Trojaner-Board - AdWare.Win32.Yotoon.heur auf externer Festplatte gefunden

Hey,

vielen Dank für die beruhigende Nachricht. Habe die Dateien manuell gelöscht, nochmal die Kaspersky Disk draufgeworfen und er hat nichts mehr gefunden.
Das mit dem Virencheck ist gut, da ich die externe zunächst blauäugig an den PC angeschlossen hatte. Überdies hatte ich mir tags zuvor Sardu runtergeladen, damit ich meinen Laptop vom Stick aus booten konnte (um auf Fehler zu suchen). Dabei jedoch bekam ich drive-by-download search.protect und auch reg clean pro und von denen halt ihr Anti-viren-programm (Millionen reg-fehler) angeboten. Natürlich sofort deinstalliert. Und dann nach den Hinweisen dieses Forums adwcleaner, malwarebytes, jrt und eset draufgeworfen, windows defender suchlauf, antivir und jetzt letztlich die kaspersky rescue cd.
Daher kann es sicher nicht schaden, wenn du dir nochmal das mit Farbar angucken könntest :)

der normale

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014

Ran by Tina (administrator) on HEXENKÜCHE on 07-01-2014 22:19:48

Running from C:\Users\Tina\Desktop

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe

() D:\Tobit Radio.fx\Server\rfx-server.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Intenium) C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe

(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\LxWebAccess\LxWebAccess.exe

(Microsoft Corporation) C:\Windows\System32\calc.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2472048 2010-08-11] (VIA)

HKLM-x32\...\Run: [LogitechQuickCamRibbon] - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2010-06-09] (Hewlett-Packard)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)

HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-20] (Avira Operations GmbH & Co. KG)

HKCU\...\Run: [Spiele Post] - C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe [483400 2013-12-06] (Intenium)

HKCU\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-28] (Samsung Electronics Co., Ltd.)

HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)

HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1511792 2013-03-28] (Samsung)

HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-03-28] (Samsung)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA02B40C1DF10CD01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File

BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\7xsoamnc.default

FF NewTab: www.google.com

FF DefaultSearchEngine: Google

FF SearchEngineOrder.1: Google

FF SelectedSearchEngine: Google

FF Homepage: www.google.com

FF Keyword.URL: https://www.google.com/search

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)

FF SearchPlugin: C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\7xsoamnc.default\searchplugins\ecosia.xml

FF SearchPlugin: C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\7xsoamnc.default\searchplugins\forestle-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: NoScript - C:\Users\Tina\AppData\Roaming\Mozilla\Firefox\Profiles\7xsoamnc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF HKCU\...\Firefox\Extensions: [{cd40b1e8-8cd2-4915-9e00-80cb745ff41e}] - C:\Program Files (x86)\Video-Saver\150.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-20] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-20] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)

S3 FirebirdServerMAGIXInstance; C:\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-08-10] (The Firebird Project)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 Radio.fx; D:\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-20] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-20] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-09-13] (Devguru Co., Ltd)

R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-01-07 22:19 - 2014-01-07 22:20 - 00011072 _____ C:\Users\Tina\Desktop\FRST.txt

2014-01-07 22:19 - 2014-01-07 22:19 - 00000000 ____D C:\FRST

2014-01-07 22:19 - 2014-01-07 16:35 - 01931762 _____ (Farbar) C:\Users\Tina\Desktop\FRST64.exe

2014-01-06 11:57 - 2014-01-07 21:26 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0

2014-01-05 16:52 - 2014-01-05 16:52 - 00000620 _____ C:\Users\Tina\Desktop\JRT.txt

2014-01-05 14:15 - 2014-01-05 14:15 - 00000000 ____D C:\Windows\ERUNT

2014-01-03 18:40 - 2014-01-03 18:40 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Malwarebytes

2014-01-03 18:39 - 2014-01-03 18:39 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-01-03 18:39 - 2014-01-03 18:39 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-03 18:39 - 2014-01-03 18:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-03 18:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-01-03 18:27 - 2014-01-03 19:59 - 00000000 ____D C:\AdwCleaner

