Trojaner-Board - irgendwas legt mein antivierensystem lahm

vielen Dank für die schnelle antwort :)
hier die FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-07-2014

Ran by Lalita (administrator) on LALITA-PC on 22-07-2014 09:19:06

Running from C:\Users\Lalita\Desktop

Platform: Microsoft® Windows Vista™ Business  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 7

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(Lenovo) C:\Windows\System32\ibmpmsvc.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE

(Intel Corporation) C:\Program Files\Intel\AMT\atchksrv.exe

(Intel Corporation) C:\Program Files\Intel\AMT\LMS.exe

(Intel Corporation) C:\Program Files\Intel\AMT\UNS.exe

(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter 

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter 

HKU\S-1-5-21-4010562304-311137856-2809917867-1002\...\Run: [Facebook Update] => C:\Users\Lalita\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-18] (Facebook Inc.)

HKU\S-1-5-21-4010562304-311137856-2809917867-1002\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)

HKU\S-1-5-21-4010562304-311137856-2809917867-1002\...\MountPoints2: {f6d15678-e0b4-11e3-a70d-001c25189b76} - E:\USBAutoRun.exe

AlternateShell: 
 

==================== Internet (Whitelisted) ====================
 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} hxxp://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Lalita\AppData\Roaming\Mozilla\Firefox\Profiles\28cwpftx.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()

FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Lalita\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF SearchPlugin: C:\Users\Lalita\AppData\Roaming\Mozilla\Firefox\Profiles\28cwpftx.default\searchplugins\avira-safesearch.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Avira Browser Safety - C:\Users\Lalita\AppData\Roaming\Mozilla\Firefox\Profiles\28cwpftx.default\Extensions\abs@avira.com [2014-07-02]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-05-04]
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)

R2 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [176128 2009-11-30] (Intel Corporation) [File not signed]

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)

R2 LMS; C:\Program Files\Intel\AMT\LMS.exe [114688 2009-11-30] (Intel Corporation) [File not signed]

R2 UNS; C:\Program Files\Intel\AMT\UNS.exe [1458176 2009-11-30] (Intel Corporation) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-02-25] (Avira Operations GmbH & Co. KG)

S3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [81280 2007-06-08] (Lenovo)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-09] (Malwarebytes Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-25] (Avira GmbH)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]

S3 cpuz132; \??\C:\Users\user\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-22 09:19 - 2014-07-22 09:19 - 00007752 _____ () C:\Users\Lalita\Desktop\FRST.txt

2014-07-22 09:18 - 2014-07-22 09:19 - 00000000 ____D () C:\FRST

2014-07-22 09:17 - 2014-07-22 09:17 - 01080320 _____ (Farbar) C:\Users\Lalita\Desktop\FRST.exe

2014-07-09 11:45 - 2014-06-07 02:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 11:45 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 11:45 - 2014-05-30 08:53 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 11:45 - 2014-05-28 00:30 - 01177600 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 11:45 - 2014-05-28 00:30 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 11:45 - 2014-05-28 00:30 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 06119936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 03631616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00480256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-09 11:45 - 2014-05-28 00:29 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-09 11:45 - 2014-05-28 00:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll

2014-07-09 11:45 - 2014-05-27 23:00 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-07-09 11:45 - 2014-05-27 22:51 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-01 19:08 - 2014-07-01 19:08 - 00000000 ____D () C:\Users\Lalita\AppData\Local\Adobe

2014-06-27 16:33 - 2014-06-27 16:34 - 00000000 ____D () C:\Users\Lalita\radhika

2014-06-27 06:34 - 2014-06-27 06:34 - 00000146 _____ () C:\Windows\system32\Avira.OE.ServiceHost.log
 

==================== One Month Modified Files and Folders =======
 

2014-07-22 09:19 - 2014-07-22 09:19 - 00007752 _____ () C:\Users\Lalita\Desktop\FRST.txt

2014-07-22 09:19 - 2014-07-22 09:18 - 00000000 ____D () C:\FRST

2014-07-22 09:17 - 2014-07-22 09:17 - 01080320 _____ (Farbar) C:\Users\Lalita\Desktop\FRST.exe

