Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   systweak.com öffnet sich in Firefox und langsamer Rechner (https://www.trojaner-board.de/149236-systweak-com-oeffnet-firefox-langsamer-rechner.html)

A3_TDI 04.02.2014 18:44
systweak.com öffnet sich in Firefox und langsamer Rechner
 
Hi,

also, ich bin ein totaler Nullchecker in den Sachen, deshalb hoffe ich auf eine idiotensichere Lösung :party:

Seit ein paar Tagen öffnet sich immer wieder ein Fenster

hxxp://www.systweak.com/registrycleaner/mmy/new/?utm_source=matomy&utm_campaign=matomy&pub_id=442191&ce_cid=20si8t3jOHCccNvo1KgQE91waJNd3tyx

Außerdem kommt es mir so vor, als wäre mein Rechner in letzter Zeit ziemlich langsam.

Könnt ihr mir vielleicht helfen? Ich habe schon ein bischen darüber gelesen, allerdings werde ich als totaler Laie nicht daraus schlau:confused:
Ich weiß nur, das es sich dabei um einen Virus oder ähnliches handelt.

Schon mal vielen Dank im Voraus!

Grüße

Andreas

schrauber 04.02.2014 19:50
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


A3_TDI 04.02.2014 20:12
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014
Ran by Privat (administrator) on PC on 04-02-2014 20:10:06
Running from C:\Users\Privat\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Spotify Ltd) C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
() C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Dropbox, Inc.) C:\Users\Privat\AppData\Roaming\Dropbox\bin\Dropbox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [NuTCSetupEnviron] - C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SCX3200_Scan2Pc] - C:\WINDOWS\Twain_32\Samsung\SCX3200\Scan2pc.exe [1990144 2011-06-21] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1001\...\Run: [Spotify Web Helper] - C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-22] (Spotify Ltd)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1001\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_170_Plugin.exe [839560 2013-12-10] (Adobe Systems Incorporated)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1002\...\Run: [Spotify Web Helper] - C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-22] (Spotify Ltd)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Privat\AppData\Roaming\Mozilla\Firefox\Profiles\1vrvckw2.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\
FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros)
S2 MainLSyncHost; c:\windows\syswow64\mpk\lsynchost.exe /startedbyscm:E4233B4F-40E3FE91-MPKService [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-09-05] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-04 20:10 - 2014-02-04 20:10 - 00016716 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-04 20:09 - 2014-02-04 20:10 - 00000000 ____D () C:\FRST
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:23 - 2014-02-04 15:24 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:02 - 2014-02-01 23:13 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:57 - 2014-02-01 22:59 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:30 - 2013-09-25 10:00 - 24122448 _____ () C:\Users\Privat\Downloads\data2.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 01038474 _____ () C:\Users\Privat\Downloads\data1.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 00470282 _____ () C:\Users\Privat\Downloads\setup.ibt
2014-02-01 18:30 - 2013-09-25 10:00 - 00221608 _____ () C:\Users\Privat\Downloads\setup.inx
2014-02-01 18:30 - 2013-09-25 10:00 - 00035918 _____ () C:\Users\Privat\Downloads\data1.hdr
2014-02-01 18:30 - 2013-09-25 10:00 - 00000571 _____ () C:\Users\Privat\Downloads\setup.ini
2014-02-01 18:30 - 2013-09-25 10:00 - 00000455 _____ () C:\Users\Privat\Downloads\layout.bin
2014-02-01 18:30 - 2005-04-07 01:39 - 00543481 _____ () C:\Users\Privat\Downloads\engine32.cab
2014-02-01 18:30 - 2005-04-07 01:39 - 00121064 _____ (Macrovision Corporation) C:\Users\Privat\Downloads\setup.exe
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 18:19 - 2012-10-31 18:33 - 01089536 _____ (eHelp Corporation.) C:\WINDOWS\SysWOW64\ROBOEX32.DLL
2014-02-01 17:42 - 2014-02-01 17:54 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2009-12-08 11:38 - 00482408 _____ () C:\WINDOWS\SSndii.exe
2014-01-30 16:21 - 2014-01-30 16:22 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:21 - 2011-06-10 04:12 - 00143872 _____ () C:\WINDOWS\Wiainst64.exe
2014-01-30 16:21 - 2009-10-28 16:20 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00038160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00021776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2a.dll
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:28 - 2014-01-24 14:29 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 21:59 - 2014-01-16 21:59 - 00007609 _____ () C:\Users\Privat\AppData\Local\Resmon.ResmonCfg
2014-01-15 13:22 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 13:22 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 13:22 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:22 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 13:22 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:22 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 13:22 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 13:22 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-15 13:21 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 13:21 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 13:21 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-13 16:18 - 2014-01-13 16:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\vlc
2014-01-13 16:11 - 2014-01-13 16:11 - 00000000 ____D () C:\Program Files\VideoLAN

