-07-11 01:12 - 00237568 _____ (www.CompulsiveCode.com) C:\Users\Larissa\Downloads\JPEGtoPDF37.exe

2013-07-11 01:04 - 2013-07-11 01:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\PDF Architect

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Users\Larissa\Documents\PDF Architect Files

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Program Files\PDF Architect

2013-07-11 01:00 - 2013-07-11 01:00 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\pdfforge

2013-07-11 01:00 - 2013-04-09 15:13 - 00095416 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll

2013-07-11 01:00 - 2012-05-05 11:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCT2.OCX

2013-07-11 01:00 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\system32\MSMAPI32.OCX

2013-07-11 01:00 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\MSMPIDE.DLL

2013-07-11 01:00 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\system32\VB6DE.DLL

2013-07-11 01:00 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\MSCMCDE.DLL

2013-07-11 01:00 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\MSCC2DE.DLL

2013-07-11 00:59 - 2013-07-11 01:02 - 00000000 ____D C:\Program Files\PDFCreator

2013-07-11 00:57 - 2013-07-11 00:57 - 17502040 _____ (pdfforge GbR) C:\Users\Larissa\Downloads\PDFCreator-1_7_0_setup.exe

2013-07-10 19:45 - 2013-07-10 19:45 - 00656274 _____ C:\Users\Larissa\Downloads\SmartToolsOfficeDDE-Fix.zip

2013-07-10 08:04 - 2013-07-10 08:04 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis (1).ppt

2013-07-10 08:03 - 2013-07-10 08:03 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis.ppt

2013-07-10 08:03 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 08:03 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 08:03 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 08:03 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-10 07:57 - 2013-07-10 07:57 - 00004096 ____H C:\Users\Larissa\AppData\Local\keyfile3.drm

2013-07-09 23:11 - 2013-07-09 23:11 - 52111360 _____ C:\Users\Larissa\Downloads\calibre-0.9.38.msi

2013-07-09 23:10 - 2013-07-09 23:15 - 00000000 ____D C:\Users\Larissa\Documents\Calibre Bibliothek

2013-07-09 14:32 - 2013-07-09 14:32 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00175176 _____ C:\Windows\system32\Drivers\aswVmm.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum

2013-07-09 14:32 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys

2013-07-09 14:32 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-07-09 14:31 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr

2013-07-09 14:30 - 2013-07-09 14:30 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-09 14:26 - 2008-09-30 12:30 - 00204400 _____ C:\Users\Larissa\Documents\LARISSA 2008.QDF

2013-07-09 14:26 - 2008-09-30 12:30 - 00016463 _____ C:\Users\Larissa\Documents\LARISSA 2008.QSD

2013-07-09 14:23 - 2013-07-09 14:23 - 00000000 ____D C:\Users\Larissa\Documents\BTA

2013-07-09 14:21 - 2013-07-09 14:30 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-09 14:18 - 2013-07-09 14:20 - 117478104 _____ C:\Users\Larissa\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe

2013-07-09 13:09 - 2013-07-09 13:09 - 00000000 ____D C:\Users\Larissa\AppData\Local\MediaMonkey

2013-07-09 13:08 - 2013-07-09 22:32 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\ProgramData\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\Program Files\MediaMonkey

2013-07-05 20:18 - 2013-05-02 02:06 - 00238872 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2013-07-04 07:40 - 2013-07-04 07:41 - 88376276 _____ C:\Users\Larissa\Downloads\jaikoz-windows.zip

2013-07-02 22:54 - 2013-07-02 22:54 - 15069520 _____ (Ventis Media Inc.                                           ) C:\Users\Larissa\Downloads\MediaMonkey_4.0.7.1511.exe

2013-07-02 09:53 - 2013-07-09 14:08 - 00000000 ____D C:\ProgramData\Avira

2013-07-02 09:46 - 2013-07-11 07:48 - 00004276 _____ C:\Windows\PFRO.log

2013-07-02 09:16 - 2013-07-02 09:16 - 02092792 _____ C:\Users\Larissa\Downloads\avira_free_antivirus.exe

2013-07-02 09:04 - 2013-07-15 09:34 - 00003272 _____ C:\Windows\setupact.log

2013-07-02 09:04 - 2013-07-02 09:04 - 00000000 _____ C:\Windows\setuperr.log

2013-07-02 09:03 - 2013-07-10 17:30 - 00339376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-02 01:31 - 2013-07-02 01:31 - 00084576 _____ C:\Users\Larissa\AppData\Local\GDIPFONTCACHEV1.DAT

2013-06-30 23:33 - 2013-07-12 18:16 - 00000000 ____D C:\Users\Larissa\Documents\Spaß

2013-06-30 21:27 - 2013-07-09 14:22 - 00000000 ____D C:\Users\Larissa\Documents\Rezepte

2013-06-29 15:56 - 2013-06-29 23:00 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

2013-06-26 20:15 - 2013-06-26 20:14 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-06-26 20:14 - 2013-06-26 20:14 - 00000000 ____D C:\Program Files\Java

2013-06-25 00:31 - 2013-06-25 01:07 - 110100480 _____ C:\Users\Larissa\Downloads\PatrickRothfussDieFurchtdesWeisen22013.part1.rar

2013-06-17 22:33 - 2013-06-17 23:41 - 00000000 ____D C:\Program Files\QuickTime

2013-06-16 18:11 - 2013-06-16 18:11 - 00000000 ____D C:\Users\Larissa\AppData\Local\Adobe_Systems_Incorporate

2013-06-16 16:37 - 2013-06-30 23:32 - 00000000 ____D C:\Users\Larissa\Documents\Bücher

2013-06-16 16:08 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-06-16 16:08 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Local\Amazon

2013-06-16 11:08 - 2013-06-16 11:26 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-06-16 11:08 - 2013-06-16 11:22 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-06-15 15:22 - 2013-06-15 15:22 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kindle DRM Removal

2013-06-15 15:21 - 2013-06-15 15:21 - 00000000 ____D C:\Program Files\eBookConverter

2013-06-15 14:25 - 2013-06-25 00:04 - 00000000 ____D C:\Program Files\Calibre2

2013-06-15 14:25 - 2013-06-16 18:31 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\calibre
 

==================== One Month Modified Files and Folders =======
 

2013-07-15 14:15 - 2013-07-15 14:15 - 00000000 ____D C:\FRST

2013-07-15 14:14 - 2013-07-15 14:13 - 01218214 _____ (Farbar) C:\Users\Larissa\Downloads\FRST.exe

2013-07-15 13:56 - 2013-04-07 20:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-15 13:51 - 2013-04-06 01:31 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-15 13:10 - 2013-04-10 21:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Mp3tag

2013-07-15 12:58 - 2013-07-15 12:58 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Amazon

2013-07-15 12:57 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\Documents\Amazon MP3

2013-07-15 12:57 - 2013-07-15 12:56 - 02328864 _____ C:\Users\Larissa\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe

2013-07-15 12:57 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-07-15 12:50 - 2013-04-05 17:59 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Dropbox

2013-07-15 12:34 - 2013-04-05 18:03 - 00000000 ___RD C:\Users\Larissa\Dropbox

2013-07-15 12:32 - 2013-04-06 05:09 - 00000000 ___RD C:\Users\Larissa\Desktop

2013-07-15 09:42 - 2009-07-14 06:34 - 00024480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-15 09:42 - 2009-07-14 06:34 - 00024480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-15 09:34 - 2013-07-02 09:04 - 00003272 _____ C:\Windows\setupact.log

2013-07-15 09:34 - 2013-04-06 01:31 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-15 09:34 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-15 09:33 - 2013-04-06 04:57 - 01272739 _____ C:\Windows\WindowsUpdate.log

2013-07-15 09:30 - 2013-07-15 09:30 - 00042972 _____ C:\Users\Larissa\Downloads\Extras.Txt