2014-07-22 09:16 - 2006-11-02 14:47 - 00006272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-07-22 09:16 - 2006-11-02 14:47 - 00006272 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-07-22 07:48 - 2014-04-18 19:43 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002UA.job

2014-07-22 07:36 - 2012-07-25 14:17 - 01340530 _____ () C:\Windows\WindowsUpdate.log

2014-07-22 07:31 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-22 07:31 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc

2014-07-22 07:31 - 2006-11-02 12:22 - 51904512 _____ () C:\Windows\system32\config\components_previous

2014-07-22 07:31 - 2006-11-02 12:22 - 28049408 _____ () C:\Windows\system32\config\software_previous

2014-07-22 07:31 - 2006-11-02 12:22 - 14942208 _____ () C:\Windows\system32\config\system_previous

2014-07-22 07:31 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous

2014-07-22 07:31 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous

2014-07-22 07:31 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous

2014-07-22 07:30 - 2014-04-18 08:54 - 00000000 ____D () C:\Users\Lalita

2014-07-22 07:30 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool

2014-07-22 07:30 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration

2014-07-20 20:26 - 2010-10-13 09:41 - 00000012 _____ () C:\Windows\bthservsdp.dat

2014-07-20 20:26 - 2006-11-02 15:01 - 00032638 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-20 19:48 - 2014-04-18 19:43 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002Core.job

2014-07-16 07:35 - 2014-04-19 07:52 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-16 07:34 - 2014-04-19 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-16 07:34 - 2014-04-19 07:58 - 00000000 ____D () C:\Program Files\Avira

2014-07-10 06:23 - 2006-11-02 14:47 - 00228296 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-10 06:22 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-09 21:32 - 2014-04-21 09:20 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-09 21:31 - 2006-11-02 12:24 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-07-04 20:37 - 2006-11-02 12:33 - 01564930 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-03 19:05 - 2014-04-19 08:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:36 - 2006-11-02 14:52 - 00045832 _____ () C:\Windows\setupact.log

2014-07-01 19:08 - 2014-07-01 19:08 - 00000000 ____D () C:\Users\Lalita\AppData\Local\Adobe

2014-06-27 16:34 - 2014-06-27 16:33 - 00000000 ____D () C:\Users\Lalita\radhika

2014-06-27 06:34 - 2014-06-27 06:34 - 00000146 _____ () C:\Windows\system32\Avira.OE.ServiceHost.log

2014-06-23 06:52 - 2014-04-18 18:26 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-06-23 06:52 - 2014-04-18 18:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
 

Some content of TEMP:

====================

C:\Users\Lalita\AppData\Local\Temp\avgnt.exe

C:\Users\Lalita\AppData\Local\Temp\fp_pl_pfs_installer.exe

C:\Users\Lalita\AppData\Local\Temp\tmp9BD4.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-07-22 07:37
 

==================== End Of Log ============================

--- --- ---

und hier die Addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-07-2014

Ran by Lalita at 2014-07-22 09:19:46

Running from C:\Users\Lalita\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.2.159.1 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)

Adobe Reader X (10.1.4) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)

Avira (HKLM\...\{142be4a8-895b-4ed9-b1ff-11c76357e3df}) (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.17.31000 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)

Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)

Free YouTube to MP3 Converter version 3.12.38.530 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.38.530 - DVDVideoSoft Ltd.)