==================== One Month Modified Files and Folders =======

2014-02-04 20:10 - 2014-02-04 20:10 - 00016716 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-04 20:10 - 2014-02-04 20:09 - 00000000 ____D () C:\FRST
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 20:08 - 2013-11-18 16:34 - 00003910 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A3C910-9215-4799-AA30-A0E69A1944FC}
2014-02-04 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-04 19:21 - 2013-05-13 15:36 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-04 18:59 - 2013-05-07 19:49 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2655131690-4078058458-1964768521-1002
2014-02-04 17:12 - 2013-05-14 20:35 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Dropbox
2014-02-04 17:08 - 2013-05-14 20:39 - 00000000 ___RD () C:\Users\Privat\Dropbox
2014-02-04 15:36 - 2013-10-28 12:43 - 01581992 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-04 15:31 - 2012-09-23 09:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:24 - 2014-02-04 15:23 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-04 15:24 - 2013-05-13 14:42 - 00000000 ____D () C:\ProgramData\Apple
2014-02-04 15:20 - 2013-05-07 19:44 - 00000423 _____ () C:\Users\Privat\AppData\Roaming\sp_data.sys
2014-02-04 15:19 - 2013-10-28 12:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-04 15:19 - 2013-09-29 20:04 - 00041738 _____ () C:\WINDOWS\PFRO.log
2014-02-04 15:19 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-04 15:19 - 2013-08-22 15:44 - 00370496 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-04 15:19 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-04 15:09 - 2013-05-13 14:43 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Apple Computer
2014-02-04 15:09 - 2013-05-13 14:42 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-04 15:08 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-02-04 11:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-04 10:43 - 2013-12-04 18:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Spotify
2014-02-03 19:22 - 2013-12-04 18:02 - 00000000 ____D () C:\Users\Privat\AppData\Local\Spotify
2014-02-02 11:35 - 2013-10-28 12:48 - 00000000 ____D () C:\Users\Privat
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:13 - 2014-02-01 23:02 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:59 - 2014-02-01 22:57 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:22 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-01 18:22 - 2013-09-30 04:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-01 18:22 - 2013-09-30 04:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-01 18:21 - 2013-08-22 15:46 - 00361301 _____ () C:\WINDOWS\setupact.log
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 17:54 - 2014-02-01 17:42 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2014-01-30 16:21 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:31 - 2013-05-07 19:43 - 00000000 ___RD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 14:29 - 2014-01-24 14:28 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:55 - 2013-12-16 13:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 13:54 - 2013-07-04 11:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-19 19:30 - 2013-08-13 22:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-19 19:29 - 2013-05-08 23:06 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-19 16:57 - 2013-07-27 13:03 - 00000000 ____D () C:\Users\Privat\Desktop\Daten
2014-01-19 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-18 16:55 - 2013-05-14 20:37 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 21:59 - 2014-01-16 21:59 - 00007609 _____ () C:\Users\Privat\AppData\Local\Resmon.ResmonCfg
2014-01-14 00:30 - 2013-05-13 14:43 - 00000000 ____D () C:\Users\Privat\AppData\Local\Apple Computer
2014-01-13 16:27 - 2014-01-13 16:18 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\vlc
2014-01-13 16:11 - 2014-01-13 16:11 - 00000000 ____D () C:\Program Files\VideoLAN
2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe


Some content of TEMP:
====================
C:\Users\Privat\AppData\Local\Temp\avgnt.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\_isAED4.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-04 18:59

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014
Ran by Privat at 2014-02-04 20:10:25
Running from C:\Users\Privat\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 3.8.142.61628 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.8.142.61628 - Alcor Micro Corp.) Hidden
Apple Application Support (x32 Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ASUS Instant Connect (x32 Version: 1.2.8 - ASUS)
ASUS Instant Key (x32 Version: 1.0.5 - ASUS)
ASUS InstantOn (x32 Version: 3.0.2 - ASUS)
ASUS LifeFrame3 (x32 Version: 3.1.5 - ASUS)
ASUS Live Update (x32 Version: 3.1.8 - ASUS)
ASUS Power4Gear Hybrid (Version: 2.0.4 - ASUS)
ASUS Smart Gesture (x32 Version: 1.0.35 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.03.0004 - ASUS)
ASUS USB Charger Plus (x32 Version: 2.1.4 - ASUS)
ASUS Video Magic (x32 Version: 6.0.4712 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.4712 - CyberLink Corp.) Hidden
ASUS WebStorage Sync Agent (x32 Version: 1.1.18.159 - ASUS Cloud Corporation)
ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (x32 Version: 2.0.12.309 - ASUSTEK)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.1.0.7 - Atheros Communications Inc.)
ATK Package (x32 Version: 1.0.0022 - ASUS)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Creo Direct Version 2.0 Datecode [M030] (x32 Version: 2.0 - PTC)
Creo Layout Version 2.0 Datecode [M030] (x32 Version: 2.0 - PTC)
Creo Parametric Version 2.0 Datecode [M030] (x32 Version: 2.0 - PTC)
Creo Platform 2.11 (x32 Version: 2.11.1 - PTC)
Creo Simulate Version 2.0 Datecode [M030] (x32 Version: 2.0 - PTC)
Creo Thumbnail Viewer 2.0 (Version: 30.12.360 - PTC)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3019_44673 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3019_44673 - CyberLink Corp.) Hidden
CyberLink PowerDirector (x32 Version: 8.0.4905d - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.4905d - CyberLink Corp.) Hidden
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3308 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
iTunes (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Landwirtschafts Simulator 2013 (x32 Version: 1.0 - GIANTS Software)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MKS Platform Components 9.x (Version: 9.3.0000 - Mortice Kern Systems)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Naviextras Toolbox (x32 Version: 3.18.1.358123 - NNG Llc.)
Naviextras Toolbox Prerequesities (x32 Version: 1.0.0 - NNG Llc.)
NVIDIA 3D Vision Treiber 327.02 (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0613 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.12.0613 (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2702 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
PixiePack Codec Pack (x32 Version: 1.1.1200.0 - None)
PTC Portmapper Version 2.0 Datecode [M030] (x32 Version: 2.0 - PTC)
PTC Quality Agent (x32 Version: 2.0.0.0 - PTC)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.206 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0 - Qualcomm Atheros)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710 - Realtek Semiconductor Corp.)
REFLEX Modellflugsimulator (x32 Version:  - Dipl.-Ing. Stefan Kunde)
Samsung Scan Assistant (x32 Version: 1.04.22.00 - Samsung Electronics Co., Ltd.)
Samsung SCX-3200 Series (x32 Version:  - Samsung Electronics Co., Ltd.)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Spotify (HKCU Version: 0.9.7.16.g4b197456 - Spotify AB)
Tunebite (x32 Version: 6.0.31728.2500 - RapidSolution Software AG)
VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN)
Windows-Treiberpaket - ASUS (ATP) Mouse  (10/29/2012 1.0.0.148) (Version: 10/29/2012 1.0.0.148 - ASUS)
WinFlash (x32 Version: 2.41.1 - ASUS)