2014-01-03 17:24 - 2014-01-03 17:24 - 00000000 ____D C:\Users\Tina\AppData\Roaming\ASCOMP Software

2014-01-03 17:21 - 2014-01-03 17:25 - 00000952 _____ C:\Users\UpdatusUser\Desktop\SARDU.lnk

2014-01-03 17:21 - 2014-01-03 17:25 - 00000952 _____ C:\Users\Tina\Desktop\SARDU.lnk

2014-01-03 17:21 - 2014-01-03 17:21 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU

2014-01-03 17:13 - 2014-01-03 17:13 - 00001949 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Canneverbe Limited

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2014-01-02 17:48 - 2014-01-02 18:15 - 00000000 ____D C:\Users\Tina\AppData\Roaming\ImgBurn

2014-01-02 17:47 - 2014-01-02 17:47 - 00000000 ____D C:\Program Files (x86)\ImgBurn

2014-01-02 17:37 - 2014-01-02 17:37 - 00000000 ____D C:\Program Files\HashTab Shell Extension

2013-12-24 12:14 - 2013-12-24 12:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-20 16:28 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-20 16:28 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-20 16:28 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-20 16:28 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-20 16:26 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-20 16:26 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-20 16:26 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-20 16:26 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-20 16:26 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-20 16:26 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-20 16:26 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-20 16:26 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-20 16:26 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-20 16:26 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-20 16:26 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-20 16:26 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-20 16:26 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-20 16:26 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-20 16:26 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-20 16:26 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-20 16:26 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-20 16:26 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-20 16:26 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-20 16:26 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-20 16:26 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-20 16:26 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-20 16:26 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-20 16:26 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-20 16:26 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-20 16:26 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-20 16:26 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-20 16:26 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-20 16:26 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-20 16:26 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-20 16:26 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-20 15:44 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-20 15:44 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-20 15:44 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-20 15:44 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-20 15:44 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-20 15:44 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-20 15:44 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-20 15:44 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-20 15:44 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-20 15:44 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-20 15:44 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-20 15:44 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-20 15:44 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-20 15:44 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-20 15:44 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-20 15:44 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-20 15:44 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-20 15:44 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-20 15:44 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
 

==================== One Month Modified Files and Folders =======
 

2014-01-07 22:20 - 2014-01-07 22:19 - 00011072 _____ C:\Users\Tina\Desktop\FRST.txt

2014-01-07 22:19 - 2014-01-07 22:19 - 00000000 ____D C:\FRST

2014-01-07 21:58 - 2012-04-02 15:39 - 01217238 _____ C:\Windows\WindowsUpdate.log

2014-01-07 21:56 - 2012-10-27 15:21 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-01-07 21:56 - 2012-10-27 15:20 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-01-07 21:41 - 2012-04-02 16:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-01-07 21:26 - 2014-01-06 11:57 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0

2014-01-07 20:36 - 2009-07-14 05:45 - 00014912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-01-07 20:36 - 2009-07-14 05:45 - 00014912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-01-07 20:27 - 2012-11-18 15:49 - 00000000 ____D C:\ProgramData\NVIDIA

2014-01-07 20:27 - 2012-04-02 16:15 - 00377886 _____ C:\Windows\PFRO.log

2014-01-07 20:27 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2014-01-07 20:27 - 2009-07-14 05:51 - 00072321 _____ C:\Windows\setupact.log

2014-01-07 16:35 - 2014-01-07 22:19 - 01931762 _____ (Farbar) C:\Users\Tina\Desktop\FRST64.exe

2014-01-05 18:56 - 2013-09-03 12:16 - 00000000 ____D C:\Program Files (x86)\Meerkats

2014-01-05 16:52 - 2014-01-05 16:52 - 00000620 _____ C:\Users\Tina\Desktop\JRT.txt