2013-07-15 09:20 - 2013-07-15 09:20 - 00076040 _____ C:\Users\Larissa\Downloads\OTL.Txt

2013-07-15 08:50 - 2013-07-15 08:50 - 00377856 _____ C:\Users\Larissa\Downloads\gmer_2.1.19163.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00050477 _____ C:\Users\Larissa\Downloads\Defogger.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00000450 _____ C:\Users\Larissa\Downloads\defogger_disable.log

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:50 - 2013-04-06 05:09 - 00000000 ____D C:\Users\Larissa

2013-07-15 08:49 - 2013-07-15 08:49 - 00602112 _____ (OldTimer Tools) C:\Users\Larissa\Downloads\OTL.exe

2013-07-15 08:46 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\Offline Web Pages

2013-07-15 08:46 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media

2013-07-15 08:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp

2013-07-15 08:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\DriverStore

2013-07-15 08:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE

2013-07-15 08:46 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2013-07-15 08:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration

2013-07-15 08:06 - 2013-07-15 08:01 - 00000000 ____D C:\Windows\system32\MRT

2013-07-15 07:56 - 2013-07-15 07:56 - 00001413 _____ C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-07-15 07:56 - 2013-04-06 05:43 - 00000000 ____D C:\Windows\Panther

2013-07-14 12:41 - 2013-07-14 12:41 - 00002183 _____ C:\Users\Larissa\Desktop\Thesis.lnk

2013-07-14 01:55 - 2013-04-07 20:40 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-07-14 01:55 - 2013-04-07 20:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-07-12 18:16 - 2013-06-30 23:33 - 00000000 ____D C:\Users\Larissa\Documents\Spaß

2013-07-11 07:48 - 2013-07-02 09:46 - 00004276 _____ C:\Windows\PFRO.log

2013-07-11 01:12 - 2013-07-11 01:12 - 00237568 _____ (www.CompulsiveCode.com) C:\Users\Larissa\Downloads\JPEGtoPDF37.exe

2013-07-11 01:04 - 2013-07-11 01:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\PDF Architect

2013-07-11 01:02 - 2013-07-11 00:59 - 00000000 ____D C:\Program Files\PDFCreator

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Users\Larissa\Documents\PDF Architect Files

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Program Files\PDF Architect

2013-07-11 01:00 - 2013-07-11 01:00 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\pdfforge

2013-07-11 00:57 - 2013-07-11 00:57 - 17502040 _____ (pdfforge GbR) C:\Users\Larissa\Downloads\PDFCreator-1_7_0_setup.exe

2013-07-10 19:45 - 2013-07-10 19:45 - 00656274 _____ C:\Users\Larissa\Downloads\SmartToolsOfficeDDE-Fix.zip

2013-07-10 19:41 - 2010-11-20 23:01 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-10 19:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-10 17:30 - 2013-07-02 09:03 - 00339376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-10 17:30 - 2013-04-05 17:54 - 00000000 ____D C:\Program Files\Google

2013-07-10 17:29 - 2011-04-12 03:39 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-10 17:29 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender

2013-07-10 08:37 - 2013-04-06 13:22 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-10 08:32 - 2013-04-06 15:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-07-10 08:04 - 2013-07-10 08:04 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis (1).ppt

2013-07-10 08:03 - 2013-07-10 08:03 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis.ppt

2013-07-10 07:57 - 2013-07-10 07:57 - 00004096 ____H C:\Users\Larissa\AppData\Local\keyfile3.drm

2013-07-09 23:15 - 2013-07-09 23:10 - 00000000 ____D C:\Users\Larissa\Documents\Calibre Bibliothek

2013-07-09 23:11 - 2013-07-09 23:11 - 52111360 _____ C:\Users\Larissa\Downloads\calibre-0.9.38.msi

2013-07-09 22:47 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Desktop

2013-07-09 22:32 - 2013-07-09 13:08 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\MediaMonkey

2013-07-09 14:32 - 2013-07-09 14:32 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00175176 _____ C:\Windows\system32\Drivers\aswVmm.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum

2013-07-09 14:32 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt

2013-07-09 14:30 - 2013-07-09 14:30 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-09 14:30 - 2013-07-09 14:21 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-09 14:27 - 2013-05-20 23:31 - 00000000 ____D C:\Users\Larissa\Documents\Wichtige Dokumente

2013-07-09 14:27 - 2013-05-20 23:28 - 00000000 ____D C:\Users\Larissa\Documents\Arzt

2013-07-09 14:23 - 2013-07-09 14:23 - 00000000 ____D C:\Users\Larissa\Documents\BTA

2013-07-09 14:22 - 2013-06-30 21:27 - 00000000 ____D C:\Users\Larissa\Documents\Rezepte

2013-07-09 14:20 - 2013-07-09 14:18 - 117478104 _____ C:\Users\Larissa\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe

2013-07-09 14:08 - 2013-07-02 09:53 - 00000000 ____D C:\ProgramData\Avira

2013-07-09 13:09 - 2013-07-09 13:09 - 00000000 ____D C:\Users\Larissa\AppData\Local\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\ProgramData\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\Program Files\MediaMonkey

2013-07-09 13:07 - 2013-04-07 12:12 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\foobar2000

2013-07-04 18:35 - 2013-05-15 00:54 - 00000000 ____D C:\Users\Larissa\Jaikoz

2013-07-04 07:41 - 2013-07-04 07:40 - 88376276 _____ C:\Users\Larissa\Downloads\jaikoz-windows.zip

2013-07-03 21:06 - 2013-04-06 02:13 - 00002182 _____ C:\Users\Larissa\Desktop\Gute Nacht!.lnk

2013-07-02 22:54 - 2013-07-02 22:54 - 15069520 _____ (Ventis Media Inc.                                           ) C:\Users\Larissa\Downloads\MediaMonkey_4.0.7.1511.exe

2013-07-02 18:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles

2013-07-02 09:16 - 2013-07-02 09:16 - 02092792 _____ C:\Users\Larissa\Downloads\avira_free_antivirus.exe

2013-07-02 09:04 - 2013-07-02 09:04 - 00000000 _____ C:\Windows\setuperr.log

2013-07-02 01:31 - 2013-07-02 01:31 - 00084576 _____ C:\Users\Larissa\AppData\Local\GDIPFONTCACHEV1.DAT

2013-07-02 01:19 - 2013-06-11 00:00 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Media Player Classic

2013-06-30 23:32 - 2013-06-16 16:37 - 00000000 ____D C:\Users\Larissa\Documents\Bücher

2013-06-30 11:26 - 2013-04-06 15:52 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-06-29 23:00 - 2013-06-29 15:56 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

2013-06-27 23:31 - 2013-04-06 14:26 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\DVDVideoSoft

2013-06-26 20:14 - 2013-06-26 20:15 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-06-26 20:14 - 2013-06-26 20:14 - 00000000 ____D C:\Program Files\Java

2013-06-26 20:14 - 2013-05-09 13:57 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-06-26 20:14 - 2013-05-09 13:57 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-06-25 23:20 - 2013-06-10 23:59 - 00000000 ____D C:\Program Files\MPC-HC

2013-06-25 01:07 - 2013-06-25 00:31 - 110100480 _____ C:\Users\Larissa\Downloads\PatrickRothfussDieFurchtdesWeisen22013.part1.rar

2013-06-25 00:04 - 2013-06-15 14:25 - 00000000 ____D C:\Program Files\Calibre2

2013-06-24 23:15 - 2013-05-20 23:34 - 00000000 ____D C:\Users\Larissa\Documents\Schnitte

2013-06-24 09:43 - 2013-04-07 12:08 - 00000000 ____D C:\Program Files\foobar2000

2013-06-17 23:41 - 2013-06-17 22:33 - 00000000 ____D C:\Program Files\QuickTime

2013-06-16 20:03 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache

2013-06-16 18:31 - 2013-06-15 14:25 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\calibre