==================== Restore Points  =========================

18-01-2014 16:45:18 Windows Update
21-01-2014 12:54:15 Installed Java 7 Update 51
24-01-2014 13:30:35 OpenOffice 4.0.1 wird installiert
30-01-2014 15:22:19 Installiert InstallShield Wiederherstellungspunkt
01-02-2014 17:19:27 Installiert Falk Navi-Manager
04-02-2014 14:05:38 Removed Apple Application Support

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23B154BD-6040-4B26-A894-F22F6C654CA4} - System32\Tasks\BtvStack => C:\Program
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3913F18D-3BD4-40DF-BA02-CBA22A080010} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-07-25] (ASUSTeK Computer Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {49AE687E-3572-4D96-98FA-B0FF8A48D458} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-10-31] (AsusTek)
Task: {54B9CBAD-F148-4A49-B44C-0089F1E2B897} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5B9F6DC2-B8FA-4879-93FF-FF52C83C7EF8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B4AF4100-B722-4980-8719-AEA0F9032FE0} - System32\Tasks\BtTray => C:\Program
Task: {BF75453A-D201-42B3-9807-DAE209C65766} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {C1B42ED5-8EC1-4A5B-A9B0-5DA663EF4BFC} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2012-09-27] ()
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D7FA52E3-EF2F-4EE6-878E-A7253915C399} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-19] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FB448EDF-1BD1-4CF6-8199-7813A43FE6A3} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-08-10 18:28 - 2012-08-10 18:28 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-08-10 18:23 - 2012-08-10 18:23 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2012-08-24 17:26 - 2012-08-24 17:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-05-07 21:34 - 2013-01-25 09:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-08-24 17:17 - 2012-08-24 17:17 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2014-01-30 16:22 - 2009-11-19 13:10 - 01384520 _____ () C:\Windows\twain_32\Samsung\SCX3200\ssole.dll
2013-12-21 17:30 - 2013-12-21 17:30 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-09-23 09:29 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Privat\AppData\Roaming\Dropbox\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4) (User: )
Description: NuTCRACKER configuration not found in registry. Using default limits for system resources. [nutsrv4.exe (ncshm.cpp:702) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4) (User: )
Description: NuTCRACKER configuration not found in registry. Using default limits for system resources. [nutsrv4.exe (ncshm.cpp:731) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4) (User: )
Description: NuTCRACKER configuration not found in registry. Using default limits for system resources. [nutsrv4.exe (ncshm.cpp:765) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4) (User: )
Description: NuTCRACKER configuration not found in registry. Using default limits for system resources. [nutsrv4.exe (ncshm.cpp:803) PID=2520 TID=2596]

Error: (02/04/2014 03:07:17 PM) (Source: Microsoft-Windows-RestartManager) (User: PC)
Description: Die Anwendung oder der Dienst "Apple Mobile Device" konnte nicht neu gestartet werden.

Error: (02/04/2014 03:04:56 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT)
Description: There was an error communicating to the Orion inference server

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3219

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3219

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/04/2014 01:34:49 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2109


System errors:
=============
Error: (02/04/2014 07:00:11 PM) (Source: DCOM) (User: PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (02/04/2014 03:23:38 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/04/2014 03:22:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (02/04/2014 03:22:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/04/2014 03:19:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Local Synchronization Host" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (02/04/2014 03:19:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/04/2014 03:19:51 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.

Error: (02/04/2014 03:07:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/04/2014 03:07:17 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device erreicht.

Error: (02/04/2014 03:06:32 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4)(User: )
Description: [nutsrv4.exe (ncshm.cpp:702) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4)(User: )
Description: [nutsrv4.exe (ncshm.cpp:731) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4)(User: )
Description: [nutsrv4.exe (ncshm.cpp:765) PID=2520 TID=2596]

Error: (02/04/2014 03:19:59 PM) (Source: NuTCRACKER 4)(User: )
Description: [nutsrv4.exe (ncshm.cpp:803) PID=2520 TID=2596]

Error: (02/04/2014 03:07:17 PM) (Source: Microsoft-Windows-RestartManager)(User: PC)
Description: 0AppleMobileDeviceService.exeApple Mobile Device03026217821520

Error: (02/04/2014 03:04:56 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT)
Description: -2143485934

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3219

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3219

Error: (02/04/2014 01:34:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/04/2014 01:34:49 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2109


==================== Memory info ===========================

Percentage of memory in use: 29%
Total physical RAM: 8077.54 MB
Available physical RAM: 5669.27 MB
Total Pagefile: 9357.54 MB
Available Pagefile: 6293.55 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:372.26 GB) (Free:320.73 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:537.9 GB) (Free:537.75 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 4B834568)

Partition: GPT Partition Type
==================== End Of Log ============================

schrauber 05.02.2014 13:04
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

A3_TDI 06.02.2014 19:28
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.06.06

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
Privat :: PC [Administrator]

06.02.2014 19:04:33
mbam-log-2014-02-06 (19-04-33).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 237037
Laufzeit: 3 Minute(n), 57 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Privat\Downloads\refog_personal_monitor.exe (Keylogger.Refog) -> Keine Aktion durchgeführt.