2014-01-05 14:15 - 2014-01-05 14:15 - 00000000 ____D C:\Windows\ERUNT

2014-01-03 22:54 - 2013-11-25 12:22 - 00000000 ____D C:\Users\Tina\Desktop\Jan

2014-01-03 19:59 - 2014-01-03 18:27 - 00000000 ____D C:\AdwCleaner

2014-01-03 18:40 - 2014-01-03 18:40 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Malwarebytes

2014-01-03 18:39 - 2014-01-03 18:39 - 00001109 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-01-03 18:39 - 2014-01-03 18:39 - 00000000 ____D C:\ProgramData\Malwarebytes

2014-01-03 18:39 - 2014-01-03 18:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-03 17:25 - 2014-01-03 17:21 - 00000952 _____ C:\Users\UpdatusUser\Desktop\SARDU.lnk

2014-01-03 17:25 - 2014-01-03 17:21 - 00000952 _____ C:\Users\Tina\Desktop\SARDU.lnk

2014-01-03 17:24 - 2014-01-03 17:24 - 00000000 ____D C:\Users\Tina\AppData\Roaming\ASCOMP Software

2014-01-03 17:21 - 2014-01-03 17:21 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SARDU

2014-01-03 17:13 - 2014-01-03 17:13 - 00001949 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Canneverbe Limited

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\ProgramData\Canneverbe Limited

2014-01-03 17:13 - 2014-01-03 17:13 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP

2014-01-02 19:03 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat

2014-01-02 19:03 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat

2014-01-02 19:03 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI

2014-01-02 18:15 - 2014-01-02 17:48 - 00000000 ____D C:\Users\Tina\AppData\Roaming\ImgBurn

2014-01-02 17:47 - 2014-01-02 17:47 - 00000000 ____D C:\Program Files (x86)\ImgBurn

2014-01-02 17:37 - 2014-01-02 17:37 - 00000000 ____D C:\Program Files\HashTab Shell Extension

2013-12-29 22:39 - 2012-04-02 17:01 - 00000000 ____D C:\Users\Tina\AppData\Roaming\Skype

2013-12-29 12:27 - 2012-05-02 10:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-27 14:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-27 14:41 - 2012-04-02 16:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-27 14:41 - 2012-04-02 16:13 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-27 14:41 - 2012-04-02 16:13 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-24 12:14 - 2013-12-24 12:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-20 22:47 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-20 22:45 - 2009-07-14 05:45 - 00368904 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-20 16:26 - 2013-08-14 11:54 - 00000000 ____D C:\Windows\system32\MRT

2013-12-20 16:25 - 2012-04-02 16:46 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-20 15:40 - 2013-08-06 09:40 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-20 15:40 - 2013-08-06 09:39 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-20 15:40 - 2013-08-06 09:39 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-20 15:36 - 2012-10-27 15:20 - 00000000 ____D C:\Program Files (x86)\Google
 

Some content of TEMP:

====================

C:\Users\Tina\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-30 16:23
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

addition
FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-01-2014

Ran by Tina at 2014-01-07 22:20:48

Running from C:\Users\Tina\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version:  - Microsoft) Hidden

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8 - Adobe Systems Incorporated)

Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17 - Amazon Services LLC)

Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)

Avira SearchFree Toolbar (x32 Version: 12.10.0.2948 - APN, LLC)

CDBurnerXP (x32 Version: 4.5.2.4478 - CDBurnerXP)

Celestron's TheSky (Remove only) (x32 Version:  - )

Der Exorzist (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Der Gesandte des Königs 2 (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Der Sushi-Meister (x32 Version: 0.0.0.0 - INTENIUM GmbH)

Deutschland Spielt - Spiele Post (x32 Version: 1.0.3.0 - INTENIUM GmbH)

DEUTSCHLAND SPIELT GAME CENTER (x32 Version: 1.0.0.46 - INTENIUM GmbH)

Die 4 Elemente II (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Dracula: Tödliche Liebe (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Firebird SQL Server (D) (x32 Version: 1.5.2.4733 - )

Goldene Jahre: Der weite Westen (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

HashTab 5.1.0.23 (Version: 5.1.0.23 - Implbits Software)

Haus der 1000 Türen 2: Das Juwel des Zarathustra (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Haus der 1000 Türen: Familiengeheimnisse (x32 Version: 1.0.0.0 - INTENIUM GmbH)

HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.)