2013-06-16 18:11 - 2013-06-16 18:11 - 00000000 ____D C:\Users\Larissa\AppData\Local\Adobe_Systems_Incorporate

2013-06-16 18:11 - 2013-04-06 14:07 - 00000000 ____D C:\Program Files\Adobe

2013-06-16 16:08 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Local\Amazon

2013-06-16 11:26 - 2013-06-16 11:08 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-06-16 11:22 - 2013-06-16 11:08 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft

2013-06-15 15:22 - 2013-06-15 15:22 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kindle DRM Removal

2013-06-15 15:21 - 2013-06-15 15:21 - 00000000 ____D C:\Program Files\eBookConverter
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-14 11:58
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-07-2013

Ran by Larissa at 2013-07-15 14:17:13

Running from C:\Users\Larissa\Downloads

Boot Mode: Normal

==========================================================
 

Adobe Digital Editions 2.0 (Version: 2.0)

Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)

Adobe Flash Player 11 Plugin (Version: 11.8.800.94)

Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)

Amazon Kindle

Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)

Atheros Driver Installation Program (Version: 9.0)

avast! Free Antivirus (Version: 8.0.1489.0)

calibre (Version: 0.9.36)

Canon MP495 series MP Drivers

CCleaner (Version: 4.02)

Citavi (Version: 3.4.0.2)

Dropbox (HKCU Version: 2.0.22)

foobar2000 v1.2.4 (Version: 1.2.4)

Free Audio Converter version 5.0.24.430 (Version: 5.0.24.430)

Free Audio Dub version 1.7.9.908 (Version: 1.7.9.908)

Free Studio version 2013 (Version: 6.1.2.610)

Free Video Dub version 2.0.18.430 (Version: 2.0.18.430)

Free YouTube to MP3 Converter version 3.12.3.610 (Version: 3.12.3.610)

Google Chrome (Version: 28.0.1500.72)

Google Update Helper (Version: 1.3.21.153)

Intel(R) Graphics Media Accelerator Driver (Version: 8.15.8.9300)

Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)

Java 7 Update 25 (Version: 7.0.250)

Java Auto Updater (Version: 2.1.9.5)

Kindle DRM Removal (Version: 1.4.1)

Launch Manager (Version: 5.1.7)

MediaMonkey 4.0 (Version: 4.0)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Mozilla Maintenance Service (Version: 17.0.7)

Mozilla Thunderbird 17.0.7 (x86 de) (Version: 17.0.7)

Mp3tag v2.54 (Version: v2.54)

MPC-HC 1.6.8 (Version: 1.6.8.7417)

MusicBrainz Picard (Version: 1.2)

Packard Bell Updater (Version: 1.02.3502)

PDF Architect (Version: 1.1.83.9982)

PDFCreator (Version: 1.7.0)

Realtek Ethernet Controller Driver (Version: 7.49.927.2011)

Realtek High Definition Audio Driver (Version: 6.0.1.6374)

Realtek PCIE Card Reader (Version: 6.1.7601.83)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0)

Skype™ 6.3 (Version: 6.3.107)

Synaptics Pointing Device Driver (Version: 15.1.18.0)

The GodFather

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Outlook 2007 Help (KB963677)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

VirtualCloneDrive

WinRAR 4.20 (32-Bit) (Version: 4.20.0)

 
 

==================== Restore Points  =========================
 

04-07-2013 10:47:08 Geplanter Prüfpunkt

05-07-2013 18:17:45 Windows Update

09-07-2013 12:30:05 avast! Free Antivirus Setup

10-07-2013 06:01:35 Windows Update

10-07-2013 06:22:07 Windows Update

13-07-2013 23:47:00 Windows Update

15-07-2013 05:52:58 Windows Modules Installer

15-07-2013 06:00:37 Windows Update

15-07-2013 06:12:47 Windows Update

15-07-2013 10:33:44 Windows Update

15-07-2013 11:08:11 MP3-Tag-Editor 3.10 wird entfernt
 

==================== Hosts content: ==========================
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {16402B32-94B1-4480-99B1-E8967E3E7AD3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

Task: {27659101-19BC-4ABD-AF2D-2F9B9EED4623} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-06] (Google Inc.)

Task: {388E3D9D-FAD0-4A21-9159-360E77DBCAD9} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {3AB9D56C-2451-4DA4-A471-2B73C8EF9037} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)

Task: {6D330F5A-1FC9-4DF4-8A5F-FB55D94894DA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-04-06] (Google Inc.)

Task: {7F1F3C78-FD12-4ED8-9730-50EB4E972803} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)

Task: {CF226E19-D9D9-43AB-BAB2-9A9BC1A63CE6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-14] (Adobe Systems Incorporated)

Task: {EE24DE7F-F2A1-4075-81B3-B6932CB923DF} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/15/2013 00:31:30 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Name des fehlerhaften Moduls: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00012288

ID des fehlerhaften Prozesses: 0x528

Startzeit der fehlerhaften Anwendung: 0xgmer_2.1.19163.exe0

Pfad der fehlerhaften Anwendung: gmer_2.1.19163.exe1

Pfad des fehlerhaften Moduls: gmer_2.1.19163.exe2

Berichtskennung: gmer_2.1.19163.exe3
 

Error: (07/15/2013 11:54:09 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Name des fehlerhaften Moduls: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00012288

ID des fehlerhaften Prozesses: 0x854

Startzeit der fehlerhaften Anwendung: 0xgmer_2.1.19163.exe0

Pfad der fehlerhaften Anwendung: gmer_2.1.19163.exe1

Pfad des fehlerhaften Moduls: gmer_2.1.19163.exe2

Berichtskennung: gmer_2.1.19163.exe3
 

Error: (07/15/2013 09:35:46 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 08:48:21 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 08:43:12 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 08:39:02 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 08:36:26 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 07:56:49 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/15/2013 07:48:03 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (07/14/2013 11:03:27 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (07/15/2013 08:52:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für Internet Explorer*8 für Windows*7 (KB2598845)
 

Error: (07/15/2013 08:52:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 8 unter Windows 7 (KB2846071)
 

Error: (07/15/2013 08:42:43 AM) (Source: DCOM) (User: )

Description: 1084wuauserv{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (07/15/2013 08:41:53 AM) (Source: DCOM) (User: )

Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
 
 

Microsoft Office Sessions:

=========================

Error: (06/19/2013 08:49:15 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 138 seconds with 60 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 47%

Total physical RAM: 2036.3 MB

Available physical RAM: 1077.8 MB

Total Pagefile: 4072.6 MB

Available Pagefile: 2758.6 MB

Total Virtual: 2047.88 MB

Available Virtual: 1900.46 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:465.66 GB) (Free:339.41 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0008CD04)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo Schrauber!
Nach dem Neustart kam diese Meldung!
Was hab ich falsch gemacht?
Danke für die Hilfe!

Ah, aber das Logfile gibt es trotzdem!

Code:

ComboFix 13-07-14.01 - Larissa 15.07.2013  15:00:13.1.4 - x86

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.2036.1099 [GMT 2:00]

ausgeführt von:: c:\users\Larissa\Desktop\ComboFix.exe

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

c:\windows\system32\muzapp.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-06-15 bis 2013-07-15  ))))))))))))))))))))))))))))))

.

.