(Ende)
Code:
# AdwCleaner v3.018 - Bericht erstellt am 06/02/2014 um 19:13:30
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Privat - PC
# Gestartet von : C:\Users\Privat\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Privat\AppData\Roaming\Mozilla\Firefox\Profiles\1vrvckw2.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [772 octets] - [06/02/2014 19:12:56]
AdwCleaner[S0].txt - [694 octets] - [06/02/2014 19:13:30]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [753 octets] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 8.1 x64
Ran by Privat on 06.02.2014 at 19:18:11,93
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Failed to delete: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Privat\AppData\Roaming\mozilla\firefox\profiles\1vrvckw2.default\minidumps [13 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.02.2014 at 19:20:36,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by Privat (administrator) on PC on 06-02-2014 19:22:27
Running from C:\Users\Privat\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Spotify Ltd) C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16470_none_fa2491fd9b3cfcb2\TiWorker.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Privat\Downloads\FRST64(2).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [NuTCSetupEnviron] - C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SCX3200_Scan2Pc] - C:\WINDOWS\Twain_32\Samsung\SCX3200\Scan2pc.exe [1990144 2011-06-21] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1002\...\Run: [Spotify Web Helper] - C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-22] (Spotify Ltd)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Privat\AppData\Roaming\Mozilla\Firefox\Profiles\1vrvckw2.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\
FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros)
S2 MainLSyncHost; c:\windows\syswow64\mpk\lsynchost.exe /startedbyscm:E4233B4F-40E3FE91-MPKService [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-09-05] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-06 19:21 - 2014-02-06 19:21 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(2).exe
2014-02-06 19:20 - 2014-02-06 19:20 - 00000814 _____ () C:\Users\Privat\Desktop\JRT.txt
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-06 19:17 - 2014-02-06 19:17 - 01037530 _____ (Thisisu) C:\Users\Privat\Downloads\JRT.exe
2014-02-06 19:11 - 2014-02-06 19:13 - 00000000 ____D () C:\AdwCleaner
2014-02-06 19:11 - 2014-02-06 19:11 - 01166132 _____ () C:\Users\Privat\Downloads\adwcleaner.exe
2014-02-06 19:01 - 2014-02-06 19:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00001127 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-06 19:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-02-06 18:59 - 2014-02-06 18:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Privat\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-06 18:55 - 2014-02-06 18:55 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(1).exe
2014-02-04 20:10 - 2014-02-06 19:22 - 00015527 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-04 20:10 - 2014-02-04 20:10 - 00020709 _____ () C:\Users\Privat\Downloads\Addition.txt
2014-02-04 20:09 - 2014-02-06 19:21 - 00000000 ____D () C:\FRST
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:23 - 2014-02-04 15:24 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:02 - 2014-02-01 23:13 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:57 - 2014-02-01 22:59 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:30 - 2013-09-25 10:00 - 24122448 _____ () C:\Users\Privat\Downloads\data2.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 01038474 _____ () C:\Users\Privat\Downloads\data1.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 00470282 _____ () C:\Users\Privat\Downloads\setup.ibt
2014-02-01 18:30 - 2013-09-25 10:00 - 00221608 _____ () C:\Users\Privat\Downloads\setup.inx
2014-02-01 18:30 - 2013-09-25 10:00 - 00035918 _____ () C:\Users\Privat\Downloads\data1.hdr
2014-02-01 18:30 - 2013-09-25 10:00 - 00000571 _____ () C:\Users\Privat\Downloads\setup.ini
2014-02-01 18:30 - 2013-09-25 10:00 - 00000455 _____ () C:\Users\Privat\Downloads\layout.bin
2014-02-01 18:30 - 2005-04-07 01:39 - 00543481 _____ () C:\Users\Privat\Downloads\engine32.cab
2014-02-01 18:30 - 2005-04-07 01:39 - 00121064 _____ (Macrovision Corporation) C:\Users\Privat\Downloads\setup.exe
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 18:19 - 2012-10-31 18:33 - 01089536 _____ (eHelp Corporation.) C:\WINDOWS\SysWOW64\ROBOEX32.DLL
2014-02-01 17:42 - 2014-02-01 17:54 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2009-12-08 11:38 - 00482408 _____ () C:\WINDOWS\SSndii.exe
2014-01-30 16:21 - 2014-01-30 16:22 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:21 - 2011-06-10 04:12 - 00143872 _____ () C:\WINDOWS\Wiainst64.exe
2014-01-30 16:21 - 2009-10-28 16:20 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00038160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00021776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2a.dll
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:28 - 2014-01-24 14:29 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-16 21:59 - 2014-01-16 21:59 - 00007609 _____ () C:\Users\Privat\AppData\Local\Resmon.ResmonCfg
2014-01-15 13:22 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-15 13:22 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-15 13:22 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:22 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-15 13:22 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-15 13:22 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-15 13:22 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-15 13:22 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-15 13:21 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-15 13:21 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-15 13:21 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-13 16:18 - 2014-01-13 16:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\vlc
2014-01-13 16:11 - 2014-01-13 16:11 - 00000000 ____D () C:\Program Files\VideoLAN