HP Officejet 6500 E710a-f Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard)

HP Update (x32 Version: 5.002.006.003 - Hewlett-Packard)

I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)

ImgBurn (x32 Version: 2.5.8.0 - LIGHTNING UK!)

Jewel Quest Mysteries: The Seventh Gate (x32 Version: 1.0.0.0 - INTENIUM GmbH)

KVB-Erstattungsantrag PC 2.81 VBS (x32 Version:  - KVB)

Lexware Info Service (x32 Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)

Logitech Vid HD (x32 Version: 7.2 (7259) - Logitech Inc..)

Logitech Webcam Software (Version: 12.10.1113 - Logitech Inc.)

Logitech Webcam Software-Treiberpaket (Version: 12.10.1110 - Logitech Inc.)

Lumen (x32 Version: 1.00.0000 - )

MAGIX Music Cleaning Lab 2006 deluxe (D) (x32 Version: 7.0.0.1 - MAGIX AG)

MAGIX Music Manager (D) (x32 Version: 1.1.1.692 - MAGIX AG)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden

Microsoft Office 2007 Primary Interop Assemblies (x32 Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.30322 - Microsoft Corporation) Hidden

Microsoft XML Parser (x32 Version: 8.0.7820.0 - Microsoft Corporation) Hidden

Midnight Mysteries: Teufel auf dem Mississippi (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)

Mystery Stories – Berge des Wahnsinns (x32 Version: 1.0.0.0 - INTENIUM GmbH)

Natürliche Bedrohung: Unheilvolle Insel (x32 Version: 1.0.0.0 - INTENIUM GmbH)

NVIDIA 3D Vision Treiber 311.06 (Version: 311.06 - NVIDIA Corporation)

NVIDIA Drivers (Version: 1.7 - NVIDIA Corporation)

NVIDIA Grafiktreiber 311.06 (Version: 311.06 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden

NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation)

NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden

OutlookAddInNet3Setup (x32 Version: 1.0.0 - Samsung)

PDF24 Creator 5.4.0 (x32 Version:  - PDF24.org)

Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden

ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14 - ProtectDisc Software GmbH)

QuickSteuer 2012 (x32 Version: 18.09.00.0003 - Haufe-Lexware GmbH & Co.KG)

QuickSteuer 2013 (x32 Version: 19.06.00.0003 - Haufe-Lexware GmbH & Co.KG)

Samsung Kies (x32 Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.0.1.11053_99 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.22.0 - SAMSUNG Electronics Co., Ltd.)

SARDU 2.0.6.5 (x32 Version: 2.0.6.5 - Davide Costa)

Skype™ 6.0 (x32 Version: 6.0.126 - Skype Technologies S.A.)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (KB982305) (x32 Version: 1 - Microsoft Corporation)

VIA Plattform-Geräte-Manager (x32 Version: 1.34 - VIA Technologies, Inc.)

Video-Saver (x32 Version:  - Video-Saver Soft)

WDR RadioRecorder (x32 Version:  - Tobit.Software)
 

==================== Restore Points  =========================
 

22-10-2013 16:08:16 Windows Update

26-10-2013 08:09:48 Windows Update

30-10-2013 11:21:54 Windows Update

05-11-2013 14:03:11 Windows Update

10-11-2013 17:25:42 Windows Update

14-11-2013 02:00:37 Windows Update

20-11-2013 14:13:15 Windows Update

20-11-2013 18:34:14 Windows Update

24-11-2013 15:48:18 Windows Update

29-11-2013 06:01:34 Windows Update

04-12-2013 17:11:17 Windows Update

20-12-2013 14:42:01 Windows Update

20-12-2013 15:24:49 Windows Update

24-12-2013 11:13:19 Windows Update

27-12-2013 13:26:53 Windows Update

31-12-2013 14:32:55 Windows Update

05-01-2014 17:55:37 Removed Java 7 Update 21

05-01-2014 17:56:04 Removed Java(TM) 6 Update 35

07-01-2014 19:34:05 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {1EFAAB38-D946-43AB-B1DB-3670BFDC1710} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-27] (Google Inc.)