2013-07-15 12:15 . 2013-07-15 12:15        --------        d-----w-        C:\FRST

2013-07-15 10:58 . 2013-07-15 10:58        --------        d-----w-        c:\users\Larissa\AppData\Roaming\Amazon

2013-07-15 10:57 . 2013-07-15 10:57        --------        d-----w-        c:\users\Larissa\AppData\Local\Program Files

2013-07-15 06:01 . 2013-07-15 06:06        --------        d-----w-        c:\windows\system32\MRT

2013-07-13 23:48 . 2013-06-17 00:10        7068072        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{88F67FD5-98E0-4FEC-9BEF-F4DE2DEBB145}\mpengine.dll

2013-07-10 23:04 . 2013-07-10 23:04        --------        d-----w-        c:\users\Larissa\AppData\Roaming\PDF Architect

2013-07-10 23:01 . 2013-07-10 23:01        --------        d-----w-        c:\program files\PDF Architect

2013-07-10 23:00 . 2013-07-10 23:00        --------        d-----w-        c:\users\Larissa\AppData\Roaming\pdfforge

2013-07-10 23:00 . 2012-05-05 09:54        137000        ----a-w-        c:\windows\system32\MSMAPI32.OCX

2013-07-10 23:00 . 2013-04-09 13:13        95416        ----a-w-        c:\windows\system32\pdfcmon.dll

2013-07-10 23:00 . 2012-05-05 09:54        662288        ----a-w-        c:\windows\system32\MSCOMCT2.OCX

2013-07-10 23:00 . 1998-07-06 16:56        125712        ----a-w-        c:\windows\system32\VB6DE.DLL

2013-07-10 23:00 . 1998-07-06 16:55        158208        ----a-w-        c:\windows\system32\MSCMCDE.DLL

2013-07-10 23:00 . 1998-07-06 16:55        64512        ----a-w-        c:\windows\system32\MSCC2DE.DLL

2013-07-10 23:00 . 2012-05-05 09:54        23552        ----a-w-        c:\windows\system32\MSMPIDE.DLL

2013-07-10 22:59 . 2013-07-10 23:02        --------        d-----w-        c:\program files\PDFCreator

2013-07-10 06:03 . 2013-05-06 04:56        1620480        ----a-w-        c:\windows\system32\WMVDECOD.DLL

2013-07-10 06:03 . 2013-04-10 05:02        1077760        ----a-w-        c:\windows\system32\DWrite.dll

2013-07-10 06:03 . 2013-06-04 04:53        509440        ----a-w-        c:\windows\system32\qedit.dll

2013-07-10 06:03 . 2013-06-05 03:05        2347520        ----a-w-        c:\windows\system32\win32k.sys

2013-07-10 06:03 . 2013-04-10 05:03        936448        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll

2013-07-10 06:02 . 2013-04-10 05:03        988672        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll

2013-07-10 06:02 . 2013-04-10 05:03        969216        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll

2013-07-10 06:02 . 2013-04-10 05:04        1221632        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL

2013-07-10 06:02 . 2013-05-27 04:57        680960        ----a-w-        c:\program files\Windows Defender\MpSvc.dll

2013-07-10 06:02 . 2013-05-27 04:57        392704        ----a-w-        c:\program files\Windows Defender\MpClient.dll

2013-07-10 06:02 . 2013-05-27 04:57        224768        ----a-w-        c:\program files\Windows Defender\MpCommu.dll

2013-07-09 12:32 . 2013-07-09 12:32        369584        ----a-w-        c:\windows\system32\drivers\aswSP.sys

2013-07-09 12:32 . 2013-05-09 08:59        29816        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys

2013-07-09 12:32 . 2013-05-09 08:59        61680        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys

2013-07-09 12:32 . 2013-07-09 12:32        770344        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2013-07-09 12:32 . 2013-05-09 08:59        56080        ----a-w-        c:\windows\system32\drivers\aswTdi.sys

2013-07-09 12:32 . 2013-07-09 12:32        175176        ----a-w-        c:\windows\system32\drivers\aswVmm.sys

2013-07-09 12:32 . 2013-05-09 08:59        49376        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys

2013-07-09 12:32 . 2013-05-09 08:59        66336        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2013-07-09 12:32 . 2013-05-09 08:58        229648        ----a-w-        c:\windows\system32\aswBoot.exe

2013-07-09 12:31 . 2013-05-09 08:58        41664        ----a-w-        c:\windows\avastSS.scr

2013-07-09 12:30 . 2013-07-09 12:30        --------        d-----w-        c:\program files\AVAST Software

2013-07-09 12:21 . 2013-07-09 12:30        --------        d-----w-        c:\programdata\AVAST Software

2013-07-09 11:09 . 2013-07-09 11:09        --------        d-----w-        c:\users\Larissa\AppData\Local\MediaMonkey

2013-07-09 11:08 . 2013-07-09 20:32        --------        d-----w-        c:\users\Larissa\AppData\Roaming\MediaMonkey

2013-07-09 11:08 . 2013-07-09 11:08        --------        d-----w-        c:\programdata\MediaMonkey

2013-07-09 11:08 . 2013-07-09 11:08        --------        d-----w-        c:\program files\MediaMonkey

2013-07-05 18:18 . 2013-05-02 00:06        238872        ------w-        c:\windows\system32\MpSigStub.exe

2013-07-02 07:53 . 2013-07-09 12:08        --------        d-----w-        c:\programdata\Avira

2013-06-29 13:56 . 2013-06-29 21:00        --------        d-----w-        c:\program files\Mozilla Thunderbird

2013-06-26 18:14 . 2013-06-26 18:14        94632        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll

2013-06-26 18:14 . 2013-06-26 18:14        --------        d-----w-        c:\program files\Java

2013-06-17 20:33 . 2013-06-17 21:41        --------        d-----w-        c:\program files\QuickTime

2013-06-16 16:11 . 2013-06-16 16:11        --------        d-----w-        c:\users\Larissa\AppData\Local\Adobe_Systems_Incorporate

2013-06-16 14:08 . 2013-06-16 14:08        --------        d-----w-        c:\users\Larissa\AppData\Local\Amazon

2013-06-16 09:08 . 2013-06-16 09:26        --------        d-----w-        c:\program files\DVDVideoSoft

2013-06-16 09:08 . 2013-06-16 09:22        --------        d-----w-        c:\program files\Common Files\DVDVideoSoft

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-07-13 23:55 . 2013-04-07 18:40        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2013-07-13 23:55 . 2013-04-07 18:40        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2013-06-26 18:14 . 2013-05-09 11:57        867240        ----a-w-        c:\windows\system32\npDeployJava1.dll

2013-06-26 18:14 . 2013-05-09 11:57        789416        ----a-w-        c:\windows\system32\deployJava1.dll

2013-05-14 22:52 . 2013-05-14 22:52        0        ----a-w-        c:\program files\izWrTe7385197073973952314.tmp

2013-05-13 04:45 . 2013-06-12 19:02        140288        ----a-w-        c:\windows\system32\cryptsvc.dll

2013-05-13 04:45 . 2013-06-12 19:02        1160192        ----a-w-        c:\windows\system32\crypt32.dll

2013-05-13 04:45 . 2013-06-12 19:02        103936        ----a-w-        c:\windows\system32\cryptnet.dll

2013-05-13 03:08 . 2013-06-12 19:02        903168        ----a-w-        c:\windows\system32\certutil.exe

2013-05-13 03:08 . 2013-06-12 19:02        43008        ----a-w-        c:\windows\system32\certenc.dll

2013-05-10 03:20 . 2013-06-12 19:03        24576        ----a-w-        c:\windows\system32\cryptdlg.dll

2013-05-08 05:38 . 2013-06-12 19:02        1293672        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-05-06 05:06 . 2013-06-12 19:02        3913576        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-05-06 05:06 . 2013-06-12 19:02        3968872        ----a-w-        c:\windows\system32\ntkrnlpa.exe

2013-04-26 04:55 . 2013-06-12 19:02        492544        ----a-w-        c:\windows\system32\win32spl.dll

2013-04-18 17:08 . 2013-05-09 12:39        4659712        ----a-w-        c:\windows\system32\Redemption.dll

2013-04-18 17:06 . 2013-04-18 17:06        974848        ----a-w-        c:\windows\system32\cis-2.4.dll

2013-04-18 17:06 . 2013-04-18 17:06        81920        ----a-w-        c:\windows\system32\issacapi_bs-2.3.dll