==================== One Month Modified Files and Folders =======

2014-02-06 19:22 - 2014-02-04 20:10 - 00015527 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-06 19:22 - 2014-02-04 20:09 - 00000000 ____D () C:\FRST
2014-02-06 19:21 - 2014-02-06 19:21 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(2).exe
2014-02-06 19:21 - 2013-05-13 15:36 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-06 19:20 - 2014-02-06 19:20 - 00000814 _____ () C:\Users\Privat\Desktop\JRT.txt
2014-02-06 19:19 - 2013-10-28 12:43 - 01674785 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-06 19:17 - 2014-02-06 19:17 - 01037530 _____ (Thisisu) C:\Users\Privat\Downloads\JRT.exe
2014-02-06 19:16 - 2013-11-18 16:34 - 00003910 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A3C910-9215-4799-AA30-A0E69A1944FC}
2014-02-06 19:15 - 2013-05-07 19:44 - 00000423 _____ () C:\Users\Privat\AppData\Roaming\sp_data.sys
2014-02-06 19:14 - 2013-10-28 12:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 19:14 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-06 19:13 - 2014-02-06 19:11 - 00000000 ____D () C:\AdwCleaner
2014-02-06 19:11 - 2014-02-06 19:11 - 01166132 _____ () C:\Users\Privat\Downloads\adwcleaner.exe
2014-02-06 19:06 - 2013-05-07 19:49 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2655131690-4078058458-1964768521-1002
2014-02-06 19:01 - 2014-02-06 19:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00001127 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-06 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-06 18:59 - 2014-02-06 18:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Privat\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-06 18:55 - 2014-02-06 18:55 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(1).exe
2014-02-04 20:21 - 2013-05-13 15:36 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-04 20:10 - 2014-02-04 20:10 - 00020709 _____ () C:\Users\Privat\Downloads\Addition.txt
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 17:12 - 2013-05-14 20:35 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Dropbox
2014-02-04 17:08 - 2013-05-14 20:39 - 00000000 ___RD () C:\Users\Privat\Dropbox
2014-02-04 15:31 - 2012-09-23 09:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:24 - 2014-02-04 15:23 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-04 15:24 - 2013-05-13 14:42 - 00000000 ____D () C:\ProgramData\Apple
2014-02-04 15:19 - 2013-09-29 20:04 - 00041738 _____ () C:\WINDOWS\PFRO.log
2014-02-04 15:19 - 2013-08-22 15:44 - 00370496 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-04 15:19 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-04 15:09 - 2013-05-13 14:43 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Apple Computer
2014-02-04 15:09 - 2013-05-13 14:42 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-04 15:08 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-02-04 11:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-04 10:43 - 2013-12-04 18:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Spotify
2014-02-03 19:22 - 2013-12-04 18:02 - 00000000 ____D () C:\Users\Privat\AppData\Local\Spotify
2014-02-02 11:35 - 2013-10-28 12:48 - 00000000 ____D () C:\Users\Privat
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:13 - 2014-02-01 23:02 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:59 - 2014-02-01 22:57 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:22 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-01 18:22 - 2013-09-30 04:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-01 18:22 - 2013-09-30 04:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-01 18:21 - 2013-08-22 15:46 - 00361301 _____ () C:\WINDOWS\setupact.log
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 17:54 - 2014-02-01 17:42 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2014-01-30 16:21 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:31 - 2013-05-07 19:43 - 00000000 ___RD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 14:29 - 2014-01-24 14:28 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:55 - 2013-12-16 13:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 13:54 - 2013-07-04 11:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-19 19:30 - 2013-08-13 22:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-19 19:29 - 2013-05-08 23:06 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-19 16:57 - 2013-07-27 13:03 - 00000000 ____D () C:\Users\Privat\Desktop\Daten
2014-01-19 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-18 16:55 - 2013-05-14 20:37 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 21:59 - 2014-01-16 21:59 - 00007609 _____ () C:\Users\Privat\AppData\Local\Resmon.ResmonCfg
2014-01-14 00:30 - 2013-05-13 14:43 - 00000000 ____D () C:\Users\Privat\AppData\Local\Apple Computer
2014-01-13 16:27 - 2014-01-13 16:18 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\vlc
2014-01-13 16:11 - 2014-01-13 16:11 - 00000000 ____D () C:\Program Files\VideoLAN

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe


Some content of TEMP:
====================
C:\Users\Privat\AppData\Local\Temp\avgnt.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\Quarantine.exe
C:\Users\Privat\AppData\Local\Temp\_isAED4.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-04 18:59

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

Muss dazusagen, der Refog Keylogger ist gewollt.

Die Addition Datei erstellt er mir nicht mehr.

schrauber 07.02.2014 17:09

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

A3_TDI 16.02.2014 20:02
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=166ff6ddd9586c4a9fb2ad19167a6fe6
# engine=17093
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-16 03:57:27
# local_time=2014-02-16 04:57:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=1799 16775165 100 96 8393 257989537 1163 0
# compatibility_mode=5893 16776574 100 94 12051645 17447540 0 0
# scanned=202822
# found=2
# cleaned=0
# scan_time=3973
sh=EB71F951F84B46B765FD462529EC5D35A0EBFE85 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Privat\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\499e76a2-5a72c8e4"
sh=9A756E71643051115F2BFC7BFAE0E4532FC6A5D7 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Privat\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\47bafca9-735eff69"
Code:
Results of screen317's Security Check version 0.99.79 
  x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
Avira Desktop     
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Java 7 Update 51 
 Adobe Flash Player        12.0.0.44 
 Adobe Reader XI 
 Mozilla Firefox (27.0.1)
````````Process Check: objlist.exe by Laurent```````` 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  %
````````````````````End of Log``````````````````````