Intel(R) Active Management Technology Device Software (HKLM\...\MESOL) (Version:  - )

Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )

Intel(R) Management Engine Interface (HKLM\...\HECI) (Version:  - Intel Corporation)

Intel(R) PRO Network Connections Drivers (HKLM\...\PROSet) (Version:  - )

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)

RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.54.02 - )

SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.5510 - Analog Devices)

ThinkPad Modem (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588) (Version: 7.70.00 - )

ThinkPad Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.43 - )

ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.18.0 - )

TouchChip USB Driver 2.19 (Version: 2.19.0.0173 - UPEK Inc.) Hidden

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
 

==================== Restore Points  =========================
 

16-07-2014 05:38:29 Windows Update

17-07-2014 12:39:03 Geplanter Prüfpunkt

18-07-2014 08:21:46 Geplanter Prüfpunkt

19-07-2014 13:05:48 Geplanter Prüfpunkt

20-07-2014 11:14:42 Geplanter Prüfpunkt

21-07-2014 08:16:24 Geplanter Prüfpunkt

22-07-2014 05:28:06 Wiederherstellungsvorgang
 

==================== Hosts content: ==========================
 

2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0CAB7B68-718C-40E0-B83B-89DDF7007DC8} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries

Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2011-05-04] ()

Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)

Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {4CACCF04-4F12-4FFB-BC4A-485A36E1B1F2} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {563B4550-27A6-48BC-AB6C-AD47AEA04043} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002UA => C:\Users\Lalita\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-18] (Facebook Inc.)

Task: {82A79A84-7416-483E-A1D6-2D322FC3C729} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-19] (Microsoft Corporation)

Task: {9AEBE6B4-5E56-4D03-8432-66B0FF901CBF} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-19] (Microsoft Corporation)

Task: {B21474FF-CFB8-423F-AD73-82E94CE0482F} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)

Task: {BE1E599D-4308-4065-96A8-165B97B312FF} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002Core => C:\Users\Lalita\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-18] (Facebook Inc.)

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002Core.job => C:\Users\Lalita\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4010562304-311137856-2809917867-1002UA.job => C:\Users\Lalita\AppData\Local\Facebook\Update\FacebookUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-07-07 13:53 - 2014-07-07 13:53 - 00137296 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-07 13:52 - 2014-07-07 13:52 - 00065616 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-04-19 08:02 - 2014-07-07 13:53 - 00049744 _____ () C:\Users\Lalita\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-06-18 11:27 - 2014-06-18 11:27 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

2014-06-23 06:52 - 2014-06-23 06:52 - 17024688 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"=""
 

==================== EXE Association (whitelisted) =============
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (07/22/2014 07:40:05 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:39:20 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:39:02 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:38:06 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:37:50 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:36:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:36:23 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:35:49 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:35:36 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 

Error: (07/22/2014 07:35:04 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
 
 

System errors:

=============

Error: (07/22/2014 07:35:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Avira Echtzeit-Scanner4
 

Error: (07/22/2014 07:35:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Avira Echtzeit-Scanner3
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Avira Echtzeit-Scanner201Neustart des Diensts
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Avira Echtzeit-Scanner101Neustart des Diensts
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Ricoh xD-Picture Card Driver%%1058
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: rimsptsk%%1058
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: rimmptsk%%1058
 

Error: (07/22/2014 07:33:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Parallel port driver%%1058
 

Error: (07/22/2014 06:38:29 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Adobe Acrobat Update Service1
 

Error: (07/22/2014 06:31:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Ricoh xD-Picture Card Driver%%1058
 
 

Microsoft Office Sessions:

=========================

Error: (07/22/2014 07:40:05 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:39:20 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:39:02 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:38:06 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:37:50 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:36:47 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:36:23 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:35:49 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:35:36 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 

Error: (07/22/2014 07:35:04 AM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)

Description: 0x0
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-06-11 15:31:44.544

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-06-11 15:31:44.362

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-06-04 08:11:40.316

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-06-04 08:11:40.115

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-06-02 19:37:49.602

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-06-02 19:37:49.470

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-31 14:14:40.144

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-31 14:14:40.014

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-31 14:14:22.686

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-05-31 14:14:22.569

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\igdumdx32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 57%

Total physical RAM: 2005.53 MB

Available physical RAM: 846.3 MB

Total Pagefile: 4254.09 MB

Available Pagefile: 2776.79 MB

Total Virtual: 2047.88 MB

Available Virtual: 1906.71 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:74.53 GB) (Free:35.34 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 75 GB) (Disk ID: 525036ED)

Partition 1: (Active) - (Size=75 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

hoffe das ist jetzt richtig so