Task: {2F2E4F29-A30F-4544-85DF-ACA105B8563F} - \Video-Saver Update No Task File

Task: {5551B9ED-34D8-4E7E-981F-717E84341867} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-27] (Adobe Systems Incorporated)

Task: {E36E4D29-400E-4F73-B2B3-8093D0FCB939} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-27] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2012-04-02 16:18 - 2010-08-11 10:32 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll

2012-04-02 16:18 - 2010-08-11 10:32 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll

2012-04-02 16:18 - 2010-08-11 10:32 - 00105584 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll

2012-04-02 16:18 - 2010-08-11 10:32 - 64643696 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll

2013-08-06 09:39 - 2013-08-06 09:34 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2011-06-23 10:43 - 2013-03-28 10:26 - 00035840 _____ () C:\Program Files (x86)\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.Interface.dll

2011-06-23 10:43 - 2013-03-28 10:27 - 17433088 _____ () C:\Program Files (x86)\Samsung\Kies\Theme\Kies.Theme.dll

2013-04-04 11:34 - 2013-03-28 10:26 - 00570880 _____ () C:\Program Files (x86)\Samsung\Kies\Common\Kies.UI.dll

2011-06-23 10:40 - 2013-03-20 09:29 - 00023040 _____ () C:\Program Files (x86)\Samsung\Kies\MVVM\Kies.MVVM.dll

2013-04-04 11:32 - 2013-03-20 09:06 - 00057856 _____ () C:\Program Files (x86)\Samsung\Kies\External\MediaModules\ASF_cSharpAPI.dll
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Microsoft PS/2-Maus

Description: Microsoft PS/2-Maus

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: Standardtastatur (PS/2)

Description: Standardtastatur (PS/2)

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/05/2014 05:08:11 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (01/07/2014 08:31:09 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (01/07/2014 08:31:09 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/07/2014 04:50:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (01/07/2014 04:50:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/07/2014 04:47:59 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.
 

Error: (01/07/2014 04:46:46 PM) (Source: volmgr) (User: )

Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
 

Error: (01/06/2014 05:42:25 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (01/06/2014 05:42:25 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/05/2014 05:10:14 PM) (Source: Service Control Manager) (User: )

Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (12/03/2012 10:19:03 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 103 seconds with 60 seconds of active time.  This session ended with a crash.
 

Error: (07/31/2012 04:23:13 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 19 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (07/28/2012 03:08:27 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 29 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 36%

Total physical RAM: 4095.3 MB

Available physical RAM: 2609.77 MB

Total Pagefile: 8188.79 MB

Available Pagefile: 6413.51 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:292.97 GB) (Free:217.55 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Daten) (Fixed) (Total:156.25 GB) (Free:131.82 GB) NTFS

Drive e: (Support) (Fixed) (Total:16.54 GB) (Free:16.19 GB) NTFS

Drive f: (KRD10) (CDROM) (Total:0.37 GB) (Free:0 GB) CDFS

Drive g: (Grinsespeicher) (Fixed) (Total:931.51 GB) (Free:137.14 GB) NTFS

Drive m: (SARDU) (Removable) (Total:3.89 GB) (Free:3.89 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 51548832)

Partition 1: (Active) - (Size=293 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=173 GB) - (Type=OF Extended)
 

========================================================

Disk: 6 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: BA305CDD)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
 

========================================================

Disk: 7 (Size: 4 GB) (Disk ID: 852A9085)

Partition 1: (Active) - (Size=4 GB) - (Type=0B)
 

==================== End Of Log ============================

--- --- ---

Überdies startet der pc von Zeit zu Zeit wieder nicht. Fehlermeldung vorhin war 0x490. Soll ich (wie im Forum bereits anderswo empholen) chkdsk und HD-Tune ausprobieren?

Viele Grüße =)