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Privat (administrator) on PC on 16-02-2014 19:58:27
Running from C:\Users\Privat\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(MKS Software Inc.) C:\Windows\system32\nutsrv4.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Spotify Ltd) C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\McUICnt.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe
(Farbar) C:\Users\Privat\Downloads\FRST64(3).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-08-24] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [ASUS InstantKey] - C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2012-07-03] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [NuTCSetupEnviron] - C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SCX3200_Scan2Pc] - C:\WINDOWS\Twain_32\Samsung\SCX3200\Scan2pc.exe [1990144 2011-06-21] ()
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2655131690-4078058458-1964768521-1002\...\Run: [Spotify Web Helper] - C:\Users\Privat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-22] (Spotify Ltd)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Privat\AppData\Roaming\Mozilla\Firefox\Profiles\1vrvckw2.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [tunebite-firefox-surf-and-catch-extension@audials.com] - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\
FF Extension: Tunebite Firefox Surf and Catch Plugin - C:\Program Files (x86)\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ []
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-10] (Atheros)
S2 MainLSyncHost; c:\windows\syswow64\mpk\lsynchost.exe /startedbyscm:E4233B4F-40E3FE91-MPKService [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-09-05] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-16 19:57 - 2014-02-16 19:58 - 02152960 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(3).exe
2014-02-16 19:56 - 2014-02-16 19:56 - 00987425 _____ () C:\Users\Privat\Downloads\SecurityCheck.exe
2014-02-16 15:45 - 2014-02-16 15:45 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-16 15:44 - 2014-02-16 15:45 - 02347384 _____ (ESET) C:\Users\Privat\Downloads\esetsmartinstaller_enu.exe
2014-02-16 15:39 - 2014-02-16 15:39 - 00001949 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-16 15:39 - 2014-02-16 15:39 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-15 12:57 - 2014-02-15 12:57 - 00013314 _____ () C:\Users\Privat\Desktop\Kündigung Telekom.odt
2014-02-15 12:38 - 2014-02-15 12:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 07:09 - 2014-02-14 07:09 - 00000000 ____D () C:\Users\Privat\AppData\Local\captron_electronic_GmbH
2014-02-13 19:06 - 2014-02-13 19:06 - 00003073 _____ () C:\Users\Privat\Desktop\bavarianDEMON X-series.lnk
2014-02-13 19:06 - 2014-02-13 19:06 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\bavarianDEMON X-series
2014-02-13 19:06 - 2014-02-13 19:06 - 00000000 ____D () C:\Program Files (x86)\bavarianDEMON
2014-02-13 18:46 - 2014-02-13 18:47 - 09973624 _____ () C:\Users\Privat\Downloads\bavarianDEMON_X-series_6.4_setup.exe
2014-02-13 11:08 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-13 11:08 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-13 11:08 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-13 11:08 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-13 11:08 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-13 11:08 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-13 11:08 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-13 11:08 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-13 11:08 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-13 11:08 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-13 11:08 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-13 11:08 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-13 11:08 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 11:08 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-13 11:08 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-13 11:08 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-13 11:08 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-13 11:08 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-13 11:08 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-13 11:08 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-13 11:08 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-13 11:08 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-13 11:08 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-13 11:08 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-13 11:08 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-13 11:08 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-13 11:08 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-13 11:08 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-13 11:08 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-13 11:08 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-13 11:08 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-13 11:08 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-13 11:08 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-13 11:08 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-13 11:08 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-13 11:08 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-13 11:08 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-13 11:08 - 2014-01-07 06:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-13 11:08 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-13 11:08 - 2013-12-09 01:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-13 11:08 - 2013-12-09 01:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-13 11:08 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-13 11:08 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-13 11:08 - 2013-11-21 07:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-13 11:08 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-13 11:04 - 2014-01-04 21:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-02-13 11:04 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-02-13 11:04 - 2014-01-04 15:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-02-13 11:04 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-02-13 11:04 - 2014-01-04 14:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-02-13 11:04 - 2014-01-04 14:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-02-13 11:04 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-02-13 11:04 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-02-13 11:04 - 2014-01-03 00:54 - 00063488 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
2014-02-13 11:04 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-02-13 11:04 - 2013-12-21 03:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-02-13 11:03 - 2014-01-07 08:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-02-13 11:03 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-02-13 11:03 - 2013-12-20 11:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-02-13 11:03 - 2013-12-20 07:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-02-13 11:03 - 2013-12-09 03:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-13 11:03 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-13 11:02 - 2014-01-09 09:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-02-13 11:02 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-02-13 11:02 - 2014-01-09 08:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-02-13 11:02 - 2014-01-09 08:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-02-13 11:02 - 2014-01-09 08:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-02-13 11:02 - 2014-01-09 08:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-02-13 11:02 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-02-13 11:02 - 2014-01-09 08:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-02-13 11:02 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-02-13 11:02 - 2014-01-09 08:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-02-06 19:21 - 2014-02-06 19:21 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(2).exe
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-06 19:17 - 2014-02-06 19:17 - 01037530 _____ (Thisisu) C:\Users\Privat\Downloads\JRT.exe
2014-02-06 19:11 - 2014-02-06 19:13 - 00000000 ____D () C:\AdwCleaner
2014-02-06 19:11 - 2014-02-06 19:11 - 01166132 _____ () C:\Users\Privat\Downloads\adwcleaner.exe
2014-02-06 19:01 - 2014-02-06 19:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-06 18:59 - 2014-02-06 18:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Privat\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-06 18:55 - 2014-02-06 18:55 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(1).exe
2014-02-04 20:10 - 2014-02-16 19:58 - 00015655 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-04 20:10 - 2014-02-04 20:10 - 00020709 _____ () C:\Users\Privat\Downloads\Addition.txt
2014-02-04 20:09 - 2014-02-16 19:58 - 00000000 ____D () C:\FRST
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:25 - 2014-02-04 15:26 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:23 - 2014-02-04 15:24 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:02 - 2014-02-01 23:13 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:57 - 2014-02-01 22:59 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:30 - 2013-09-25 10:00 - 24122448 _____ () C:\Users\Privat\Downloads\data2.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 01038474 _____ () C:\Users\Privat\Downloads\data1.cab
2014-02-01 18:30 - 2013-09-25 10:00 - 00470282 _____ () C:\Users\Privat\Downloads\setup.ibt
2014-02-01 18:30 - 2013-09-25 10:00 - 00221608 _____ () C:\Users\Privat\Downloads\setup.inx
2014-02-01 18:30 - 2013-09-25 10:00 - 00035918 _____ () C:\Users\Privat\Downloads\data1.hdr
2014-02-01 18:30 - 2013-09-25 10:00 - 00000571 _____ () C:\Users\Privat\Downloads\setup.ini
2014-02-01 18:30 - 2013-09-25 10:00 - 00000455 _____ () C:\Users\Privat\Downloads\layout.bin
2014-02-01 18:30 - 2005-04-07 01:39 - 00543481 _____ () C:\Users\Privat\Downloads\engine32.cab
2014-02-01 18:30 - 2005-04-07 01:39 - 00121064 _____ (Macrovision Corporation) C:\Users\Privat\Downloads\setup.exe
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 18:19 - 2012-10-31 18:33 - 01089536 _____ (eHelp Corporation.) C:\WINDOWS\SysWOW64\ROBOEX32.DLL
2014-02-01 17:42 - 2014-02-01 17:54 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2009-12-08 11:38 - 00482408 _____ () C:\WINDOWS\SSndii.exe
2014-01-30 16:21 - 2014-01-30 16:22 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:21 - 2011-06-10 04:12 - 00143872 _____ () C:\WINDOWS\Wiainst64.exe
2014-01-30 16:21 - 2009-10-28 16:20 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00038160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2r.dll
2014-01-30 16:21 - 2009-10-28 16:20 - 00021776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml2a.dll
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:28 - 2014-01-24 14:29 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log