2013-04-18 17:06 . 2013-04-18 17:06        65536        ----a-w-        c:\windows\system32\issacapi_pe-2.3.dll

2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\MTXSYNCICON.dll

2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\MK_Lyric.dll

2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\issacapi_se-2.3.dll

2013-04-18 17:06 . 2013-04-18 17:06        569344        ----a-w-        c:\windows\system32\muzdecode.ax

2013-04-18 17:06 . 2013-04-18 17:06        491520        ----a-w-        c:\windows\system32\muzapp.dll

2013-04-18 17:06 . 2013-04-18 17:06        49152        ----a-w-        c:\windows\system32\MaJGUILib.dll

2013-04-18 17:06 . 2013-04-18 17:06        45320        ----a-w-        c:\windows\system32\MAMACExtract.dll

2013-04-18 17:06 . 2013-04-18 17:06        45056        ----a-w-        c:\windows\system32\MaXMLProto.dll

2013-04-18 17:06 . 2013-04-18 17:06        45056        ----a-w-        c:\windows\system32\MACXMLProto.dll

2013-04-18 17:06 . 2013-04-18 17:06        40960        ----a-w-        c:\windows\system32\MTTELECHIP.dll

2013-04-18 17:06 . 2013-04-18 17:06        352256        ----a-w-        c:\windows\system32\MSLUR71.dll

2013-04-18 17:06 . 2013-04-18 17:06        258048        ----a-w-        c:\windows\system32\muzoggsp.ax

2013-04-18 17:06 . 2013-04-18 17:06        245760        ----a-w-        c:\windows\system32\MSCLib.dll

2013-04-18 17:06 . 2013-04-18 17:06        24576        ----a-w-        c:\windows\system32\MASetupCleaner.exe

2013-04-18 17:06 . 2013-04-18 17:06        200704        ----a-w-        c:\windows\system32\muzwmts.dll

2013-04-18 17:06 . 2013-04-18 17:06        155648        ----a-w-        c:\windows\system32\MSFLib.dll

2013-04-18 17:06 . 2013-04-18 17:06        143360        ----a-w-        c:\windows\system32\3DAudio.ax

2013-04-18 17:06 . 2013-04-18 17:06        135168        ----a-w-        c:\windows\system32\muzaf1.dll

2013-04-18 17:06 . 2013-04-18 17:06        131072        ----a-w-        c:\windows\system32\muzmpgsp.ax

2013-04-18 17:06 . 2013-04-18 17:06        122880        ----a-w-        c:\windows\system32\muzeffect.ax

2013-04-18 17:06 . 2013-04-18 17:06        118784        ----a-w-        c:\windows\system32\MaDRM.dll

2013-04-18 17:06 . 2013-04-18 17:06        110592        ----a-w-        c:\windows\system32\muzmp4sp.ax

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]

2013-06-10 16:17        279560        ----a-w-        c:\program files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2013-05-09 08:58        121968        ----a-w-        c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-04 22:12        130736        ----a-w-        c:\users\Larissa\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-04 22:12        130736        ----a-w-        c:\users\Larissa\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-04 22:12        130736        ----a-w-        c:\users\Larissa\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-05 283160]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-20 135168]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-20 168960]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-20 161280]

"GfxServiceInstall"="c:\windows\system32\GfxServiceInstall.bat" [2011-10-20 51]

"LManager"="c:\program files\Launch Manager\LManager.exe" [2011-07-01 1103440]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-10-08 1934632]

"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-05-18 10082920]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]

.

c:\users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-04-19 161384]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-04-03 83864]

R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-04-03 181912]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]

S0 aswRvrt;aswRvrt; [x]

S0 aswVmm;aswVmm; [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 66336]

S2 DsiWMIService;Dritek WMI Service;c:\program files\Launch Manager\dsiwmis.exe [2011-07-01 353360]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-05 13336]

S2 IconMan_R;IconMan_R;c:\program files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-03-07 1755136]

S2 Live Updater Service;Live Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2012-04-05 255376]

S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files\PDF Architect\HelperService.exe [2013-04-08 1320496]

S2 PDF Architect Service;PDF Architect Service;c:\program files\PDF Architect\ConversionService.exe [2013-04-08 799280]

S3 igddim32;igddim32;c:\windows\system32\DRIVERS\igddim32.sys [2011-10-20 1334272]

S3 imgkmd32;imgkmd32;c:\windows\system32\DRIVERS\imgkmd32.sys [2011-10-20 415744]

S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-06-09 278528]

S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-05-30 254056]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-09-29 490088]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-07-13 23:51        1173456        ----a-w-        c:\program files\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-07-15 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-07 23:55]

.

2013-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-05 23:31]

.

2013-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-04-05 23:31]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=E4522016D8655E37

IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm

IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.0.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKCU-Run-AmazonMP3DownloaderHelper - c:\users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe

AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe

AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe

AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe

AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe

AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe

AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe

AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe

AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe

AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe

AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'Explorer.exe'(5804)

c:\users\Larissa\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files\AVAST Software\Avast\AvastSvc.exe

c:\windows\system32\WLANExt.exe

c:\windows\system32\conhost.exe

c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\windows\system32\taskhost.exe

c:\program files\Launch Manager\LMworker.exe

c:\program files\Launch Manager\LMutilps32.exe

c:\windows\system32\conhost.exe

c:\windows\system32\igfxsrvc.exe

c:\windows\system32\wbem\unsecapp.exe

c:\program files\Windows Media Player\wmpnetwk.exe

c:\users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-07-15  15:40:32 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-07-15 13:40

.

Vor Suchlauf: 8 Verzeichnis(se), 364.340.305.920 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 364.306.046.976 Bytes frei

.

- - End Of File - - EF634C1F4D068A58305E42D23D585B40

A36C5E4F47E84449FF07ED3517B43A31

:dankeschoen:

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

# AdwCleaner v2.305 - Datei am 16/07/2013 um 17:09:12 erstellt

# Aktualisiert am 11/07/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)

# Benutzer : Larissa - LARISSASNETBOOK

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Larissa\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Ordner Gelöscht : C:\Program Files\HDvidCodec.com

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\Users\Larissa\AppData\Roaming\BabSolution

Ordner Gelöscht : C:\Users\Larissa\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Larissa\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\Larissa\AppData\Roaming\pdfforge
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v8.0.7601.17514
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=E4522016D8655E37 --> hxxp://www.google.com

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www2.delta-search.com/?affID=119776&babsrc=NT_ss&mntrId=E4522016D8655E37 --> hxxp://www.google.com
 

-\\ Google Chrome v28.0.1500.72
 

Datei : C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [3362 octets] - [16/07/2013 17:09:12]
 

########## EOF - C:\AdwCleaner[S1].txt - [3422 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.1.1 (07.15.2013:2)

OS: Windows 7 Professional x86

Ran by Larissa on 16.07.2013 at 17:14:00,24

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\apnstub_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\apnstub_rasmancs
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 16.07.2013 at 17:21:42,30

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-07-2013 03

Ran by Larissa (administrator) on 16-07-2013 17:28:49

Running from C:\Users\Larissa\Desktop

Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 8

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe

(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Dropbox, Inc.) C:\Users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)

HKLM\...\Run: [GfxServiceInstall] - C:\Windows\system32\GfxServiceInstall.bat [51 2011-10-20] ()

HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)

HKLM\...\Run: [VirtualCloneDrive] - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10082920 2011-05-18] (Realtek Semiconductor)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)

HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1174016 2010-11-20] (Microsoft Corporation)

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)

HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-14] (Microsoft Corporation)

Startup: C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Larissa\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Larissa\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF Extension: hdvc - C:\Users\Larissa\AppData\Roaming\Mozilla\Firefox\profiles\extensions\hdvc@hdvc.com.xpi

FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.de/

CHR RestoreOnStartup: "hxxp://www.google.de/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

CHR Extension: (From Dust) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj\0.0.0.23_0

CHR Extension: (Google Drive) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Cultures Online) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbdgmikfnklbopkafjgbcejoiipemkl\1.0.0.4_0

CHR Extension: (Dropbox) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.6_0

CHR Extension: (YouTube Unblocker) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl\0.4.4_0

CHR Extension: (Gmail) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR Extension: (Amazon\u2122 Extension) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmaebjjmgcnllolapfflmemacfaaanif\3.2013.5.31_0

CHR Extension: (RSS Feed Reader) - C:\Users\Larissa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.0_0
 

========================== Services (Whitelisted) =================
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.)

R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)

R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)

R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-07-09] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-07-09] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-07-09] ()

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)

R3 imgkmd32; C:\Windows\System32\DRIVERS\imgkmd32.sys [415744 2011-10-20] (Imagination Technologies)

R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-07-16 17:23 - 2013-07-16 17:24 - 01218614 _____ (Farbar) C:\Users\Larissa\Desktop\FRST.exe

2013-07-16 17:21 - 2013-07-16 17:21 - 00000831 _____ C:\Users\Larissa\Desktop\JRT.txt

2013-07-16 17:13 - 2013-07-16 17:13 - 00000000 ____D C:\Windows\ERUNT

2013-07-16 17:09 - 2013-07-16 17:10 - 00003491 _____ C:\AdwCleaner[S1].txt

2013-07-16 10:23 - 2013-07-16 10:24 - 00662345 _____ C:\Users\Larissa\Desktop\adwcleaner.exe

2013-07-16 10:23 - 2013-07-16 10:24 - 00559035 _____ (Oleg N. Scherbakov) C:\Users\Larissa\Desktop\JRT.exe

2013-07-16 10:07 - 2013-07-16 10:07 - 00003544 ____N C:\bootsqm.dat

2013-07-15 18:05 - 2013-07-15 18:20 - 00010535 _____ C:\Windows\IE10_main.log

2013-07-15 15:40 - 2013-07-15 15:40 - 00020090 _____ C:\ComboFix.txt

2013-07-15 14:55 - 2013-07-15 15:40 - 00000000 ____D C:\Qoobox

2013-07-15 14:18 - 2013-07-15 14:18 - 00032518 _____ C:\Users\Larissa\Downloads\FRST.txt

2013-07-15 14:17 - 2013-07-15 14:18 - 00014270 _____ C:\Users\Larissa\Downloads\Addition.txt

2013-07-15 14:15 - 2013-07-15 14:15 - 00000000 ____D C:\FRST

2013-07-15 12:58 - 2013-07-15 12:58 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Amazon

2013-07-15 12:57 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\Documents\Amazon MP3

2013-07-15 12:56 - 2013-07-15 12:57 - 02328864 _____ C:\Users\Larissa\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe

2013-07-15 09:30 - 2013-07-15 09:30 - 00042972 _____ C:\Users\Larissa\Downloads\Extras.Txt

2013-07-15 09:20 - 2013-07-15 09:20 - 00076040 _____ C:\Users\Larissa\Downloads\OTL.Txt

2013-07-15 08:50 - 2013-07-15 08:50 - 00377856 _____ C:\Users\Larissa\Downloads\gmer_2.1.19163.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00050477 _____ C:\Users\Larissa\Downloads\Defogger.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00000450 _____ C:\Users\Larissa\Downloads\defogger_disable.log

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:49 - 2013-07-15 08:49 - 00602112 _____ (OldTimer Tools) C:\Users\Larissa\Downloads\OTL.exe

2013-07-15 08:01 - 2013-07-15 08:06 - 00000000 ____D C:\Windows\system32\MRT

2013-07-15 07:56 - 2013-07-15 07:56 - 00001413 _____ C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-07-14 12:41 - 2013-07-14 12:41 - 00002183 _____ C:\Users\Larissa\Desktop\Thesis.lnk

2013-07-11 01:12 - 2013-07-11 01:12 - 00237568 _____ (www.CompulsiveCode.com) C:\Users\Larissa\Downloads\JPEGtoPDF37.exe

2013-07-11 01:04 - 2013-07-11 01:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\PDF Architect

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Users\Larissa\Documents\PDF Architect Files

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Program Files\PDF Architect

2013-07-11 01:00 - 2013-04-09 15:13 - 00095416 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll

2013-07-11 01:00 - 2012-05-05 11:54 - 00662288 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCT2.OCX

2013-07-11 01:00 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\system32\MSMAPI32.OCX

2013-07-11 01:00 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\MSMPIDE.DLL

2013-07-11 01:00 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\system32\VB6DE.DLL

2013-07-11 01:00 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\MSCMCDE.DLL

2013-07-11 01:00 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\MSCC2DE.DLL

2013-07-11 00:59 - 2013-07-11 01:02 - 00000000 ____D C:\Program Files\PDFCreator

2013-07-11 00:57 - 2013-07-11 00:57 - 17502040 _____ (pdfforge GbR) C:\Users\Larissa\Downloads\PDFCreator-1_7_0_setup.exe

2013-07-10 19:45 - 2013-07-10 19:45 - 00656274 _____ C:\Users\Larissa\Downloads\SmartToolsOfficeDDE-Fix.zip

2013-07-10 08:04 - 2013-07-10 08:04 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis (1).ppt

2013-07-10 08:03 - 2013-07-10 08:03 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis.ppt

2013-07-10 08:03 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-07-10 08:03 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-07-10 08:03 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-07-10 08:03 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-07-10 07:57 - 2013-07-10 07:57 - 00004096 ____H C:\Users\Larissa\AppData\Local\keyfile3.drm

2013-07-09 23:11 - 2013-07-09 23:11 - 52111360 _____ C:\Users\Larissa\Downloads\calibre-0.9.38.msi

2013-07-09 23:10 - 2013-07-09 23:15 - 00000000 ____D C:\Users\Larissa\Documents\Calibre Bibliothek

2013-07-09 14:32 - 2013-07-09 14:32 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00175176 _____ C:\Windows\system32\Drivers\aswVmm.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum

2013-07-09 14:32 - 2013-05-09 10:59 - 00066336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00061680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00056080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00049376 _____ C:\Windows\system32\Drivers\aswRvrt.sys

2013-07-09 14:32 - 2013-05-09 10:59 - 00029816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys

2013-07-09 14:32 - 2013-05-09 10:58 - 00229648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2013-07-09 14:31 - 2013-05-09 10:58 - 00041664 _____ (AVAST Software) C:\Windows\avastSS.scr

2013-07-09 14:30 - 2013-07-09 14:30 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-09 14:26 - 2008-09-30 12:30 - 00204400 _____ C:\Users\Larissa\Documents\LARISSA 2008.QDF

2013-07-09 14:26 - 2008-09-30 12:30 - 00016463 _____ C:\Users\Larissa\Documents\LARISSA 2008.QSD

2013-07-09 14:23 - 2013-07-09 14:23 - 00000000 ____D C:\Users\Larissa\Documents\BTA

2013-07-09 14:21 - 2013-07-09 14:30 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-09 14:18 - 2013-07-09 14:20 - 117478104 _____ C:\Users\Larissa\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe

2013-07-09 13:09 - 2013-07-09 13:09 - 00000000 ____D C:\Users\Larissa\AppData\Local\MediaMonkey

2013-07-09 13:08 - 2013-07-16 16:02 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\ProgramData\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\Program Files\MediaMonkey

2013-07-05 20:18 - 2013-05-02 02:06 - 00238872 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2013-07-04 07:40 - 2013-07-04 07:41 - 88376276 _____ C:\Users\Larissa\Downloads\jaikoz-windows.zip

2013-07-02 22:54 - 2013-07-02 22:54 - 15069520 _____ (Ventis Media Inc.                                           ) C:\Users\Larissa\Downloads\MediaMonkey_4.0.7.1511.exe