==================== One Month Modified Files and Folders =======

2014-02-16 19:58 - 2014-02-16 19:57 - 02152960 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(3).exe
2014-02-16 19:58 - 2014-02-04 20:10 - 00015655 _____ () C:\Users\Privat\Downloads\FRST.txt
2014-02-16 19:58 - 2014-02-04 20:09 - 00000000 ____D () C:\FRST
2014-02-16 19:56 - 2014-02-16 19:56 - 00987425 _____ () C:\Users\Privat\Downloads\SecurityCheck.exe
2014-02-16 19:47 - 2013-11-18 16:34 - 00003910 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A3C910-9215-4799-AA30-A0E69A1944FC}
2014-02-16 19:21 - 2013-05-13 15:36 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-02-16 19:09 - 2013-10-28 12:43 - 01235540 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-16 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-16 16:32 - 2013-05-07 19:49 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2655131690-4078058458-1964768521-1002
2014-02-16 15:45 - 2014-02-16 15:45 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-16 15:45 - 2014-02-16 15:44 - 02347384 _____ (ESET) C:\Users\Privat\Downloads\esetsmartinstaller_enu.exe
2014-02-16 15:39 - 2014-02-16 15:39 - 00001949 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-16 15:39 - 2014-02-16 15:39 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-16 15:37 - 2013-05-13 14:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 15:36 - 2013-05-07 19:44 - 00000423 _____ () C:\Users\Privat\AppData\Roaming\sp_data.sys
2014-02-15 12:57 - 2014-02-15 12:57 - 00013314 _____ () C:\Users\Privat\Desktop\Kündigung Telekom.odt
2014-02-15 12:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-02-15 12:38 - 2014-02-15 12:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 12:12 - 2013-10-28 12:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-15 12:12 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-14 07:11 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-02-14 07:11 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-02-14 07:10 - 2013-12-04 18:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Spotify
2014-02-14 07:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-02-14 07:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-02-14 07:10 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-02-14 07:09 - 2014-02-14 07:09 - 00000000 ____D () C:\Users\Privat\AppData\Local\captron_electronic_GmbH
2014-02-14 07:08 - 2013-05-14 20:39 - 00000000 ___RD () C:\Users\Privat\Dropbox
2014-02-14 07:08 - 2013-05-14 20:35 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Dropbox
2014-02-13 19:06 - 2014-02-13 19:06 - 00003073 _____ () C:\Users\Privat\Desktop\bavarianDEMON X-series.lnk
2014-02-13 19:06 - 2014-02-13 19:06 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\bavarianDEMON X-series
2014-02-13 19:06 - 2014-02-13 19:06 - 00000000 ____D () C:\Program Files (x86)\bavarianDEMON
2014-02-13 19:06 - 2012-09-23 09:35 - 00017140 _____ () C:\WINDOWS\DPINST.LOG
2014-02-13 18:47 - 2014-02-13 18:46 - 09973624 _____ () C:\Users\Privat\Downloads\bavarianDEMON_X-series_6.4_setup.exe
2014-02-13 12:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-02-12 23:36 - 2013-12-04 18:02 - 00000000 ____D () C:\Users\Privat\AppData\Local\Spotify
2014-02-09 14:46 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-09 14:46 - 2013-09-30 04:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-09 14:46 - 2013-09-30 04:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-06 19:21 - 2014-02-06 19:21 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(2).exe
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-06 19:17 - 2014-02-06 19:17 - 01037530 _____ (Thisisu) C:\Users\Privat\Downloads\JRT.exe
2014-02-06 19:13 - 2014-02-06 19:11 - 00000000 ____D () C:\AdwCleaner
2014-02-06 19:11 - 2014-02-06 19:11 - 01166132 _____ () C:\Users\Privat\Downloads\adwcleaner.exe
2014-02-06 19:01 - 2014-02-06 19:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Malwarebytes
2014-02-06 19:00 - 2014-02-06 19:00 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-06 18:59 - 2014-02-06 18:59 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Privat\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-06 18:55 - 2014-02-06 18:55 - 02082304 _____ (Farbar) C:\Users\Privat\Downloads\FRST64(1).exe
2014-02-06 13:16 - 2014-02-13 11:08 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 11:08 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 11:08 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-13 11:08 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 11:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 11:08 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 11:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 11:08 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-13 11:08 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 11:08 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 11:08 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 11:08 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 11:08 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 11:08 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 11:08 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 11:08 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 11:08 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 11:08 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 11:08 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 11:08 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 11:08 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 11:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 11:08 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-13 11:08 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 11:08 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 11:08 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-13 11:08 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-13 11:08 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 11:08 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 11:08 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 11:08 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 11:08 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 11:08 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 11:08 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 11:08 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 11:08 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 11:08 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-04 20:21 - 2013-05-13 15:36 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-04 20:10 - 2014-02-04 20:10 - 00020709 _____ () C:\Users\Privat\Downloads\Addition.txt