2013-07-02 09:53 - 2013-07-09 14:08 - 00000000 ____D C:\ProgramData\Avira

2013-07-02 09:46 - 2013-07-11 07:48 - 00004276 _____ C:\Windows\PFRO.log

2013-07-02 09:16 - 2013-07-02 09:16 - 02092792 _____ C:\Users\Larissa\Downloads\avira_free_antivirus.exe

2013-07-02 09:04 - 2013-07-16 17:26 - 00005256 _____ C:\Windows\setupact.log

2013-07-02 09:04 - 2013-07-02 09:04 - 00000000 _____ C:\Windows\setuperr.log

2013-07-02 09:03 - 2013-07-10 17:30 - 00339376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-02 01:31 - 2013-07-02 01:31 - 00084576 _____ C:\Users\Larissa\AppData\Local\GDIPFONTCACHEV1.DAT

2013-06-30 23:33 - 2013-07-12 18:16 - 00000000 ____D C:\Users\Larissa\Documents\Spaß

2013-06-30 21:27 - 2013-07-09 14:22 - 00000000 ____D C:\Users\Larissa\Documents\Rezepte

2013-06-29 15:56 - 2013-06-29 23:00 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

2013-06-26 20:15 - 2013-06-26 20:14 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-06-26 20:14 - 2013-06-26 20:14 - 00000000 ____D C:\Program Files\Java

2013-06-25 00:31 - 2013-06-25 01:07 - 110100480 _____ C:\Users\Larissa\Downloads\PatrickRothfussDieFurchtdesWeisen22013.part1.rar

2013-06-17 22:33 - 2013-06-17 23:41 - 00000000 ____D C:\Program Files\QuickTime

2013-06-16 18:11 - 2013-06-16 18:11 - 00000000 ____D C:\Users\Larissa\AppData\Local\Adobe_Systems_Incorporate

2013-06-16 16:37 - 2013-06-30 23:32 - 00000000 ____D C:\Users\Larissa\Documents\Bücher

2013-06-16 16:08 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-06-16 16:08 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Local\Amazon

2013-06-16 11:08 - 2013-06-16 11:26 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-06-16 11:08 - 2013-06-16 11:22 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
 

==================== One Month Modified Files and Folders =======
 

2013-07-16 17:28 - 2013-04-05 17:59 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Dropbox

2013-07-16 17:27 - 2013-04-05 18:03 - 00000000 ___RD C:\Users\Larissa\Dropbox

2013-07-16 17:27 - 2013-04-05 18:03 - 00000000 ___RD C:\Users\Larissa\Dropbox

2013-07-16 17:26 - 2013-07-02 09:04 - 00005256 _____ C:\Windows\setupact.log

2013-07-16 17:26 - 2013-04-06 01:31 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-07-16 17:26 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-07-16 17:25 - 2013-04-06 04:57 - 01369900 _____ C:\Windows\WindowsUpdate.log

2013-07-16 17:24 - 2013-07-16 17:23 - 01218614 _____ (Farbar) C:\Users\Larissa\Desktop\FRST.exe

2013-07-16 17:24 - 2013-04-06 05:09 - 00000000 ___RD C:\Users\Larissa\Desktop

2013-07-16 17:24 - 2013-04-06 05:09 - 00000000 ___RD C:\Users\Larissa\Desktop

2013-07-16 17:21 - 2013-07-16 17:21 - 00000831 _____ C:\Users\Larissa\Desktop\JRT.txt

2013-07-16 17:18 - 2009-07-14 06:34 - 00024480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-07-16 17:18 - 2009-07-14 06:34 - 00024480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-07-16 17:13 - 2013-07-16 17:13 - 00000000 ____D C:\Windows\ERUNT

2013-07-16 17:10 - 2013-07-16 17:09 - 00003491 _____ C:\AdwCleaner[S1].txt

2013-07-16 16:02 - 2013-07-09 13:08 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\MediaMonkey

2013-07-16 15:56 - 2013-04-07 20:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-07-16 15:51 - 2013-04-06 01:31 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-07-16 14:39 - 2013-04-07 12:12 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\foobar2000

2013-07-16 14:27 - 2010-11-20 23:01 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI

2013-07-16 10:24 - 2013-07-16 10:23 - 00662345 _____ C:\Users\Larissa\Desktop\adwcleaner.exe

2013-07-16 10:24 - 2013-07-16 10:23 - 00559035 _____ (Oleg N. Scherbakov) C:\Users\Larissa\Desktop\JRT.exe

2013-07-16 10:21 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Public\Desktop

2013-07-16 10:20 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt

2013-07-16 10:18 - 2013-04-06 05:09 - 00000000 ____D C:\Users\Larissa

2013-07-16 10:17 - 2013-05-15 00:32 - 00000000 ____D C:\Program Files\MP3-Tag-Editor

2013-07-16 10:17 - 2013-04-10 21:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Mp3tag

2013-07-16 10:17 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\Offline Web Pages

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 __RSD C:\Windows\Media

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\DriverStore

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration

2013-07-16 10:17 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2013-07-16 10:16 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public

2013-07-16 10:07 - 2013-07-16 10:07 - 00003544 ____N C:\bootsqm.dat

2013-07-15 18:20 - 2013-07-15 18:05 - 00010535 _____ C:\Windows\IE10_main.log

2013-07-15 15:40 - 2013-07-15 15:40 - 00020090 _____ C:\ComboFix.txt

2013-07-15 15:40 - 2013-07-15 14:55 - 00000000 ____D C:\Qoobox

2013-07-15 14:18 - 2013-07-15 14:18 - 00032518 _____ C:\Users\Larissa\Downloads\FRST.txt

2013-07-15 14:18 - 2013-07-15 14:17 - 00014270 _____ C:\Users\Larissa\Downloads\Addition.txt

2013-07-15 14:15 - 2013-07-15 14:15 - 00000000 ____D C:\FRST

2013-07-15 12:58 - 2013-07-15 12:58 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Amazon

2013-07-15 12:57 - 2013-07-15 12:57 - 00000000 ____D C:\Users\Larissa\Documents\Amazon MP3

2013-07-15 12:57 - 2013-07-15 12:56 - 02328864 _____ C:\Users\Larissa\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe

2013-07-15 12:57 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-07-15 09:30 - 2013-07-15 09:30 - 00042972 _____ C:\Users\Larissa\Downloads\Extras.Txt

2013-07-15 09:20 - 2013-07-15 09:20 - 00076040 _____ C:\Users\Larissa\Downloads\OTL.Txt

2013-07-15 08:50 - 2013-07-15 08:50 - 00377856 _____ C:\Users\Larissa\Downloads\gmer_2.1.19163.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00050477 _____ C:\Users\Larissa\Downloads\Defogger.exe

2013-07-15 08:50 - 2013-07-15 08:50 - 00000450 _____ C:\Users\Larissa\Downloads\defogger_disable.log

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:50 - 2013-07-15 08:50 - 00000000 _____ C:\Users\Larissa\defogger_reenable

2013-07-15 08:49 - 2013-07-15 08:49 - 00602112 _____ (OldTimer Tools) C:\Users\Larissa\Downloads\OTL.exe

2013-07-15 08:06 - 2013-07-15 08:01 - 00000000 ____D C:\Windows\system32\MRT

2013-07-15 07:56 - 2013-07-15 07:56 - 00001413 _____ C:\Users\Larissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-07-15 07:56 - 2013-04-06 05:43 - 00000000 ____D C:\Windows\Panther

2013-07-14 12:41 - 2013-07-14 12:41 - 00002183 _____ C:\Users\Larissa\Desktop\Thesis.lnk

2013-07-14 01:55 - 2013-04-07 20:40 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-07-14 01:55 - 2013-04-07 20:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-07-12 18:16 - 2013-06-30 23:33 - 00000000 ____D C:\Users\Larissa\Documents\Spaß