2014-02-04 20:09 - 2014-02-04 20:09 - 02080256 _____ (Farbar) C:\Users\Privat\Downloads\FRST64.exe
2014-02-04 15:31 - 2012-09-23 09:28 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-04 15:26 - 2014-02-04 15:26 - 00001797 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iTunes
2014-02-04 15:26 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\iPod
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files\Bonjour
2014-02-04 15:25 - 2014-02-04 15:25 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-02-04 15:24 - 2014-02-04 15:23 - 148904784 _____ (Apple Inc.) C:\Users\Privat\Downloads\iTunes64Setup.exe
2014-02-04 15:24 - 2013-05-13 14:42 - 00000000 ____D () C:\ProgramData\Apple
2014-02-04 15:19 - 2013-09-29 20:04 - 00041738 _____ () C:\WINDOWS\PFRO.log
2014-02-04 15:19 - 2013-08-22 15:44 - 00370496 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-02-04 15:09 - 2013-05-13 14:43 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Apple Computer
2014-02-04 15:09 - 2013-05-13 14:42 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-04 15:08 - 2012-08-17 01:53 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-02-02 11:35 - 2013-10-28 12:48 - 00000000 ____D () C:\Users\Privat
2014-02-01 23:27 - 2014-02-01 23:27 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\naviextras
2014-02-01 23:13 - 2014-02-01 23:02 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22(1).exe
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Naviextras
2014-02-01 23:01 - 2014-02-01 23:01 - 00000000 ____D () C:\Program Files (x86)\Naviextras
2014-02-01 22:59 - 2014-02-01 22:57 - 13766176 _____ (NNG Llc.) C:\Users\Privat\Downloads\Naviextras_Toolbox_Setup.exe
2014-02-01 18:21 - 2013-08-22 15:46 - 00361301 _____ () C:\WINDOWS\setupact.log
2014-02-01 18:20 - 2014-02-01 18:20 - 00000000 ____D () C:\Users\Privat\Documents\FalkData
2014-02-01 18:19 - 2014-02-01 18:19 - 00000000 ____D () C:\Users\Privat\Downloads\ag
2014-02-01 17:54 - 2014-02-01 17:42 - 26875678 _____ () C:\Users\Privat\Downloads\FaNaMa_2.22.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 16:23 - 2014-01-30 16:23 - 00000000 ____D () C:\Program Files (x86)\Scan Assistant
2014-01-30 16:22 - 2014-01-30 16:22 - 00000385 _____ () C:\WINDOWS\Samsung SCX-3200 Series.txt
2014-01-30 16:22 - 2014-01-30 16:22 - 00000139 _____ () C:\WINDOWS\SScanMgr.log
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\InstallShield
2014-01-30 16:22 - 2014-01-30 16:22 - 00000000 ____D () C:\Users\Privat\AppData\Local\S2PC
2014-01-30 16:22 - 2014-01-30 16:21 - 00000000 ____D () C:\Program Files (x86)\SamsungPrinterLiveUpdate
2014-01-30 16:21 - 2014-01-30 16:21 - 00000000 ____D () C:\WINDOWS\Samsung
2014-01-30 16:19 - 2014-01-30 16:19 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-01-24 14:33 - 2014-01-24 14:33 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\OpenOffice
2014-01-24 14:32 - 2014-01-24 14:32 - 00001208 _____ () C:\Users\Privat\Desktop\OpenOffice 4.0.1.lnk
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ___SD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-24 14:32 - 2014-01-24 14:32 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-01-24 14:31 - 2013-05-07 19:43 - 00000000 ___RD () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-24 14:29 - 2014-01-24 14:28 - 163606685 _____ () C:\Users\Privat\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-01-21 13:55 - 2013-12-16 13:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-21 13:54 - 2014-01-21 13:54 - 00005327 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-21 13:54 - 2013-07-04 11:06 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-19 19:30 - 2013-08-13 22:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-19 19:29 - 2013-05-08 23:06 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-01-19 16:57 - 2013-07-27 13:03 - 00000000 ____D () C:\Users\Privat\Desktop\Daten
2014-01-19 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-18 16:55 - 2013-05-14 20:37 - 00000000 ____D () C:\Users\Privat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe


Some content of TEMP:
====================
C:\Users\Privat\AppData\Local\Temp\avgnt.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Privat\AppData\Local\Temp\Quarantine.exe
C:\Users\Privat\AppData\Local\Temp\setup.exe
C:\Users\Privat\AppData\Local\Temp\_isAED4.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-15 12:46

==================== End Of Log ============================
--- --- ---


Die Addition Datei wurde wieder nicht erstellt.

Dachte eigentlich, jetzt würde alles wieder laufen, aber gestern kam wieder diese Meldung, außerdem ist es mir auch schon passiert, dass sich Porno Seiten von selbst öffnen. Der Rechner kommt mit teilweise immer noch langsam vor, genauso wie das Internet.

schrauber 17.02.2014 14:23
Und nur im Firefox, nicht im IE?


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:57 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19