2013-07-11 07:48 - 2013-07-02 09:46 - 00004276 _____ C:\Windows\PFRO.log

2013-07-11 01:12 - 2013-07-11 01:12 - 00237568 _____ (www.CompulsiveCode.com) C:\Users\Larissa\Downloads\JPEGtoPDF37.exe

2013-07-11 01:04 - 2013-07-11 01:04 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\PDF Architect

2013-07-11 01:02 - 2013-07-11 00:59 - 00000000 ____D C:\Program Files\PDFCreator

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Users\Larissa\Documents\PDF Architect Files

2013-07-11 01:01 - 2013-07-11 01:01 - 00000000 ____D C:\Program Files\PDF Architect

2013-07-11 00:57 - 2013-07-11 00:57 - 17502040 _____ (pdfforge GbR) C:\Users\Larissa\Downloads\PDFCreator-1_7_0_setup.exe

2013-07-10 19:45 - 2013-07-10 19:45 - 00656274 _____ C:\Users\Larissa\Downloads\SmartToolsOfficeDDE-Fix.zip

2013-07-10 19:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET

2013-07-10 17:30 - 2013-07-02 09:03 - 00339376 _____ C:\Windows\system32\FNTCACHE.DAT

2013-07-10 17:30 - 2013-04-05 17:54 - 00000000 ____D C:\Program Files\Google

2013-07-10 17:29 - 2011-04-12 03:39 - 00000000 ____D C:\Program Files\Windows Journal

2013-07-10 17:29 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender

2013-07-10 08:37 - 2013-04-06 13:22 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-07-10 08:32 - 2013-04-06 15:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-07-10 08:04 - 2013-07-10 08:04 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis (1).ppt

2013-07-10 08:03 - 2013-07-10 08:03 - 00060928 _____ C:\Users\Larissa\Downloads\Cover Bachelor Thesis.ppt

2013-07-10 07:57 - 2013-07-10 07:57 - 00004096 ____H C:\Users\Larissa\AppData\Local\keyfile3.drm

2013-07-09 23:15 - 2013-07-09 23:10 - 00000000 ____D C:\Users\Larissa\Documents\Calibre Bibliothek

2013-07-09 23:11 - 2013-07-09 23:11 - 52111360 _____ C:\Users\Larissa\Downloads\calibre-0.9.38.msi

2013-07-09 14:32 - 2013-07-09 14:32 - 00770344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00369584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00175176 _____ C:\Windows\system32\Drivers\aswVmm.sys

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswVmm.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSP.sys.sum

2013-07-09 14:32 - 2013-07-09 14:32 - 00000175 _____ C:\Windows\system32\Drivers\aswSnx.sys.sum

2013-07-09 14:30 - 2013-07-09 14:30 - 00000000 ____D C:\Program Files\AVAST Software

2013-07-09 14:30 - 2013-07-09 14:21 - 00000000 ____D C:\ProgramData\AVAST Software

2013-07-09 14:27 - 2013-05-20 23:31 - 00000000 ____D C:\Users\Larissa\Documents\Wichtige Dokumente

2013-07-09 14:27 - 2013-05-20 23:28 - 00000000 ____D C:\Users\Larissa\Documents\Arzt

2013-07-09 14:23 - 2013-07-09 14:23 - 00000000 ____D C:\Users\Larissa\Documents\BTA

2013-07-09 14:22 - 2013-06-30 21:27 - 00000000 ____D C:\Users\Larissa\Documents\Rezepte

2013-07-09 14:20 - 2013-07-09 14:18 - 117478104 _____ C:\Users\Larissa\Downloads\avast_free_antivirus_setup_8.0.1489.300.exe

2013-07-09 14:08 - 2013-07-02 09:53 - 00000000 ____D C:\ProgramData\Avira

2013-07-09 13:09 - 2013-07-09 13:09 - 00000000 ____D C:\Users\Larissa\AppData\Local\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\ProgramData\MediaMonkey

2013-07-09 13:08 - 2013-07-09 13:08 - 00000000 ____D C:\Program Files\MediaMonkey

2013-07-04 18:35 - 2013-05-15 00:54 - 00000000 ____D C:\Users\Larissa\Jaikoz

2013-07-04 18:35 - 2013-05-15 00:54 - 00000000 ____D C:\Users\Larissa\Jaikoz

2013-07-04 07:41 - 2013-07-04 07:40 - 88376276 _____ C:\Users\Larissa\Downloads\jaikoz-windows.zip

2013-07-03 21:06 - 2013-04-06 02:13 - 00002182 _____ C:\Users\Larissa\Desktop\Gute Nacht!.lnk

2013-07-02 22:54 - 2013-07-02 22:54 - 15069520 _____ (Ventis Media Inc.                                           ) C:\Users\Larissa\Downloads\MediaMonkey_4.0.7.1511.exe

2013-07-02 18:44 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles

2013-07-02 09:16 - 2013-07-02 09:16 - 02092792 _____ C:\Users\Larissa\Downloads\avira_free_antivirus.exe

2013-07-02 09:04 - 2013-07-02 09:04 - 00000000 _____ C:\Windows\setuperr.log

2013-07-02 01:31 - 2013-07-02 01:31 - 00084576 _____ C:\Users\Larissa\AppData\Local\GDIPFONTCACHEV1.DAT

2013-07-02 01:19 - 2013-06-11 00:00 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\Media Player Classic

2013-06-30 23:32 - 2013-06-16 16:37 - 00000000 ____D C:\Users\Larissa\Documents\Bücher

2013-06-30 11:26 - 2013-04-06 15:52 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-06-29 23:00 - 2013-06-29 15:56 - 00000000 ____D C:\Program Files\Mozilla Thunderbird

2013-06-27 23:31 - 2013-04-06 14:26 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\DVDVideoSoft

2013-06-26 20:14 - 2013-06-26 20:15 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2013-06-26 20:14 - 2013-06-26 20:14 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-06-26 20:14 - 2013-06-26 20:14 - 00000000 ____D C:\Program Files\Java

2013-06-26 20:14 - 2013-05-09 13:57 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll

2013-06-26 20:14 - 2013-05-09 13:57 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-06-25 23:20 - 2013-06-10 23:59 - 00000000 ____D C:\Program Files\MPC-HC

2013-06-25 01:07 - 2013-06-25 00:31 - 110100480 _____ C:\Users\Larissa\Downloads\PatrickRothfussDieFurchtdesWeisen22013.part1.rar

2013-06-25 00:04 - 2013-06-15 14:25 - 00000000 ____D C:\Program Files\Calibre2

2013-06-24 23:15 - 2013-05-20 23:34 - 00000000 ____D C:\Users\Larissa\Documents\Schnitte

2013-06-24 09:43 - 2013-04-07 12:08 - 00000000 ____D C:\Program Files\foobar2000

2013-06-17 23:41 - 2013-06-17 22:33 - 00000000 ____D C:\Program Files\QuickTime

2013-06-16 18:31 - 2013-06-15 14:25 - 00000000 ____D C:\Users\Larissa\AppData\Roaming\calibre

2013-06-16 18:11 - 2013-06-16 18:11 - 00000000 ____D C:\Users\Larissa\AppData\Local\Adobe_Systems_Incorporate

2013-06-16 18:11 - 2013-04-06 14:07 - 00000000 ____D C:\Program Files\Adobe

2013-06-16 16:08 - 2013-06-16 16:08 - 00000000 ____D C:\Users\Larissa\AppData\Local\Amazon

2013-06-16 11:26 - 2013-06-16 11:08 - 00000000 ____D C:\Program Files\DVDVideoSoft

2013-06-16 11:22 - 2013-06-16 11:08 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-14 11:58
 

==================== End Of Log ============================

--- --- ---

--- --- ---

:dankeschoen:

Also, die Minianwendungen sind jetzt wieder da!
Und Skype funktioniert auch wieder!! :applaus:

Supi, noch nen Onlinescan dann sind wir durch :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. noch Probleme? :)